ROADMAP.md

Roadmap

ansible frontends

• semaphore: example playbook https://github.com/stefanux/ansible-role-semaphore (forked from morbidick.semaphore) focussing on manual install thulium_drake.ansible_semaphore / https://github.com/Thulium-Drake/ansible-role-ansible_semaphore (features package install)
• rundeck (maintainer needed)
• ansible automation platform (formerly: tower) -> provided by redhat for $$$, awx (opensource): manual instructions

*general nix config

• our baserole
• https://github.com/willshersystems/ansible-sshd
• unattended upgrades (for debian): https://github.com/hifis-net/ansible-collection-toolkit/tree/main/roles/unattended_upgrades

Backup

• bacula https://github.com/selfhostx/ansible/blob/main/roles/bacula
• bareos (veselahouba.bareos)
• Borg+Borgmatic (if maintainer is found)
• restic (if maintainer is found, candidate: https://codeberg.org/ansible-galaxy/ansible-role-backup)
• mysql/mariadb (-> geerlingguy.mysql )
  • fulldump (SQL statements):
    • mysqlbackup
  • other methods:
    • FIXME
• proxmox backup server (FIXME checkin Code)
• pfsense config (2DO https://github.com/pfsensible/core ?)
• opensense config (2DO https://github.com/ansibleguy/collection_opnsense https://github.com/Rosa-Luxemburgstiftung-Berlin/ansible-opnsense ?)
• etckeeper (if maintainer is found)

Git

• git (client) -> geerlingguy.git
• gitea ( -> maintainer needed)
• gitlab -> geerlingguy.gitlab

Filesystems

• ZFS
  • vanilla install (2DO, planned)
  • Pool management (create, by-id-devices via vars)
  • special-usecases:
    • Proxmox https://github.com/bashclub/proxmox-zfs-postinstall
    • Samba shadow-copies "Zamba" https://github.com/bashclub/zamba-lxc-toolbox/
  • ZFS autosnapshot
    • snapshot house-keeping: zfs-keep-and-clean https://github.com/bashclub/zfs-housekeeping
    • monitoring like check-zfs-replication https://github.com/bashclub/check-zfs-replication
• ceph (?)
• glusterfs (?)

Virtualization

• proxmox (including cloud-init) -> see role: compute_instance
  • VM management: https://github.com/mikaelflora/ansible-role-proxmox-vm
  • LXC
  • ansible dynamic inventory
  • balancing:
    • PVE Balance: https://github.com/PLUTEX/pve_balance
    • proxmox_migrate.py: https://github.com/HeinleinSupport/proxmox-tools/blob/master/proxmox_migrate.py
• libvirt+KVM (including cloud-init)
• apache cloudstack (for big installation beyond the scope of proxmox): https://github.com/ngine-io/ansible-collection-cloudstack
• ovirt? (if maintainer is found)
• debootstrap (if cloud-init is not wanted): https://github.com/nilsmeyer/ansible-debootstrap
• Container:
  • k3s (if maintainer is found)
  • k8s (if maintainer is found)
  • docker
    • installation geerlingguy.docker
    • registry
      • ...?
    • optional management tools:
      • portainer
      • traefik
• Cloud provider:
  • hetzner
  • digitalocean: https://github.com/jasonheecs/ansible-digitalocean-sample-playbook

Instant messenger

• mattermost
• matrix-synapse / element-web (if maintainer is found)
• rocket.chat (if maintainer is found)
• zulip (if maintainer is found)

Filesharing

• samba
  • standalone (2DO: merge shadowcopy + fruit from bashclub + ZFS) geerlingguy.samba
  • AD-member "zmb-member" https://github.com/bashclub/zamba-lxc-toolbox
• nextcloud (2DO: choose role)
  • https://github.com/JGoutin/ansible_home/tree/master/roles/nextcloud
  • https://galaxy.ansible.com/aalaesar/install_nextcloud / https://github.com/aalaesar/install_nextcloud
  • https://gitlab.com/mejo-/ansible-role-nextcloud
  • https://git.coop/webarch/nextcloud
• filestash (2DO)
• S3
  • minio
  • ceph RGW
• SSH sftpgo
• SeaweedFS (if maintainer is found)
• OpenMediaVault / TrueNAS Core? (if maintainer is found)

Webserver

• nginx nginx_common
  • reverse-proxy ( geerlingguy.nginx ?)
• caddy (2DO)
• apache ( -> geerlingguy.apache )
  • apache only (simple static sites)
  • redirector
  • LAMP (-> geerlingguy.php geerlingguy.php-versions )
    • mod_php
    • php-fpm (2DO)
• All-in-one-packages
  • froxlor (FIXME Code ready or 2.0: https://codeberg.org/ansible-galaxy/ansible-role-froxlor)
  • ispconfig (maintainer needed)

TLS-cert + CA-management

• letsencrypt
  • certbot -> https://github.com/selfhostx/ansible-role-certbot
  • helper-scripte -> deploy_hook (FIXME code commit)
• certificate distribution
  • own certs (individual, wildcards) -> Code available
  • vaulted files via sops https://github.com/mozilla/sops ? 2DO)
• internal CAs:
  • create certs for hosts -> 2DO
  • distribute CAs (is implemented in baserole)

E-Mail

• mailserver
  • dovecot + postfix (2DO)
    • stand-alone
    • backends like LDAP
  • mailcow (-> mailcow.mailcow Example playbook) easy-to-use-package with dovecot, postfix, SOGo, rspamd, clamav and supports DKIM
  • imapsync ( https://www.bachmann-lan.de/imapsync-unter-debian-11-installieren/ )?
• groupware
  • kopano (maintainer needed)
  • zimbra (maintainer needed)
  • nextcloud or mailcow have a basic functions
• local mailrelay ("satellite")-setup for cron etc.
  • postfix mailrelay -> can use any SMTP-accounts (2DO include examples for microsoft365, google, a few common providers)
• archiving
  • (mail-)piler (maintainer needed)
• spamfiltering
  • rspamd (need redis)
  • spamassassin/policy-weightd/postgrey
• newsletter: mailman, listmonk, mautic (more a CRM), ...?

VPN

• openvpn
• wireguard
  • p2p ( githubixx.ansible_role_wireguard https://github.com/githubixx/ansible-role-wireguard ? )
  • server/client
• ipsec strongswan (2DO, but low prio because usually this is done on firewalls and wireguard is simpler)
• (stunnel -> needed?)

DHCP

• kea-DHCP standalone (2DO) included in pfsense/opnsense
• ISC dhcp (EOL)

DNS

• self-hosted:
  • recursive
    • dnsdist (-> powerdns.dnsdist ) + powerDNS-recursor (-> powerdns.pdns_recursor) (clustering: keepalived, csync2-sync of certificates when letsencrypt is used, nginx-reverse-proxy for statuspage), including DoT (DNS over TLS)
    • bind (2DO -> maintainer needed)
    • unbound (2DO -> maintainer needed)
  • autoritative
    • PowerDNS Authoritative (-> powerdns.pdns )
    • bind -> 2DO: maintainer needed
  • adfiltering
    • powerdns with filtering (lua-based): https://gist.github.com/stefanux/8d3741e2faf8d463c95ff28bd7989261 (2DO: release Code)
    • pihole?
    • adguard home?
• DNS (external service):
  • hetzner oder hosttech via https://github.com/ansible-collections/community.dns
  • inwx.de (because they offer official ansible-support, dnssec, anycast and API)
    • inwx playbook examples
    • zone-management on inwx (request creation of a API-account via support-ticket!)
  • netcup https://docs.ansible.com/ansible/latest/collections/community/general/netcup_dns_module.html
  • cloudflare https://docs.ansible.com/ansible/latest/collections/community/general/cloudflare_dns_module.html
  • AWS/Route53?
  • ...?

Database

• mysql (limited distribution-support or use packages from oracle?; community.mysql )
• mariadb
  • standalone
  • galera ( -> mrlesmithjr.mariadb_galera_cluster - tested, good, active maintenance )
• PostgreSQL ( -> geerlingguy.postgresql )
• management-tools:
  • phpmyadmin
  • phpPgAdmin

Monitoring

• zabbix ( community.zabbix https://github.com/ansible-collections/community.zabbix -> active development, good code)
  • checks/templates: see our role with various zabbix checks
• Uptime Kuma (for SoHo or extra monitoring - include simple statuspage) -> roles/uptimekuma
• checkmk: checkmk.general -> 2DO testing
• icinga(2) (maintainer needed)
• statuspages: Uptime Kuma, https://github.com/valeriansaliou/vigil, cachet, cstate, ... -> need maintainers

User directory

• keycloak
• LDAP?
  • Samba
  • 389dir
  • UCS univention
  • SSSD integration on system
• ...?

Firewall

• opnsense
• pfsense
• hostfirewall
  • iptables/nftables -> geerlingguy.firewall (maybe iptables-persistent ?)
  • ufw Proxy
• tinyproxy juju4.tinyproxy
• squid (maintainer needed)

Clustering

• keepalived -> evrardjp.keepalived
• Filesync:
  • csync2
  • unison (?)

Reverse-Proxy/Loadbalancer:

• self-hosted:
  • haproxy (various roles available; config mgmt: https://opendev.org/openstack/kolla-ansible/src/branch/master/ansible/roles/haproxy-config )
  • nginx proxy manager GUI (needs docker)
  • nginx reverse proxy (vanilla)
  • apache mod_proxy (maintainer needed)
• managed (via API):
  • hetzner LB
  • ...?

package management

• build: fpm (effing package manager) -> Link playbook
• host repository:
  • deb: aptly? FIXME
  • rpm: FIXME

Log-aggregation

• grafana loki (FIXME release code)
• graylog

Python

• PIP -> geerlingguy.pip

Apps

• Videoconference
  • opentalk (still beta)
  • bbb ( https://github.com/juanluisbaptiste/ansible-bigbluebutton )
  • jitsi via docker (but usage discouraged due to limitations, over-complex architecture and bad documentation)
• Wiki
  • dokuwiki
  • xwiki (2DO code)
  • wiki.js? (2Do: maintainer needed; -> https://github.com/supertarto/ansible-wikijs ?)
  • bookstack (2Do: maintainer needed)
  • mediawiki (2Do: maintainer needed)
• Netbox (IPAM/IT Asset Management)
• Piwik (2DO)
• passwordmanager
  • vaultwarden
  • hashicorp vault (2DO maintainer needed)?
  • privacyIDEA (2DO maintainer needed)
• roundcube webmail (refactor Code)
• Ticketsystems
  • Zammad
• kimai2 (timetracking)
• joplin (note taking application; 2DO maintainer needed)

candidates

• Guacamole (remote desktop gateway)
• Rustdesk (remote control)
• doodle-clones (dudle, framadate, ...)
• etherpad
• jellyfin / emby?
• limesurvey
• mastodon (twitter-alternative)
• nodebb
• peertube
• teamspeak / mumble
• kanban-boards (trello style): wekan? focalboard? planka?
• whiteboard https://github.com/cracker0dks/whiteboard (could be replaced by videoconferencing-tool like bbb)
• wordpress
• distributed key/value stores
  • zookeeper
  • etcd
  • redis geerlingguy.postgresql