Tubby1981 System Ansible Collection
A comprehensive Ansible collection for Linux system management, featuring roles for Foomuuri multizone firewall, Apache webserver, MariaDB database server, production-ready mail server, and full support for PHP and phpMyAdmin configuration.
Quick Install
ansible-galaxy collection install tubby1981.system
Included Roles
🔒 Foomuuri Firewall
- Multi-zone architecture
- Advanced NAT (SNAT/DNAT/masquerading)
- Dynamic IP lists from DNS or URLs
- Declarative nftables configuration
🌐 Apache Webserver
- Automated Let's Encrypt SSL/TLS provisioning
- Security enhancements and hardening
- Multi-domain support with aliases
- Pre-flight DNS validation
🗄️ MariaDB Database
- Installation and security hardening
- User and database management
- Master/Slave replication configuration
- Performance tuning (InnoDB, buffers)
📧 Mail Server
- Complete stack: Postfix + Dovecot
- PostfixAdmin for web management
- SpamAssassin spam filtering
- ClamAV antivirus protection
- OpenDKIM email authentication
🐘 PHP Support
- PHP versions 7.4 to 8.4
- Flexible configuration management
- Multiple PHP version support
- Performance optimization
💻 phpMyAdmin
- Easy installation and configuration
- Secure access configuration
- Integration with Apache and MariaDB
- Web-based database management
Key Features
- ✅ Multi-distribution support: Debian, Ubuntu, Arch Linux
- 🔄 Idempotent operations: Safe to run multiple times
- 🚀 Production-ready: Battle-tested configurations
- 🔒 Security-first: Hardened by default
- 📖 Well-documented: Comprehensive guides and examples
- 🎯 Declarative: Infrastructure as Code approach
Requirements
- Ansible: >= 2.10
- Python: >= 3.6
- Target Systems: Debian 10+, Ubuntu 20.04+, Arch Linux (varies by role)
- Privileges: Root or sudo access required
Links
Ansible Galaxy
GitHub Repository
Documentation
Quick Example
---
- name: Deploy complete system
hosts: servers
roles:
- tubby1981.system.foomuuri
- tubby1981.system.mariadb
- tubby1981.system.apache
- tubby1981.system.mailserver
Keywords: ansible collection, nftables firewall, foomuuri ansible, multizone firewall, linux firewall automation, debian ansible role, ubuntu firewall configuration, archlinux security, infrastructure as code, nat configuration, system hardening, devops automation, network security, apache, webserver, certbot, letsencrypt, mariadb, mysql, database, replication, sql, php, phpmyadmin, php 7.4, php 8.4, mail server, postfix, dovecot, postfixadmin, spamassassin, clamav, opendkim, email server, smtp, imap, virtual mailboxes
© 2024 Tubby1981 | Licensed under MIT License