ansible-collections/silvarion.security
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
Security Roles
15 commits 2 branches 2 tags 118 KiB
  • Jinja 100%
Find a file
Exact
Jesus Alejandro Sanchez Davila 8f10f03ee4
All checks were successful
Ansible Lint / ansible-lint (push) Successful in 23s
Details
Merge pull request 'Trim comments to short reasons instead of full explanations' (#3) from chore/trim-comments into main 
Reviewed-on: #3
Reviewed-by: Jesus Alejandro Sanchez Davila <jsanchezd@noreply.git.silvarion.org>
2026-10-08 06:50:57 +00:00
.forgejo/workflows Trim comments to short reasons instead of full explanations 2026-10-07 11:10:55 +02:00
changelogs Release 1.1.0 2026-10-01 15:08:40 +00:00
playbooks Add Authelia forward-auth SSO portal role, with OIDC provider support 2026-08-31 23:22:51 +02:00
roles Trim comments to short reasons instead of full explanations 2026-10-07 11:10:55 +02:00
.ansible-lint.yml Trim comments to short reasons instead of full explanations 2026-10-07 11:10:55 +02:00
AGENTS.md docs: rename CLAUDE.md/AGENT.md to AGENTS.md 2026-09-24 09:44:21 +02:00
CHANGELOG.rst Release 1.1.0 2026-10-01 15:08:40 +00:00
galaxy.yml Fixed linting and add release CI 2026-10-01 15:47:10 +02:00
README.md Add Authelia forward-auth SSO portal role, with OIDC provider support 2026-08-31 23:22:51 +02:00

README.md

silvarion.security

Ansible collection providing standardized TLS/PKI certificate roles and self-hosted authentication/SSO infrastructure for Linux.

Roles

Role Description Status
certbot Let's Encrypt / ACME certificate issuance and renewal via Certbot Implemented
authelia Authelia forward-auth SSO portal, for use with Caddy's forward_auth Implemented

Requirements

  • Ansible >= 2.14
  • silvarion.base collection (for the snapd role — required when using the default certbot_install_method: snap)
  • Supported platforms: Ubuntu 24.04 (noble), RHEL/Rocky/Alma 9

Usage

- name: Install snapd, then issue a certificate with certbot
  hosts: webservers
  become: true

  roles:
    - role: silvarion.base.snapd
    - role: silvarion.security.certbot
      vars:
        certbot_config_email: admin@example.com
        certbot_certificates:
          - name: example-com
            domains:
              - example.com
              - www.example.com
            challenge: webroot
            webroot_path: /var/www/example-com

Or use the collection playbook:

ansible-playbook silvarion.security.certbot -i inventory/production -e target=webservers

Installation

ansible-galaxy collection install silvarion.security

License

MIT