Bastian de BylandClaude Opus 5
6cd4d56de1
A Pi 3B+ (stickah.local) shares a Phomemo PM246 to the LAN as a plain CUPS queue, so any machine can print 4x6 labels -- fulfillr-site's shipping labels in particular -- without installing the vendor driver, which is x86-64 only. The role builds the TSPL CUPS driver from source instead. It is Debian, not Fedora, so it lives in its own inventory and playbook (make deploy-labelprint / check-labelprint) and the home.debyl.io roles can never run against it. make bootfs renders its cloud-init first-boot files onto a freshly imaged SD card from the same templates the role uses. The Wi-Fi credentials for the home and rescue networks are in the vault. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
21 lines
444 B
YAML
21 lines
444 B
YAML
---
|
|
- name: install the nftables ruleset
|
|
become: true
|
|
ansible.builtin.template:
|
|
src: nftables.conf.j2
|
|
dest: /etc/nftables.conf
|
|
owner: root
|
|
group: root
|
|
mode: "0755"
|
|
validate: /usr/sbin/nft -c -f %s
|
|
notify: reload nftables
|
|
tags: [labelprint, firewall]
|
|
|
|
- name: enable nftables
|
|
become: true
|
|
ansible.builtin.systemd:
|
|
name: nftables.service
|
|
enabled: true
|
|
state: started
|
|
tags: [labelprint, firewall]
|