
Ansible roles for LXD host and container configurations

The LXD host is Debian 10 with LXD installed via snap. The containers are based
on Alpine Linux.

NOTE: The ansible inventory is grouped into 'lxd', and 'containers', eg:
"""
---
lxd:
  hosts:
    lxd_host:
      ansible_user: user
      ansible_host: 192.168.0.10

containers:
  vars:
      ansible_user: root
      ansible_host: 192.168.0.10
      ansible_python_interpreter: /usr/bin/python3
  hosts:
    haproxy:
      internal_ip: 10.0.0.100
      ansible_port: 2000
      http_port: 80
"""

TODO:

lxd_host:
	- ZFS role/task
	- lxd-init --preseed task
	- switch to nftables?
	- add CA for LAN https://support.mozilla.org/en-US/kb/setting-certificate-authorities-firefox
	- use separate idmaps per container:
		- https://lxd.readthedocs.io/en/latest/userns-idmap/#different-idmaps-per-container
	- add resource limits to containers:
		- https://stgraber.org/2016/03/26/lxd-2-0-resource-control-412/

containers:
	In Progress Ansible Roles:
	- haproxy
	- freshrss (done), needs backup task
	- pvdb
	- http video
	- random storage/xfer
	- transmission
	- baikal
	- game servers: factorio, valheim (needs glibc, not musl)

	completed:
	- dokuwiki (done), needs backup task (done)
	- gitweb (done)

