created major large-scale changes

init@vps.yml

@@ -1,15 +1,16 @@
 # @NOTE run 'ansible-playbook' command on this using 'sudo'
 - name: Initialize VPS
-  # hosts: sukaato
-  hosts: "{{ chosen_host | default('sukaato') }}"
-  remote_user: root
+  hosts: "{{ chosen_host | default('staging0.test') }}"
+  remote_user: "{{ chosen_user | default('root') }}"
   vars:
     harden: true
   vars_files:
     - vars/local_facts.yml # REQUIRED
-    - vars/vpn_server.yml # REQUIRED
-    - vars/tail_net.yml
-    - vars/crowdsec.yml
+    - vars/vpn_settings.yml # REQUIRED
+    - vars/wireguard_settings.yml # REQUIRED
+    - vars/headscale_settings.yml # REQUIRED
+    - vars/podpose_settings.yml # REQUIRED
+    - vars/certbot_settings@vps.yml # REQUIRED
     - vars/users@{{ inventory_hostname | default('vps') }}.yml
     - vars/config@{{ inventory_hostname | default('vps') }}.yml
   tasks:
@@ -31,16 +32,60 @@
       ansible.builtin.include_role:
         name: init-server
         tasks_from: ssh-users
-    - name: Flush handlers
+    - name: Flushing handlers
       ansible.builtin.meta: flush_handlers
-    - name: Update hostname
+    - name: Updating hostname
       become: true
       ansible.builtin.hostname:
         name: "{{ inventory_hostname }}"
-    - name: Update host icon name
+    - name: Updating hosts file
+      become: true
+      ansible.builtin.lineinfile:
+        path: /etc/hosts
+        regexp: "^127\\.0\\.1\\.1"
+        line: "127.0.1.1  {{ inventory_hostname }}"
+        insertbefore: BOF
+        state: present
+    - name: Updating host icon name
       become: true
       ansible.builtin.command:
         cmd: "hostnamectl set-icon-name computer-server"
+    - name: Opening port 51820
+      become: true
+      ansible.builtin.iptables:
+        chain: INPUT
+        protocol: "{{ item }}"
+        destination_port: 51820
+        jump: ACCEPT
+        comment: Open up port 51820
+      loop:
+        - udp
+        - tcp
+    - name: Opening port 443
+      become: true
+      ansible.builtin.iptables:
+        chain: INPUT
+        protocol: "{{ item }}"
+        destination_port: 443
+        jump: ACCEPT
+        comment: Open up port 443
+      loop:
+        - udp
+        - tcp
+    - name: Opening ports
+      become: true
+      ansible.builtin.iptables:
+        chain: INPUT
+        protocol: tcp
+        destination_port: "{{ item }}"
+        jump: ACCEPT
+        comment: "Open up port {{ (item | string) }}"
+      loop:
+        - 80
+        - 465
+        - 587
+        - 995
+        - 993
     - name: Notifying user that all processes have finished
       ansible.builtin.debug:
         msg: All processes finished. Hit enter to reboot machine.
@@ -51,5 +96,4 @@
       ansible.builtin.reboot:
         msg: "Rebooting machine.."
         connect_timeout: 0
-        test_command: ~
-      ignore_errors: true
+        test_command: ~