Hacker News Reader

Author of Sylve here, and I helped deploy the setup in the post.

> All I read is that they are still doing ClickOPS over DevSecOps!!

Their setup is mostly working on embedded stuff, and this involves some amount of moving VM disk images around, sometimes they run different software within the same VM disk, so that means ZFS properties need to be tweaked accordingly (compression, recordsize, etc). This is a lot easier to do with a UI than it is with CLI, and the UI is pretty good at showing you what’s going on. Now I'm all for automating stuff, but there's no clear pattern here to automate away,

Now regarding automation in Sylve, you can create a template out of Sylve (with networking, storage, CPU config etc.) and then deploy that template as many times as you want (from the UI), last I checked proxmox only allows you to clone from template one at a time.

What I do is pretty similar to what you mention, but I don't really use ansible since on FreeBSD if it's in the ports tree its one command (after base system is set up) which is `pkg install -y <package>`. And your entire stack (from your list), can be done with one command each. The only thing I see that would need a bit setup would be the wireguard vpn, but even that is pretty straightforward under FreeBSD (so you can do it with a jail and no need for a VM).

View on HN

- name: Deploy LXC ansible.builtin.command: > pct create {{ lxc_id }} {{ template }} --hostname {{ hostname }} --unprivileged 1 --cores {{ cores }} --memory {{ memory }} --rootfs {{ storage }}:{{ rootfs_size }} --net0 name=eth0,bridge={{ bridge }},ip={{ static_ip }}/{{ cidr }},gw={{ gateway }} --features nesting=0

- name: Import lists and hotfixes ansible.builtin.command: > pct exec {{ lxc_id }} -- bash -c " pihole-FTL --config ntp.sync.interval 0; systemctl stop pihole-FTL; sqlite3 /etc/pihole/gravity.db < /tmp/adlist.sql; systemctl start pihole-FTL; sudo pihole -g "