ansible

• install ansible: python3 -m pip install --user ansible

• add computers: file: /etc/ansible/hosts

[myvirtualmachines]
192.0.2.50
192.0.2.51
192.0.2.52

• verify hosts: ansible all --list-hosts
• ping: ansible all -m ping
• basic config to install apt packages:

- hosts: servers
  gather_facts: no
  tasks:
   - name: install php
     apt:
      name: 
       - php8.0-fpm 
       - php-common 
       - php-curl 
       - php-json
       - php-mbstring 
       - php-xml 
       - php-zip
      state: present
   - name: install certbot
     apt:
      name: python3-certbot-nginx
      state: present

• run command: ansible servers -a "echo 'test'"
• run playbook: ansible-playbook playbook.yaml
• vars example:

[servers]
server1.com
server2.com

[servers:vars]
ansible_password=****
ansible_ssh_user=root
host_key_checking=false

• disable host key checking: export ANSIBLE_HOST_KEY_CHECKING=False
• include custom inventory file: ansible -i inventory_file ...
• ask ssh password: ansible-playbook [cmd] --ask-pass
• filter tasks by tag: ansible-playbook [cmd] --tags
• dry run: add flag --check
• run tasks filtered by tags: ansible-playbook your-playbook.yml --tags your_tag

vault

• encrypt file: ansible-vault encrypt foo.yml bar.yml baz.yml
• decrypt files: ansible-vault decrypt foo.yml bar.yml baz.yml
• use password file: ansible-playbook --vault-password-file /path/to/my/vault-password-file site.yml