feat: Base rainbowsheep-cloud ansible playbooks and roles

roles/nfs/tasks/main.yml

@@ -0,0 +1,36 @@
+---
+
+- name: Install nfs server
+  ansible.builtin.apt:
+    name: nfs-kernel-server
+    state: present
+    update_cache: yes
+
+- name: Create /srv/protected export
+  ansible.builtin.file:
+    state: directory
+    path: /srv/protected
+
+- name: Export /srv/protected
+  ansible.builtin.lineinfile:
+    path: /etc/exports
+    regexp: '^/srv/protected'
+    line: /srv/protected *(rw,sync,sec=krb5p,no_subtree_check) 
+
+- name: Create /srv/vault export
+  ansible.builtin.file:
+    state: directory
+    path: /srv/vault
+
+- name: Export /srv/vault
+  ansible.builtin.lineinfile:
+    path: /etc/exports
+    regexp: '^/srv/vault'
+    line: /srv/vault *(rw,sync,sec=krb5p:krb5i:krb5,no_subtree_check)
+
+- name: Enable and start NFS server
+  ansible.builtin.service:
+    name: nfs-kernel-server
+    state: started
+    enabled: yes
+