rilla
/
ansible
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
ansible/hosts.yml

323 lines
9.7 KiB
YAML
Raw Normal View History

make linter happy
2022-09-04 17:25:14 +02:00
---
initial commit
2022-08-30 10:00:27 +02:00
all:
hosts:
added caladan host
2022-08-30 17:27:09 +02:00
added pikvm host
2022-10-18 12:05:45 +02:00
pikvm:
ansible_host: pikvm
ansible_user: ansible
ansible_port: 22
ansible_python_interpreter: /usr/bin/python3
ansible_become_method: doas
dags first iteration
2022-10-18 18:16:13 +02:00
dags:
- acme_rsync
added pikvm host
2022-10-18 12:05:45 +02:00
nut for pikvm
2023-01-25 17:01:36 +01:00
nut_mode: netclient
nut_upsmon_password: !vault |
$ANSIBLE_VAULT;1.1;AES256
313636333565356536333862386361393439666563353938343934623532366
433363738623862623035663138643532346330346339376437353563633365
320a33356464656230316565376339333331373832643631366562666331333
137386235666437663766313833616135303339643539353931313966623638
3962360a3131383461393435633363366437663535306430343631313935343
465343465343038383961306132653066643933646237313234326435663834
3865663534
nut_device:
name: "cps-homelab"
nut_host: "nut.monotremata.xyz"
added snitch host
2022-08-30 10:09:52 +02:00
snitch:
ansible_host: snitch
create dedicated ansible user
2022-08-30 14:18:17 +02:00
ansible_user: ansible
added snitch host
2022-08-30 10:09:52 +02:00
ansible_port: 22
ansible_python_interpreter: /usr/bin/python3
become method defined at host level
2022-09-06 10:52:10 +02:00
ansible_become_method: doas
handle data mode alpine installs
2022-10-19 17:58:20 +02:00
alpine_mode: diskless
updated alpine versions
2023-01-03 15:10:12 +01:00
alpine_version: v3.17
added suricata and its things
2022-09-20 13:51:20 +02:00
alpine_repos:
- main
feat: added kitchen host
2023-06-04 20:06:58 +02:00
kitchen:
ansible_host: kitchen
ansible_user: ansible
ansible_port: 22
ansible_python_interpreter: /usr/bin/python3
ansible_become_method: doas
alpine_mode: diskless
alpine_version: v3.18
alpine_repos:
- main
feat: misc adjustments for kitchen
2023-06-04 20:17:58 +02:00
- community
feat: added kitchen host
2023-06-04 20:06:58 +02:00
lbu_media: mmcblk0p2
feat: misc adjustments for kitchen
2023-06-04 20:17:58 +02:00
apk_cache_dir: /media/mmcblk0p2/cache
feat: added kitchen host
2023-06-04 20:06:58 +02:00
mounts:
- src: "/dev/mmcblk0p1"
path: "/media/mmcblk0p1"
fstype: "vfat"
opts: "noauto,ro"
passno: "0"
- src: "/dev/mmcblk0p2"
path: "/media/mmcblk0p2"
fstype: "ext4"
opts: "noauto,ro"
passno: "0"
added suricata and its things
2022-09-20 13:51:20 +02:00
suricata:
ansible_host: suricata
ansible_user: ansible
ansible_port: 22
ansible_python_interpreter: /usr/bin/python3
ansible_become_method: doas
handle data mode alpine installs
2022-10-19 17:58:20 +02:00
alpine_mode: data
updated suricata's version
2022-12-21 17:30:34 +01:00
alpine_version: v3.17
added suricata and its things
2022-09-20 13:51:20 +02:00
alpine_repos:
- main
- community
handle data mode alpine installs
2022-10-19 17:58:20 +02:00
lbu.conf role
2022-10-31 17:08:27 +01:00
lbu_encrypt: true
lbu_media: mmcblk0p2
setup apk role
2023-01-03 16:57:57 +01:00
apk_cache_dir: /media/mmcblk0p2/cache
k3s with secrets encryption
2022-11-02 13:29:32 +01:00
k3s_args:
- --secrets-encryption
handle data mode alpine installs
2022-10-19 17:58:20 +02:00
dmcrypt_targets:
- name: "WDC WDS400T1R0A"
target: "disk0"
source_uuid: "202c924c-ee53-4321-9efd-1f776e939702"
embed luks key in encrypted lbu for alpine
2022-10-31 16:43:57 +01:00
key: "/etc/dmcrypt/key.bin"
allow discards
2022-10-19 18:28:50 +02:00
options: "--allow-discards"
handle data mode alpine installs
2022-10-19 17:58:20 +02:00
- name: "Samsung SSD 870"
target: "disk1"
source_uuid: "247ea237-54ce-45d2-9974-04344c06aba4"
embed luks key in encrypted lbu for alpine
2022-10-31 16:43:57 +01:00
key: "/etc/dmcrypt/key.bin"
allow discards
2022-10-19 18:28:50 +02:00
options: "--allow-discards"
handle data mode alpine installs
2022-10-19 17:58:20 +02:00
added suricata and its things
2022-09-20 13:51:20 +02:00
mounts:
handle data mode alpine installs
2022-10-19 17:58:20 +02:00
- src: "/dev/mmcblk0p1"
path: "/media/mmcblk0p1"
added suricata and its things
2022-09-20 13:51:20 +02:00
fstype: "vfat"
suricata ro mounts
2023-01-10 10:57:01 +01:00
opts: "noauto,defaults,ro"
added suricata and its things
2022-09-20 13:51:20 +02:00
passno: "0"
handle data mode alpine installs
2022-10-19 17:58:20 +02:00
- src: "/media/mmcblk0p1/boot"
path: "/boot"
cryptoraid
2022-10-03 18:30:24 +02:00
fstype: "none"
opts: "defaults,bind"
passno: "0"
handle data mode alpine installs
2022-10-19 17:58:20 +02:00
- src: "/dev/mmcblk0p2"
path: "/media/mmcblk0p2"
added suricata and its things
2022-09-20 13:51:20 +02:00
fstype: "ext4"
suricata ro mounts
2023-01-10 10:57:01 +01:00
opts: "defaults,ro"
added suricata and its things
2022-09-20 13:51:20 +02:00
passno: "0"
handle data mode alpine installs
2022-10-19 17:58:20 +02:00
- src: "/dev/mapper/disk0"
path: "/mnt/btr_pool"
some progress on disk encryption and btrfs
2022-10-19 15:29:16 +02:00
fstype: "btrfs"
compress zstd on btrfs suricata
2022-11-04 11:33:58 +01:00
opts: "subvolid=5,noatime,compress=zstd"
some progress on disk encryption and btrfs
2022-10-19 15:29:16 +02:00
passno: "0"
btrbk backups mount
2022-11-04 16:16:08 +01:00
- src: "/dev/mapper/disk0"
path: "/mnt/btr_backup"
fstype: "btrfs"
opts: "subvol=btr_backup,noatime,compress=zstd"
passno: "0"
handle data mode alpine installs
2022-10-19 17:58:20 +02:00
- src: "/dev/mapper/disk0"
path: "/var/log"
fstype: "btrfs"
compress zstd on btrfs suricata
2022-11-04 11:33:58 +01:00
opts: "subvol=logs,noatime,compress=zstd"
handle data mode alpine installs
2022-10-19 17:58:20 +02:00
passno: "0"
- src: "/dev/mapper/disk0"
path: "/home"
fstype: "btrfs"
compress zstd on btrfs suricata
2022-11-04 11:33:58 +01:00
opts: "subvol=home,noatime,compress=zstd"
handle data mode alpine installs
2022-10-19 17:58:20 +02:00
passno: "0"
backups lbu to a more permanent location
2023-01-03 18:26:16 +01:00
- src: "/dev/mapper/disk0"
path: "/mnt/backups"
fstype: "btrfs"
opts: "subvol=backups,noatime,compress=zstd"
passno: "0"
moved k3s binary to /opt
2022-10-30 16:46:05 +01:00
- src: "/dev/mapper/disk0"
path: "/opt"
fstype: "btrfs"
compress zstd on btrfs suricata
2022-11-04 11:33:58 +01:00
opts: "subvol=opt,noatime,compress=zstd"
moved k3s binary to /opt
2022-10-30 16:46:05 +01:00
passno: "0"
handle data mode alpine installs
2022-10-19 17:58:20 +02:00
- src: "/dev/mapper/disk0"
path: "/var/lib/builder/src"
fstype: "btrfs"
compress zstd on btrfs suricata
2022-11-04 11:33:58 +01:00
opts: "subvol=src,noatime,compress=zstd"
handle data mode alpine installs
2022-10-19 17:58:20 +02:00
passno: "0"
host inventory updates
2022-10-30 15:54:15 +01:00
- src: "/dev/mapper/disk0"
path: "/etc/rancher"
fstype: "btrfs"
compress zstd on btrfs suricata
2022-11-04 11:33:58 +01:00
opts: "subvol=rancher_config,noatime,compress=zstd"
host inventory updates
2022-10-30 15:54:15 +01:00
passno: "0"
- src: "/dev/mapper/disk0"
path: "/var/lib/rancher"
fstype: "btrfs"
compress zstd on btrfs suricata
2022-11-04 11:33:58 +01:00
opts: "subvol=rancher_data,noatime,compress=zstd"
host inventory updates
2022-10-30 15:54:15 +01:00
passno: "0"
- src: "/dev/mapper/disk0"
podman
2022-10-30 16:32:32 +01:00
path: "/var/lib/containers"
host inventory updates
2022-10-30 15:54:15 +01:00
fstype: "btrfs"
compress zstd on btrfs suricata
2022-11-04 11:33:58 +01:00
opts: "subvol=containers,noatime,compress=zstd"
host inventory updates
2022-10-30 15:54:15 +01:00
passno: "0"
suricata mount certs subvolume
2023-01-10 11:03:02 +01:00
- src: "/dev/mapper/disk0"
path: "/mnt/certs"
fstype: "btrfs"
opts: "subvol=certs,noatime,compress=zstd"
passno: "0"
suricata's configs subvolume
2023-01-27 11:52:15 +01:00
- src: "/dev/mapper/disk0"
path: "/srv/configs"
fstype: "btrfs"
opts: "subvol=configs,noatime,compress=zstd"
passno: "0"
nfs server role
2023-01-11 11:55:10 +01:00
- src: "/mnt/certs/acme"
path: "/srv/nfs/k8s/acme"
fstype: "none"
opts: "bind"
passno: "0"
nfs_exports:
- path: "/srv/nfs"
hosts:
- hostname: localhost
options:
- ro
- all_squash
- no_subtree_check
- fsid=0
- path: "/srv/nfs/k8s"
hosts:
- hostname: localhost
options:
- rw
- no_root_squash
- no_subtree_check
- sync
- crossmnt
usercfg
2022-09-20 15:02:53 +02:00
rpi_cfg:
- "enable_uart=1"
- "otg_mode=1"
force HDMI things on suricata to make pikvm work properly
2023-01-03 15:52:22 +01:00
- "hdmi_group=2"
- "hdmi_mode=4"
added caladan host
2022-08-30 17:27:09 +02:00
nut role
2023-01-25 10:53:02 +01:00
nut_device:
nut for narwhal
2023-01-25 15:55:20 +01:00
name: "cps-homelab"
nut role
2023-01-25 10:53:02 +01:00
config:
driver: "usbhid-ups"
port: "auto"
vendorid: "0764"
productid: "0601"
product: "OR1500ERM1U"
serial: "GBULZ2000030"
vendor: "CPS"
bus: "001"
feat: adjustments to nut
2023-04-10 21:25:17 +02:00
pollinterval: 15
nut role
2023-01-25 10:53:02 +01:00
nut_mode: netserver
nut_admin_password: !vault |
$ANSIBLE_VAULT;1.1;AES256
396261663339336265643530373931633034326338386337363539663634663
438626465393132386134383935623061666134646130353138333561326665
330a62346364313562303633643663303430376664356461666166373232316
465653633323235653833303463366330376136356234633339396532643938
3634300a6165363061623264306339303366313365316636383631366262336
564313139303133343633353034613661633639633563356466363865643533
3937323163
nut_upsmon_password: !vault |
$ANSIBLE_VAULT;1.1;AES256
313636333565356536333862386361393439666563353938343934623532366
433363738623862623035663138643532346330346339376437353563633365
320a33356464656230316565376339333331373832643631366562666331333
137386235666437663766313833616135303339643539353931313966623638
3962360a3131383461393435633363366437663535306430343631313935343
465343465343038383961306132653066643933646237313234326435663834
3865663534
nut for narwhal
2023-01-25 15:55:20 +01:00
nut_host: localhost
feat: secrets things
2023-05-09 09:58:28 +02:00
notifiers:
xmpp:
recipient: rilla@monotremata.xyz
account: suricata@monotremata.xyz
password: !vault |
$ANSIBLE_VAULT;1.1;AES256
3261336330303763383735646465326463333964383234653835396462383731623
63763386365653437396163656530626533633463613966303235616565330a6237
3535653731333366313438343465663034303433623132386364643338613732383
9326661316435336539306232633536356330376337663065636265660a61643830
3335633538613337616232306233633039333364373538373036623139666263383
06538636233643362383335653135333439353131336535353862
gotify:
url: https://gotify.monotremata.xyz
token: !vault |
$ANSIBLE_VAULT;1.1;AES256
3539643562356634616361643264623533643664303862613264316439343036323
93033306538353661343861313866613434633637653434336532613361310a6161
6563343236303135616335346364643763343533653331316166653937353965643
9383135393631366336383361373333396536343362626561613435310a34313261
38613264353832396362653036313531356261613833393965353664
added caladan host
2022-08-30 17:27:09 +02:00
caladan:
ansible_host: caladan
adjusted users to match caladan
2022-08-30 18:26:16 +02:00
ansible_user: ansible
added caladan host
2022-08-30 17:27:09 +02:00
ansible_port: 22
ansible_python_interpreter: /usr/bin/python3
become method defined at host level
2022-09-06 10:52:10 +02:00
ansible_become_method: doas
handle data mode alpine installs
2022-10-19 17:58:20 +02:00
alpine_mode: system
updated alpine versions
2023-01-03 15:10:12 +01:00
alpine_version: v3.17
added suricata and its things
2022-09-20 13:51:20 +02:00
alpine_repos:
- main
- community
added narwhal host
2022-09-04 16:52:37 +02:00
narwhal:
ansible_host: narwhal
ansible_user: ansible
ansible_port: 22
ansible_python_interpreter: /usr/bin/python3
moved narwhal to doas
2022-09-22 11:19:46 +02:00
ansible_become_method: doas
added fugu host
2022-09-04 17:47:06 +02:00
nut for narwhal
2023-01-25 15:55:20 +01:00
nut_mode: netclient
nut_upsmon_password: !vault |
$ANSIBLE_VAULT;1.1;AES256
313636333565356536333862386361393439666563353938343934623532366
433363738623862623035663138643532346330346339376437353563633365
320a33356464656230316565376339333331373832643631366562666331333
137386235666437663766313833616135303339643539353931313966623638
3962360a3131383461393435633363366437663535306430343631313935343
465343465343038383961306132653066643933646237313234326435663834
3865663534
nut_device:
name: "cps-homelab"
nut_host: "nut.monotremata.xyz"
added fugu host
2022-09-04 17:47:06 +02:00
fugu:
ansible_host: fugu
ansible_user: ansible
ansible_port: 22
ansible_python_interpreter: /usr/local/bin/python3
become method defined at host level
2022-09-06 10:52:10 +02:00
ansible_become_method: doas