personal-ansible/playbooks/host_vars/bejbegiavm01.yml at 0a3aed1f7ec9f8293ccc5cf0d305da601b21000b · 33Fraise33/personal-ansible · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
---
mounts:
  - mountpoint: /data/
    source: /dev/disk/by-id/scsi-0QEMU_QEMU_HARDDISK_drive-scsi2
    fs: ext4
  - mountpoint: /media/
    source: /dev/disk/by-id/scsi-0QEMU_QEMU_HARDDISK_drive-scsi3
    fs: ext4

firewall_filter_input_host:
  - comment: "Allow portainer_agent"
    destination:
      port: 9001
      protocol: tcp
    counter: true

firewall:
  sets: "{{ firewall_sets_all + firewall_sets_internal }}"
  filter:
    input: "{{ firewall_filter_input_host + firewall_filter_input_all }}"

docker:
  users:
    - fraise
  dir:
    config: /data/docker-config
    data: /data/docker
  networks:
    monitoring:
      type: ipvlan
      ipam:
        - subnet: '172.16.48.64/27'
          gateway: '172.16.48.65'
        - subnet: "2001:678:1080:1201::/64"
          gateway: "2001:678:1080:1201::1"
      ipv6: true
      driver_options:
        parent: ens19.1001
      hosts: []
    services:
      type: ipvlan
      ipam:
        - subnet: '172.16.48.96/27'
          gateway: '172.16.48.97'
        - subnet: "2001:678:1080:1202::/64"
          gateway: "2001:678:1080:1202::1"
      ipv6: true
      driver_options:
        parent: ens19.1002
      hosts:
        syncthing: 120
        ha: 122
        unbound: 123
        adguard: 124
        traefik: 125

adguard_hostname: dns2.frai.se

lancache:
  dir: /lancache

cloudflared:
  docker_network: services
  service_token: !vault |
    $ANSIBLE_VAULT;1.1;AES256
    38333638666138346131333738636137643132653530303366336164653436633632336662323038
    3463363662643163663363663232393463613630613637310a613265333335346238613431643638
    61363165343163383461343836383835373535373637663833306630323534343633643262326633
    3233333638313065360a643163333335616365393666633564366137643964643961366162383832
    32613864306264613533643736633433373437633535633434303562306266626635643034623066
    65363834373834303464353034366463353363376661636234646463396261383136366230643734
    65303365633338313363646131366635303365393636623231623731383635623238366132616635
    38356335636430646364363630626563313733663233636232393031343365646265353336656662
    34613236326661306437366438336630323031303732346333643537326334656562393165623434
    62386331663662346363313436633364656163356630393237373031306464393663333838613931
    30386539343235616237363535376530383364626331343330316231353864653562656562343463
    31666565393963633964623339373133393536393130356330633034373566326331653363646237
    36353962383230376465323564323332666239663064333963306364663862383363

wud_registry_logins:
  WUD_REGISTRY_HUB_PUBLIC_LOGIN: "bejbegiavm01fraise"
  WUD_REGISTRY_HUB_PUBLIC_PASSWORD: !vault |
    $ANSIBLE_VAULT;1.1;AES256
    31666334373731396164393162643864636131346263646464366331663435346536366339303330
    3436323835393166383734333833383832363537306533660a633439633835313734316631626663
    63303732623837366534646230323432376662636331326164363834303365326161626363613439
    3665393664643462650a313465386539613466323265393233386338356139303634373964636439
    35383364646335663264373637396663303664386662393534353233653038386462306564353963
    3239386537656236653761633933303664373235313235346439