myserver/inventory-example.yml at master · ruppel/myserver · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
all:
   hosts:
      target:
         ansible_host: 192.168.1.100
         ansible_connection: ssh
         ansible_port: 22399
         ansible_user: myuser
         ansible_python_interpreter: /usr/bin/python3
         ansible_become_password: verysecret
         domain: "example.com"
         subdomain: "server"
         fqdn: "{{ subdomain }}.{{ domain }}"
         adminpanel:
            admin_password: "ThisIsMoreSecret"
            port: "8080"
         mail:
            system_mail_name: "server.{{ domain }}"
            postmaster_email: "webmaster@{{ domain }}"
            smarthost:
               url: other-relay-server
               user: usernamethere
               passwd: verysecretpassword
         mysql:
            root_password: "DBPasswordIsSecretToo"
         mailman:
            admin_email: "listadmin@{{ domain }}"
            admin_password: "VeryVerySecret"
         fail2ban:
            ignoreip: "127.0.0.0/8"
         sslcert:
            country: "DE"
            province: "BaWue"
            locality: "Stuttgart"
            orgname: "My Org is my Castle Inc."
            unitname: "IT"
            commonname: "server.{{ domain }}"
            email: "webmaster@{{ domain }}"
         phpmyadmin:
            db_user: pma
            db_password: "WhatASecret"
         roundcube:
            db_user: roundcube
            db_password: "NobodyKnowsThisOne"
         onlyoffice:
            port: 7600
            data_dir: "/opt/onlyoffice/data"
            log_dir: "/opt/onlyoffice/log"
            lib_dir: "/opt/onlyoffice/lib"
            db_dir: "/opt/onlyoffice/db"
            secret: "toptopsecretpasswort"
            fqdn: "docs.{{ domain }}"
         vaultwarden:
           internal_stdport: 9322
           admintoken: "ThisMightBeTheMostSensitivePasswordAtAll" # Note, that this does not overwrite an existing token in an existing container
           volumepath: /opt/vaultwarden/
         #   dbhostandport: "localhost"
         #   dbname: "bitwardendb"
         #   dbuser: "bitwarden"
         #   dbpassword: "onceMoreAPassword" # Special characters need to be rewritten for URL use. See https://en.wikipedia.org/wiki/Percent-encoding#Percent-encoding_reserved_characters