ansible-edda/inventory/host_vars/baldur/vars.yml

---
# --------------------------------------------------------------------------------------------------
# system:base
# --------------------------------------------------------------------------------------------------
system_base_ssh_user: "{{ vault_system_base_ssh_user }}"

# --------------------------------------------------------------------------------------------------
# vpn
# --------------------------------------------------------------------------------------------------
vpn_subnet_id: 3

# --------------------------------------------------------------------------------------------------
# music:rip
# --------------------------------------------------------------------------------------------------
music_user_name: "music"
music_user_password: "{{ vault_music_user_password }}"

music_user_home_directory: "/home/{{ music_user_name }}"
music_user_data_directory: "{{ system_var_data_directory }}/{{ music_user_name }}"
music_user_data_collection_directory: "{{ music_user_data_directory }}/collection"
music_user_data_archive_directory: "{{ music_user_data_directory }}/archive"

# --------------------------------------------------------------------------------------------------
# services
# --------------------------------------------------------------------------------------------------
services_hostname: "baldur"
services_resolv_host: "baldur"

services_host_services:
  lrproxy:
    inet_address: "{{ vpn_bridge_inet_prefix }}.2"
    inet6_address: "{{ vpn_bridge_inet6_prefix }}::2"
    restic: true
  database:
    inet_address: "{{ vpn_bridge_inet_prefix }}.3"
    inet6_address: "{{ vpn_bridge_inet6_prefix }}::3"
    restic: true
  cloud:
    inet_address: "{{ vpn_bridge_inet_prefix }}.4"
    inet6_address: "{{ vpn_bridge_inet6_prefix }}::4"
    restic: true
    restic_exclude:
      - "external"
  git:
    inet_address: "{{ vpn_bridge_inet_prefix }}.5"
    inet6_address: "{{ vpn_bridge_inet6_prefix }}::5"
    tcp: ["{{ services.git.ssh_port }}"]
    restic: true
  notes:
    inet_address: "{{ vpn_bridge_inet_prefix }}.6"
    inet6_address: "{{ vpn_bridge_inet6_prefix }}::6"
    restic: true
  music:
    inet_address: "{{ vpn_bridge_inet_prefix }}.7"
    inet6_address: "{{ vpn_bridge_inet6_prefix }}::7"
    collection_path: "{{ music_user_data_collection_directory }}"
    archive_path: "{{ music_user_data_archive_directory }}"
    restic: true
  metrics:
    inet_address: "{{ vpn_bridge_inet_prefix }}.8"
    inet6_address: "{{ vpn_bridge_inet6_prefix }}::8"
    target_inet: "{{ vpn_wireguard_inet6_address }}"
    target_inet6: "{{ vpn_wireguard_inet6_address }}"
    target_port: 19999
    tcp: [9090]
    restic: true
  dash:
    inet_address: "{{ vpn_bridge_inet_prefix }}.9"
    inet6_address: "{{ vpn_bridge_inet6_prefix }}::9"
    restic: true
  rproxy:
    inet_address: "{{ vpn_bridge_inet_prefix }}.10"
    inet6_address: "{{ vpn_bridge_inet6_prefix }}::10"
    tcp: [80, 443]
    restic: true
  www:
    inet_address: "{{ vpn_bridge_inet_prefix }}.11"
    inet6_address: "{{ vpn_bridge_inet6_prefix }}::11"
    restic: false