--- # -------------------------------------------------------------------------------------------------- # system:base # -------------------------------------------------------------------------------------------------- system_base_additional_tcp_ports: "{{ services_host_services | dict2items | map(attribute='value.tcp', default=[]) | flatten }}" # -------------------------------------------------------------------------------------------------- # vpn:wireguard # -------------------------------------------------------------------------------------------------- vpn_wireguard_port: 51820 vpn_wireguard_address: "10.66.0.{{ vpn_subnet_id }}" vpn_wireguard_netmask: "255.255.255.252" vpn_wireguard_subnet: "10.66.0.0/30" # -------------------------------------------------------------------------------------------------- # vpn:bridge # -------------------------------------------------------------------------------------------------- vpn_bridge_prefix: "10.66.{{ vpn_subnet_id }}" vpn_bridge_address: "{{ vpn_bridge_prefix }}.1" vpn_bridge_broadcast: "{{ vpn_bridge_prefix }}.255" vpn_bridge_netmask: "255.255.255.0" vpn_bridge_dnat: "\ {% set vpn_bridge_dnat = [] %}\ {% for properties in ( services_host_services.values() | selectattr('tcp', 'defined') ) %}\ {{ vpn_bridge_dnat.append({ 'address': properties.address, 'ports': properties.tcp }) }}\ {% endfor %}\ {{ vpn_bridge_dnat }}" # -------------------------------------------------------------------------------------------------- # services # -------------------------------------------------------------------------------------------------- services_root_directory: "/var/lib/{{ ansible_hostname }}" services_home_directory: "{{ services_root_directory }}/home" services_data_directory: "{{ services_root_directory }}/data" services_containers_directory: "{{ services_root_directory }}/containers" services_all_hosts: "{{ groups['asgard'] }}" services_all_services: "{{ services_all_hosts | map('extract', hostvars, 'services_host_services') | map('dict2items') | flatten | items2dict }}" services: rproxy: {} www: repo_user: "{{ vault_services.www.repo_user }}" repo_token: "{{ vault_services.www.repo_token }}" lrproxy: {} database: password: "{{ vault_services.database.password }}" cloud: domain: "{{ vault_services.cloud.domain }}" database_name: "{{ vault_services.cloud.database_name }}" database_user: "{{ vault_services.cloud.database_user }}" database_password: "{{ vault_services.cloud.database_password }}" admin_user: "{{ vault_services.cloud.admin_user }}" admin_password: "{{ vault_services.cloud.admin_password }}" smtp_host: "{{ vault_services.cloud.smtp_host }}" smtp_name: "{{ vault_services.cloud.smtp_name }}" smtp_password: "{{ vault_services.cloud.smtp_password }}" git: domain: "{{ vault_services.git.domain }}" database_name: "{{ vault_services.git.database_name }}" database_user: "{{ vault_services.git.database_user }}" database_passwd: "{{ vault_services.git.database_passwd }}" smtp_host: "{{ vault_services.git.smtp_host }}" smtp_user: "{{ vault_services.git.smtp_user }}" smtp_passwd: "{{ vault_services.git.smtp_passwd }}" ssh_port: 2770 notes: domain: "{{ vault_services.notes.domain }}" database_name: "{{ vault_services.notes.database_name }}" database_user: "{{ vault_services.notes.database_user }}" database_password: "{{ vault_services.notes.database_password }}" smtp_host: "{{ vault_services.notes.smtp_host }}" smtp_name: "{{ vault_services.notes.smtp_name }}" smtp_password: "{{ vault_services.notes.smtp_password }}" # -------------------------------------------------------------------------------------------------- # services:user_setup # -------------------------------------------------------------------------------------------------- services_bridge_gateway: "{{ vpn_bridge_address }}"