--- # -------------------------------------------------------------------------------------------------- # system:var # -------------------------------------------------------------------------------------------------- system_var_root_directory: "/var/lib/{{ system_var_hostname }}" system_var_home_directory: "{{ system_var_root_directory }}/home" system_var_data_directory: "{{ system_var_root_directory }}/data" system_var_containers_directory: "{{ system_var_root_directory }}/containers" # -------------------------------------------------------------------------------------------------- # vpn:wireguard # -------------------------------------------------------------------------------------------------- vpn_wireguard_port: 51820 vpn_wireguard_address: "10.66.0.{{ vpn_subnet_id }}" vpn_wireguard_netmask: "255.255.255.252" vpn_wireguard_subnet: "10.66.0.0/30" # -------------------------------------------------------------------------------------------------- # vpn:bridge # -------------------------------------------------------------------------------------------------- vpn_bridge_prefix: "10.66.{{ vpn_subnet_id }}" vpn_bridge_address: "{{ vpn_bridge_prefix }}.1" vpn_bridge_broadcast: "{{ vpn_bridge_prefix }}.255" vpn_bridge_netmask: "255.255.255.0" vpn_bridge_subnet: "{{ vpn_bridge_prefix }}.0/24" vpn_bridge_dnat: "\ {% set vpn_bridge_dnat = [] %}\ {% for properties in ( services_host_services.values() | selectattr('tcp', 'defined') ) %}\ {{ vpn_bridge_dnat.append({ 'address': properties.address, 'ports': properties.tcp }) }}\ {% endfor %}\ {{ vpn_bridge_dnat }}" # -------------------------------------------------------------------------------------------------- # services # -------------------------------------------------------------------------------------------------- services_root_directory: "{{ system_var_root_directory }}" services_home_directory: "{{ system_var_home_directory }}" services_data_directory: "{{ system_var_data_directory }}" services_containers_directory: "{{ system_var_containers_directory }}" services_all_hosts: "{{ groups['asgard'] }}" services_all_services: "{{ services_all_hosts | map('extract', hostvars, 'services_host_services') | map('dict2items') | flatten | items2dict }}" services_resolv_host: "valkyrie" services: rproxy: {} www: repo: user: "{{ vault_services.www.repo.user }}" token: "{{ vault_services.www.repo.token }}" lrproxy: {} database: password: "{{ vault_services.database.password }}" cloud: domain: "{{ vault_services.cloud.domain }}" database: name: "{{ vault_services.cloud.database.name }}" user: "{{ vault_services.cloud.database.user }}" password: "{{ vault_services.cloud.database.password }}" smtp: host: "{{ vault_services.cloud.smtp.host }}" user: "{{ vault_services.cloud.smtp.user }}" password: "{{ vault_services.cloud.smtp.password }}" git: domain: "{{ vault_services.git.domain }}" database: name: "{{ vault_services.git.database.name }}" user: "{{ vault_services.git.database.user }}" password: "{{ vault_services.git.database.password }}" smtp: host: "{{ vault_services.git.smtp.host }}" user: "{{ vault_services.git.smtp.user }}" password: "{{ vault_services.git.smtp.password }}" ssh_port: 2770 notes: domain: "{{ vault_services.notes.domain }}" database: name: "{{ vault_services.notes.database.name }}" user: "{{ vault_services.notes.database.user }}" password: "{{ vault_services.notes.database.password }}" smtp: host: "{{ vault_services.notes.smtp.host }}" user: "{{ vault_services.notes.smtp.user }}" password: "{{ vault_services.notes.smtp.password }}" music: domain: "{{ vault_services.music.domain }}" password_encryption_key: "{{ vault_services.music.password_encryption_key }}" # -------------------------------------------------------------------------------------------------- # services:user_setup # -------------------------------------------------------------------------------------------------- services_bridge_gateway: "{{ vpn_bridge_address }}"