75 lines
3.5 KiB
YAML
75 lines
3.5 KiB
YAML
# --------------------------------------------------------------------------------------------------
|
|
# system:base
|
|
# --------------------------------------------------------------------------------------------------
|
|
system_base_additional_tcp_ports: "{{
|
|
services_host_services | dict2items | map(attribute='value.tcp', default=[]) | flatten }}"
|
|
|
|
# --------------------------------------------------------------------------------------------------
|
|
# vpn:wireguard
|
|
# --------------------------------------------------------------------------------------------------
|
|
vpn_wireguard_port: 51820
|
|
vpn_wireguard_address: "10.66.0.{{ vpn_subnet_id }}"
|
|
vpn_wireguard_netmask: "255.255.255.252"
|
|
vpn_wireguard_subnet: "10.66.0.0/30"
|
|
|
|
# --------------------------------------------------------------------------------------------------
|
|
# vpn:bridge
|
|
# --------------------------------------------------------------------------------------------------
|
|
vpn_bridge_prefix: "10.66.{{ vpn_subnet_id }}"
|
|
vpn_bridge_address: "{{ vpn_bridge_prefix }}.1"
|
|
vpn_bridge_broadcast: "{{ vpn_bridge_prefix }}.255"
|
|
vpn_bridge_netmask: "255.255.255.0"
|
|
vpn_bridge_dnat: "{{ services_host_services | dict2items |
|
|
community.general.json_query('[?@.value.tcp].
|
|
{address: value.address, ports: value.tcp}') }}"
|
|
|
|
# --------------------------------------------------------------------------------------------------
|
|
# services
|
|
# --------------------------------------------------------------------------------------------------
|
|
services_all_hosts: "{{ groups['asgard'] }}"
|
|
|
|
services:
|
|
rproxy: {}
|
|
www:
|
|
repo_user: "{{ vault_services.www.repo_user }}"
|
|
repo_token: "{{ vault_services.www.repo_token }}"
|
|
lrproxy: {}
|
|
database:
|
|
password: "{{ vault_services.database.password }}"
|
|
cloud:
|
|
domain: "{{ vault_services.cloud.domain }}"
|
|
database_name: "{{ vault_services.cloud.database_name }}"
|
|
database_user: "{{ vault_services.cloud.database_user }}"
|
|
database_password: "{{ vault_services.cloud.database_password }}"
|
|
admin_user: "{{ vault_services.cloud.admin_user }}"
|
|
admin_password: "{{ vault_services.cloud.admin_password }}"
|
|
smtp_host: "{{ vault_services.cloud.smtp_host }}"
|
|
smtp_name: "{{ vault_services.cloud.smtp_name }}"
|
|
smtp_password: "{{ vault_services.cloud.smtp_password }}"
|
|
git:
|
|
domain: "{{ vault_services.git.domain }}"
|
|
database_name: "{{ vault_services.git.database_name }}"
|
|
database_user: "{{ vault_services.git.database_user }}"
|
|
database_passwd: "{{ vault_services.git.database_passwd }}"
|
|
smtp_host: "{{ vault_services.git.smtp_host }}"
|
|
smtp_user: "{{ vault_services.git.smtp_user }}"
|
|
smtp_passwd: "{{ vault_services.git.smtp_passwd }}"
|
|
notes:
|
|
domain: "{{ vault_services.notes.domain }}"
|
|
database_name: "{{ vault_services.notes.database_name }}"
|
|
database_user: "{{ vault_services.notes.database_user }}"
|
|
database_password: "{{ vault_services.notes.database_password }}"
|
|
smtp_host: "{{ vault_services.notes.smtp_host }}"
|
|
smtp_name: "{{ vault_services.notes.smtp_name }}"
|
|
smtp_password: "{{ vault_services.notes.smtp_password }}"
|
|
|
|
# --------------------------------------------------------------------------------------------------
|
|
# services:user_setup
|
|
# --------------------------------------------------------------------------------------------------
|
|
services_bridge_gateway: "{{ vpn_bridge_address }}"
|
|
|
|
scw_bucket_endpoint: "{{ vault_scw_bucket_endpoint }}"
|
|
scw_access_key: "{{ vault_scw_access_key }}"
|
|
scw_secret_key: "{{ vault_scw_secret_key }}"
|
|
restic_password: "{{ vault_restic_password }}"
|