ansible-edda/inventory/group_vars/asgard/vars.yml

97 lines
4.1 KiB
YAML

---
# --------------------------------------------------------------------------------------------------
# system:var
# --------------------------------------------------------------------------------------------------
system_etc_root_directory: "/etc/the-nine-worlds"
system_var_root_directory: "/var/lib/the-nine-worlds"
system_var_home_directory: "{{ system_var_root_directory }}/home"
system_var_data_directory: "{{ system_var_root_directory }}/data"
system_var_containers_directory: "{{ system_var_root_directory }}/containers"
# --------------------------------------------------------------------------------------------------
# vpn:wireguard
# --------------------------------------------------------------------------------------------------
vpn_wireguard_port: 51820
vpn_wireguard_address: "10.66.0.{{ vpn_subnet_id }}"
vpn_wireguard_prefixlen: 30
vpn_wireguard_subnet: "10.66.0.0/30"
# --------------------------------------------------------------------------------------------------
# vpn:bridge
# --------------------------------------------------------------------------------------------------
vpn_bridge_prefix: "10.66.{{ vpn_subnet_id }}"
vpn_bridge_address: "{{ vpn_bridge_prefix }}.1"
vpn_bridge_broadcast: "{{ vpn_bridge_prefix }}.255"
vpn_bridge_prefixlen: "24"
vpn_bridge_subnet: "{{ vpn_bridge_prefix }}.0/{{ vpn_bridge_prefixlen }}"
vpn_bridge_dnat: "\
{% set vpn_bridge_dnat = [] %}\
{% for properties in ( services_host_services.values() | selectattr('tcp', 'defined') ) %}\
{{ vpn_bridge_dnat.append({ 'address': properties.address, 'ports': properties.tcp }) }}\
{% endfor %}\
{{ vpn_bridge_dnat }}"
# --------------------------------------------------------------------------------------------------
# services
# --------------------------------------------------------------------------------------------------
services_root_directory: "{{ system_var_root_directory }}"
services_home_directory: "{{ system_var_home_directory }}"
services_data_directory: "{{ system_var_data_directory }}"
services_containers_directory: "{{ system_var_containers_directory }}"
services_all_hosts: "{{ groups['asgard'] }}"
services_all_services: "{{
services_all_hosts | map('extract', hostvars, 'services_host_services') | map('dict2items') |
flatten | items2dict }}"
services_resolv_host: "valkyrie"
services:
rproxy: {}
www:
repo:
user: "{{ vault_services.www.repo.user }}"
token: "{{ vault_services.www.repo.token }}"
lrproxy: {}
database:
password: "{{ vault_services.database.password }}"
cloud:
domain: "{{ vault_services.cloud.domain }}"
database:
name: "{{ vault_services.cloud.database.name }}"
user: "{{ vault_services.cloud.database.user }}"
password: "{{ vault_services.cloud.database.password }}"
smtp:
host: "{{ vault_services.cloud.smtp.host }}"
user: "{{ vault_services.cloud.smtp.user }}"
password: "{{ vault_services.cloud.smtp.password }}"
git:
domain: "{{ vault_services.git.domain }}"
database:
name: "{{ vault_services.git.database.name }}"
user: "{{ vault_services.git.database.user }}"
password: "{{ vault_services.git.database.password }}"
smtp:
host: "{{ vault_services.git.smtp.host }}"
user: "{{ vault_services.git.smtp.user }}"
password: "{{ vault_services.git.smtp.password }}"
ssh_port: 2770
notes:
domain: "{{ vault_services.notes.domain }}"
database:
name: "{{ vault_services.notes.database.name }}"
user: "{{ vault_services.notes.database.user }}"
password: "{{ vault_services.notes.database.password }}"
smtp:
host: "{{ vault_services.notes.smtp.host }}"
user: "{{ vault_services.notes.smtp.user }}"
password: "{{ vault_services.notes.smtp.password }}"
music:
domain: "{{ vault_services.music.domain }}"
password_encryption_key: "{{ vault_services.music.password_encryption_key }}"
# --------------------------------------------------------------------------------------------------
# services:user_setup
# --------------------------------------------------------------------------------------------------
services_bridge_gateway: "{{ vpn_bridge_address }}"