salt/ansible
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
b10ee60b74
ansible/inventory/group_vars/all.yml

303 lines
20 KiB
YAML
Raw Normal View History

Taking a dump
2020-10-17 01:00:06 -05:00
# vim:ft=ansible:
Configure our new roles
2020-10-28 21:56:12 -05:00
# For homebrew roles and such, mostly Ansible-related setup
Fix incorrect ansible user on generated inventory
2021-08-01 22:40:52 -05:00
ansible_user: ansible
ansible_become: yes
Taking a dump
2020-10-17 01:00:06 -05:00
common_ansible_pubkey: "ssh-rsa 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 ansible"
Fix up that jank config and make it actually totally usable
2021-08-08 01:20:48 -05:00
# This is a token generated post-setup
# It is to be used for querying netbox
netbox_token: !vault |
$ANSIBLE_VAULT;1.1;AES256
31656630386363323836663537383930346336393061363461653532323561386632343063353161
6630636535373331633762363738613232636366663430330a356333623466623230616433373036
35386162633961616438383332346165323930333662376665616531613837316333653361313332
3065343761343338340a336266316339616134336332376336326332663435323937343531636238
37323530333463383062396363616263386430356438306133393130626365333932323734383165
3064663435626339393836353837643730333266366436373033
Configure our new roles
2020-10-28 21:56:12 -05:00
Add administrative user role
2021-02-26 10:07:57 -06:00
# Admin user configuration
adminuser_name: salt
adminuser_ssh_authorized_keys:
- ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPCoRSbzKkb8gd9rjeeRZeE71vp0vF3leBUeyTWGzFJf ansible-generated on lap-s76-lemp9-0.desu.ltd
Add desktop ed25519 key
2021-02-26 12:38:15 -06:00
- ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINq8NPEqSM0w7CkhdhsSgDsrcpgAvVg18oz9OybkqhHg salt@dsk-ryzen-0
Add administrative user role
2021-02-26 10:07:57 -06:00
Work on a basic implementation of backups Still need to set up good defaults and do host-based configuration tho
2020-12-24 09:06:20 -06:00
# For backups
Actually genericize properly this time, plus add a new backup script for pgdump
2020-12-24 09:35:17 -06:00
backup_s3_bucket: !vault |
Work on a basic implementation of backups Still need to set up good defaults and do host-based configuration tho
2020-12-24 09:06:20 -06:00
$ANSIBLE_VAULT;1.1;AES256
61393939633736616361336162633564356434363963303737366236373332653265366132393439
3333643463306561616261636466303631373866353962310a356561633833633533353937323265
64656235616637366363323330346134656366663733393462346333613535633838333938653434
6133326433613239650a386333626339363263323134313830353963326265666336306130656534
6534
Actually genericize properly this time, plus add a new backup script for pgdump
2020-12-24 09:35:17 -06:00
backup_s3_aws_access_key_id: !vault |
Work on a basic implementation of backups Still need to set up good defaults and do host-based configuration tho
2020-12-24 09:06:20 -06:00
$ANSIBLE_VAULT;1.1;AES256
61353734383466366564333832643738313238666235336332303539383639626263633231396261
6165393062393266343661643466633163383164383032340a333833656566336331323565386162
35646665353539616538353339616531346564636466643639326366353165313861373761396537
3731653463643838330a383065313135343763636534656133343666363237356462326236643631
34366564373661396434663633346635663331393538363362376265653334623538
Actually genericize properly this time, plus add a new backup script for pgdump
2020-12-24 09:35:17 -06:00
backup_s3_aws_secret_access_key: !vault |
Work on a basic implementation of backups Still need to set up good defaults and do host-based configuration tho
2020-12-24 09:06:20 -06:00
$ANSIBLE_VAULT;1.1;AES256
64316231613337333231383837333930336561633164393762343838646136393165626361346637
3364643830346533623137643530323438366665393632320a633032336664616261353734343661
36646565383532616133353530343331663731663965656662363830363063303361373861663762
3032613362626233350a613464333230363830383334363032303730646134306331383733363036
34346334306633306664323337643433356336366633396239306539613539633535386238346662
6232313138393062626631386135383234376361643362353966
Add Zerotier role
2020-11-08 01:34:05 -06:00
# For zerotier
zerotier_network_id: !vault |
$ANSIBLE_VAULT;1.1;AES256
35646131343239623265663562343333383362366633386462646465643163353866643633636135
6238643231313536323337343663313865323430323437630a353462393830376431376363373232
30656433343263653035333637336165323931363966376264353164326135336131646362623734
3339633961393864330a616437613534643231366634643362383438316233376334636264303361
65313231393433396538663463383731303661633663343066333264303330313133
Configure our new roles
2020-10-28 21:56:12 -05:00
# For geerlingguy.apache
apache_remove_default_vhost: yes
Make Apache configuration more secure, add SSL cache
2021-01-26 05:20:48 -06:00
apache_ssl_cipher_suite: "ECDH:AECDH:!SHA1:!SHA256:!SHA384"
Configure our new roles
2020-10-28 21:56:12 -05:00
apache_ssl_protocol: all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
# For geerlingguy.php
Add Nextcloud AND BOY DOES IT SMELL
2020-11-01 04:55:05 -06:00
##RESERVED
Add and set up a basic Gitea
2020-10-29 20:39:59 -05:00
DEPLOY STALIN
2021-04-03 03:40:29 -05:00
# For gulagbot
Experiment with moving secrets to NetBox
2021-08-26 03:35:11 -05:00
secret_gulagbot_db_pass: "{{ query('netbox.netbox.nb_lookup', 'secrets', api_filter='name=secret_gulagbot_db_pass', api_endpoint='https://netbox.desu.ltd', token=netbox_token, key_file='private.pem')[0].value.plaintext }}"
#secret_gulagbot_db_pass: !vault |
# $ANSIBLE_VAULT;1.1;AES256
# 63386534643137613234643962663831353461356464363732613030626364366661626134643837
# 6466653931366539656662323330333363633732613061360a306565643932613635353435663039
# 61386334626437323934366634343162643932393834313235356664623537636162376464613061
# 3966393761626133320a646465376235346239333036326530363538306238626438653232623632
# 37616561326538636534393533613037336665333865613735646532656163373233
DEPLOY STALIN
2021-04-03 03:40:29 -05:00
secret_gulagbot_discord_token: !vault |
$ANSIBLE_VAULT;1.1;AES256
37613664393766353738353139323365346639393538653834643633613564646537616532316336
6532636639333062643631316234386533613862353232390a656634383663623064326666313861
35373034363332363064613165313034666166666233363963646333306138346463613166396438
6138366330623562330a636637326335383333643230333565366263383361333936346638363163
63343237616363376135303938373833373531306433633536613464363664303861353630313366
34356463653362613561373830373235633034656566633032653931316465316438363532396363
333735353435383566323463303566646637
Add and set up a basic Gitea
2020-10-29 20:39:59 -05:00
# For gitea
Add database configuration to psql1 9iron
2020-12-27 13:14:05 -06:00
secret_gitea_9iron_db_pass: !vault |
$ANSIBLE_VAULT;1.1;AES256
62353264353465316661353738666161313036373761666163663733656461316536636334386335
6161386630663739363439383237343065333239613134610a383036373735326536386464343164
31346337636665356630336234306534646362386663633734353166373761316139313734306630
3364306566323666310a323034303434613237643665643637633430353437316339356463646331
33353062343164396465326365653561626363343961326363633231303736316436643935646161
3933353234613430373930663832643934613233383635613433
Add and set up a basic Gitea
2020-10-29 20:39:59 -05:00
secret_gitea_db_pass: !vault |
$ANSIBLE_VAULT;1.1;AES256
35343032343364306363646232613831386530313430663664396432353431393039626230626137
6339653038633534313562333431613362313263623130300a383930626437636466623763663334
64646239633830656338336135313261396536303739373731633830633366313262313035626233
6463663332623635320a356565666638306661356365643930303664346232303165373333613235
62396535653338396232616531323738656636613065336337333336306437363539303766623866
3932386635393061643737326163643164643365303866643766
gitea_secret_key: !vault |
$ANSIBLE_VAULT;1.1;AES256
34373339636233393231363531323338306330653139376661356336343133373836323065333665
3537613462316361646161653966643862633033646134370a643133393162313434383663643538
31343164666235316235393163376134636433386361353266613263363839366432356132383533
3434643430306234350a353037373530653865363931333237663133626537643730643634356162
33353632613637306336653734343332393661343539393034313437373636383732393062333530
3337633338323131373130376137393766363737393536386636
gitea_internal_token: !vault |
$ANSIBLE_VAULT;1.1;AES256
34323237383664663266653034656437643363316538663338383262663931356665383363656466
3861653830626538303761303638663835316239343033370a323164303164613265363535643432
31393732393361666331396533333339623665623562643962323632653537666339346266393632
6639663137613232640a383633343038626638626434636230346634373533616564316262333833
64376163636230303361326532316665366633373035336164393033653366653564633339386338
35326462333364353032343238363230343235303037306532333765376464326234633739396534
31333332613964313031346534306236383434346430396233646132393962383636383631643461
37366163373863653164626365383761623431613164653932363730633134633032336266616335
61626133316161616335323630333461663163613430353438633235336331343934386464373866
62633234313261363537663061373931303832653531356566633739636264666635653936313965
623964653936646334313864643030653763
Add Nextcloud AND BOY DOES IT SMELL
2020-11-01 04:55:05 -06:00
Add Nagios and some dysfunctional templating code
2021-08-08 00:28:18 -05:00
# For Nagios
secret_nagios_admin_pass: !vault |
$ANSIBLE_VAULT;1.1;AES256
64333231393831303031616363363030613464653161313531316465346263313063626638363437
3965303861646232393663633066363039636637343161340a643162633133336335313632383861
34616338636630633539353335336631313361656633333539323130626132356263653436343363
3930323538613137370a373861376566376631356564623665313662636562626234643862343863
61326232633266633262613931303631396163326266386363366639366639613938
Provision (read: move) Netbox to desu.ltd
2021-08-01 21:35:41 -05:00
# For Netbox
secret_netbox_user_pass: !vault |
$ANSIBLE_VAULT;1.1;AES256
33313861366430643638383666653432393466663032613962356266316238376239623438393830
6431643833363963626238306563643431383630613565660a363464313837663231396566636535
66313164663537313661653763623931623562626635616165636330303231363033656234323765
3535386162393564370a623061383831376666656633666537653565393138653134313263646332
39356261623833396166623364346639323863633832333735646366373734613163
secret_netbox_api_token: !vault |
$ANSIBLE_VAULT;1.1;AES256
63313937383737376131326534303963396162396366313635643639303264613763613039656636
3661383139366639303864323662613465663562656134390a356663613732643037363631376135
31643765333238386566313766313466353931616161343933643366343131616433363538336237
3837323762623761630a636231376364333563306366623136633238326436653764353632366562
63626364306239373436396464666532396538373664646333656361363662326366
secret_netbox_db_pass: !vault |
$ANSIBLE_VAULT;1.1;AES256
33333232623431393930626435313138643963663731336530663066633563666439383936316538
6337376232613937303635386235346561326134616265300a326266373834303137623439366438
33616365353663633434653463643964613231343335326234343331396137363439666138376332
3564356231336230630a336639656337353538633931623536303430363836386137646563613338
66326661313064306162363265303636333765383736336231346136383763613131
secret_netbox_secret_key: !vault |
$ANSIBLE_VAULT;1.1;AES256
35313764653130613764383638323462643036363035366239633239393738363262323137393433
3761386334383762633732306666633133306363396637350a323437666533653433303533343663
39386237333335333463656363373535323432333937356564653433353163316635393733303936
3061313335366664370a393331623633336539303065353161386132346430313931353965313538
66653265336462313337353264666661323563333964633331633365623431386133
Add Nextcloud AND BOY DOES IT SMELL
2020-11-01 04:55:05 -06:00
# For Nextcloud
Add database configuration to psql1 9iron
2020-12-27 13:14:05 -06:00
secret_nextcloud_9iron_db_pass: !vault |
$ANSIBLE_VAULT;1.1;AES256
37633035633563646266346264333636393931323664313166633133653461646333643731636661
3966666665396239346662613764353333393038663762340a313236396331623061376462356437
66373234633939393034353439393465663131303661393164303335336435653734613064663964
3332313764623133630a393731613236373837316437653265636663666261383135636662373566
61373135303632336237333836353764646639633735323566346366623766646266
Add Nextcloud AND BOY DOES IT SMELL
2020-11-01 04:55:05 -06:00
secret_nextcloud_db_pass: !vault |
$ANSIBLE_VAULT;1.1;AES256
31626162623164373133356634323436373634616363663966313039313431643837326630346632
3066303432303064663838643533373933343166356437610a613134383566653035663462393538
37616538366337313265333333373432363031323336306436643839333337313735633463326133
6538383936643664370a663737333861303132313031373234396562653464653838343836663530
38396663633237383764613139346333636432613464356465663661653265323135363032633963
3335626335353431616365313232346431313439653132303833
Initial attempt at getting web1 up
2020-12-18 02:25:16 -06:00
secret_nextcloud_admin_pass: !vault |
$ANSIBLE_VAULT;1.1;AES256
66303362626535386438633666376264313563323034343938363034353435306463613364366636
3633343332643062633265643838346465623362323866610a666237636461376166373938626538
62326334356339326330623336363038323431363266306265386635343432383764623437386462
3534643731333331320a393462323264666135666134336536633639613065363339333131653433
37653732313664356330356139646336353735613336326563366361383737653538
Add Pleroma DB configuration
2020-12-27 13:15:59 -06:00
Get ready for a Peertube install
2021-06-03 19:11:50 -05:00
# For Peertube
secret_peertube_db_pass: !vault |
$ANSIBLE_VAULT;1.1;AES256
32376536666566663033373033663331366437363331666662623831636135363633333532346531
6465346433663238343234366430633631306534626439310a636163356636613536366461663266
66663637303064303036366263663361616231336461346534363131343634646133323538356633
3639643838656137310a613333363865393536343731666234623065616365373834383536616161
64653939393038393361313961366131633461653139646536653163383336336338
Add Pleroma DB configuration
2020-12-27 13:15:59 -06:00
# For Pleroma
secret_pleroma_9iron_db_pass: !vault |
$ANSIBLE_VAULT;1.1;AES256
34343838386134656236313462653531663839363030333630383332386535356431326436633137
3261323632653635383930333131333235373437653733300a363562666264616138623832666137
61333039646332343838346633363035343434303036643465353062353062303961383138643564
3338393765393733340a626436653666363236643938613466643530326665653764333933393437
37613033653864643965323162373366306233626235663461326266376662663634353066386139
37636162313364623933396232366239633338363539626637373163333130373665373038363566
65646633636638653335356536323334646632366164633532636634376632356166306139393766
38633934623639366263
Move fedi1 over, add Pleroma role
2021-01-25 22:19:31 -06:00
secret_pleroma_key_base: !vault |
$ANSIBLE_VAULT;1.1;AES256
36333934336635613533333137636532363937613764353933636566663031316262333837323064
6534653062626461633462636335346132353564653038330a326330326235623530393337333063
37666666386637633839633737376465366439356461653363396665636137353264363762346461
3765616634653234630a623061393834373964653939626564363263383435666366356339663136
64613330656434653538363734393831353133316666326338366335383064356165333537383837
31633939353565303661626233623064653838636435376239376361663362636164653962383561
33366335623038653232613731333730363836653532363834663663343963303763323534343038
61666238346239636634
secret_pleroma_signing_salt: !vault |
$ANSIBLE_VAULT;1.1;AES256
31306137646362333433313630363538333234643339353530333038393061663132633161356231
3662386234633933633762363334333031306564353132380a633339323364633137396636616363
64393536353362386336323662316262333763326138616364333237353262323232636335353436
3563396435643363620a646337346561393863366361643536356363626334343264343861663131
3466
Add Matrix/Synapse DB configuration
2020-12-27 13:18:26 -06:00
Add check_pgsql monitors
2021-08-23 18:18:53 -05:00
# For PostgreSQL
secret_postgresql_monitoring_password: !vault |
$ANSIBLE_VAULT;1.1;AES256
30346136383035313162316264356632396564353732346638363133396630363664363433653762
3031373836393536393662393833303935306339666666620a396162643861663639643064346433
33303865353332353565383635353466626430363933316330373338313833626633626637323161
3135313737356434610a373664303334393733313666336263383864383139373265366135626262
62626239303335666135333439316239383230653234343261313838333234396465
Testing some SNMP stuff
2021-08-08 13:36:52 -05:00
# For SNMP
secret_snmp_internal_username: !vault |
$ANSIBLE_VAULT;1.1;AES256
65663937306665636134326138643230383632363465363764306131633565323963393532626131
3338356435396531626530653665383630366538303036310a326338623135613834636364353936
38643836373138633537666436656666623830363166303666366337333935313530373730353431
6166636634373062380a346636363234636131333539333232353364656563346438663663303734
39636263376635313631383262323538316434623065366332363762636562643064
secret_snmp_internal_password: !vault |
$ANSIBLE_VAULT;1.1;AES256
32393365616165636263376636643035316431663334656135623832366265616230343665663362
3564313266373931363265393465373138373230323030660a633436303339616134643532346533
31643730353866366231623134356435613231353739383035623162653962323931656465656162
6135326562313065330a353763396564646238616337313033616639383431633834383831653536
32353130333634653831316464373465343233336266636561363334333832333036
secret_snmp_rouser_username: !vault |
$ANSIBLE_VAULT;1.1;AES256
62393936313166323437663639376433303131316664613965323031373439633335313331626238
6265303766663931396438396535623035376531343637630a336138373561396437353331303938
35623462306638363765363032366365363938633564386162633761623261346661313531373764
3534613836343738310a613163656139326662373535393935323465393833363861306534386234
64396130366463323133303566383233356239316362383866336230333037643133
secret_snmp_rouser_password: !vault |
$ANSIBLE_VAULT;1.1;AES256
36343461313133376563383563616562613338613463376535656339636335636336663839323033
3665656533623938326132646133653431616438373138630a393033373330316236366365633162
39346663356364356330386562623532343330343133386331356366376366636665366366323833
3664316436363262390a663530633430303039366465306533363531356231396130316462373365
33396330393231383833653134396137383436623535636165366664366137626464
secret_snmp_rouser_privacy_passphrase: !vault |
$ANSIBLE_VAULT;1.1;AES256
31616564303237653131393133633232326535333566303538306232613031373536616463306439
3431633838663261636461393833373961376265343163330a383336333432623136623731386461
39373436313635353932353963313931646465366538393738623735383635356238313066386533
3764363538636232630a383730323433343239663461373030383132626532306130363965316661
64353932376139613765303764313463353366663535653135393637633835353566
How about starbound
2021-06-08 23:18:26 -05:00
# For Steam games
steam_username: !vault |
$ANSIBLE_VAULT;1.1;AES256
37633565343839646163383265646361366438643265363030353465653836653736633239316663
6363343863356538376238643133353036316364656266650a323962313564646365373461383033
61653035323932333838616138643731643738396564366566356232336138363665623436383433
6564326139333337340a343861613865393265353637393537393439323363656365373639623934
3037
steam_password: !vault |
$ANSIBLE_VAULT;1.1;AES256
33346235653262313630316135303131663437643234366662663037386135393865653433613336
3832313731326631383761633534656237653931346431630a666239313061653664363530373334
31373330346535366633313364626132326461363331653431346666366135613639646132316434
3838363033643039320a663539633437643161343961633631613435333930393230393232306665
39343162636338393261616130656365313765393033653839383365323163633261
Add our fancy fun Prop Hunt serber
2021-07-18 23:21:00 -05:00
steam_apikey: !vault |
$ANSIBLE_VAULT;1.1;AES256
66366433663963653231653231643538353738373864393437343033613230653032636638363331
3232623938396634383161633564643231383165613938330a613865373637613034616237303538
31316563343134313532323937643833646535653330326564376566383338656463363032373766
6464653861386436300a626366666238643935656531386561346436333266313665373464613539
37656136623937383039376664326333323932643330383632656534313663623266336438393466
3936373235623438373064363438343861653437643138373733
How about starbound
2021-06-08 23:18:26 -05:00
Add Matrix/Synapse DB configuration
2020-12-27 13:18:26 -06:00
# For Matrix/Synapse
secret_matrix_9iron_db_pass: !vault |
$ANSIBLE_VAULT;1.1;AES256
64663061333130386634323631353435376330636334623334663365633361336563393634333061
6531393839336532376465356132646337663339333431340a383030373166653835386239643365
31356462653634323162343164633130366664323034373330613764663635326534303935303230
6233636463636134640a386436316462643434343739333232613264303635323261616634326562
63316265366238383038653034326661633163346462396663346563666134393232
Reference in New Issue Copy Permalink