First step towards rewrite
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev>rewrite
Tuan-Dat Tran
parent
6fd77266cd
commit
50abbf933c
|
|
@ -1,207 +0,0 @@
|
||||||
<mxfile host="app.diagrams.net" modified="2023-11-05T13:55:54.105Z" agent="Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/119.0" etag="qKRITLw66apjhZnPW2mG" version="21.6.2" pages="2">
|
|
||||||
<diagram id="JSIfkQgaAO27B-iO4uI6" name="Homelab Overview">
|
|
||||||
<mxGraphModel dx="2924" dy="1194" grid="1" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="1" pageScale="1" pageWidth="850" pageHeight="1100" math="0" shadow="0">
|
|
||||||
<root>
|
|
||||||
<mxCell id="0" />
|
|
||||||
<mxCell id="1" parent="0" />
|
|
||||||
<mxCell id="z4CzeoHyWsNDpYlZFiTu-54" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0;exitY=1;exitDx=0;exitDy=0;entryX=0.5;entryY=0;entryDx=0;entryDy=0;" edge="1" parent="1" source="z4CzeoHyWsNDpYlZFiTu-73" target="z4CzeoHyWsNDpYlZFiTu-27">
|
|
||||||
<mxGeometry relative="1" as="geometry">
|
|
||||||
<mxPoint x="-500" y="530" as="targetPoint" />
|
|
||||||
<Array as="points">
|
|
||||||
<mxPoint x="10" y="320" />
|
|
||||||
<mxPoint x="-515" y="320" />
|
|
||||||
</Array>
|
|
||||||
</mxGeometry>
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="z4CzeoHyWsNDpYlZFiTu-66" value="192.168.20.1/24" style="edgeLabel;html=1;align=center;verticalAlign=middle;resizable=0;points=[];" vertex="1" connectable="0" parent="z4CzeoHyWsNDpYlZFiTu-54">
|
|
||||||
<mxGeometry x="-0.3363" y="1" relative="1" as="geometry">
|
|
||||||
<mxPoint as="offset" />
|
|
||||||
</mxGeometry>
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="z4CzeoHyWsNDpYlZFiTu-55" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.25;exitY=1;exitDx=0;exitDy=0;" edge="1" parent="1" source="z4CzeoHyWsNDpYlZFiTu-73" target="z4CzeoHyWsNDpYlZFiTu-35">
|
|
||||||
<mxGeometry relative="1" as="geometry">
|
|
||||||
<mxPoint x="180" y="290" as="sourcePoint" />
|
|
||||||
<Array as="points">
|
|
||||||
<mxPoint x="105" y="360" />
|
|
||||||
<mxPoint x="-20" y="360" />
|
|
||||||
</Array>
|
|
||||||
</mxGeometry>
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="z4CzeoHyWsNDpYlZFiTu-65" value="192.168.30.1/24" style="edgeLabel;html=1;align=center;verticalAlign=middle;resizable=0;points=[];" vertex="1" connectable="0" parent="z4CzeoHyWsNDpYlZFiTu-55">
|
|
||||||
<mxGeometry x="-0.1082" y="1" relative="1" as="geometry">
|
|
||||||
<mxPoint x="52" as="offset" />
|
|
||||||
</mxGeometry>
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="z4CzeoHyWsNDpYlZFiTu-56" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;entryX=0.5;entryY=0;entryDx=0;entryDy=0;exitX=0.75;exitY=1;exitDx=0;exitDy=0;" edge="1" parent="1" source="z4CzeoHyWsNDpYlZFiTu-73" target="z4CzeoHyWsNDpYlZFiTu-41">
|
|
||||||
<mxGeometry relative="1" as="geometry">
|
|
||||||
<Array as="points">
|
|
||||||
<mxPoint x="295" y="360" />
|
|
||||||
<mxPoint x="420" y="360" />
|
|
||||||
</Array>
|
|
||||||
</mxGeometry>
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="z4CzeoHyWsNDpYlZFiTu-67" value="192.168.40.1/24" style="edgeLabel;html=1;align=center;verticalAlign=middle;resizable=0;points=[];" vertex="1" connectable="0" parent="z4CzeoHyWsNDpYlZFiTu-56">
|
|
||||||
<mxGeometry x="-0.1475" y="-2" relative="1" as="geometry">
|
|
||||||
<mxPoint x="-33" as="offset" />
|
|
||||||
</mxGeometry>
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="z4CzeoHyWsNDpYlZFiTu-57" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=1;exitY=1;exitDx=0;exitDy=0;" edge="1" parent="1" source="z4CzeoHyWsNDpYlZFiTu-73" target="z4CzeoHyWsNDpYlZFiTu-39">
|
|
||||||
<mxGeometry relative="1" as="geometry">
|
|
||||||
<Array as="points">
|
|
||||||
<mxPoint x="390" y="320" />
|
|
||||||
<mxPoint x="820" y="320" />
|
|
||||||
</Array>
|
|
||||||
</mxGeometry>
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="z4CzeoHyWsNDpYlZFiTu-68" value="192.168.50.1/24" style="edgeLabel;html=1;align=center;verticalAlign=middle;resizable=0;points=[];" vertex="1" connectable="0" parent="z4CzeoHyWsNDpYlZFiTu-57">
|
|
||||||
<mxGeometry x="-0.2384" y="-3" relative="1" as="geometry">
|
|
||||||
<mxPoint as="offset" />
|
|
||||||
</mxGeometry>
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="z4CzeoHyWsNDpYlZFiTu-27" value="Homelab VLAN20" style="swimlane;whiteSpace=wrap;html=1;" vertex="1" parent="1">
|
|
||||||
<mxGeometry x="-750" y="600" width="470" height="400" as="geometry">
|
|
||||||
<mxRectangle x="-750" y="600" width="140" height="30" as="alternateBounds" />
|
|
||||||
</mxGeometry>
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="z4CzeoHyWsNDpYlZFiTu-90" value="<div>aya01.seyshiro.de</div><div>192.168.20.12</div>" style="fontColor=#0066CC;verticalAlign=top;verticalLabelPosition=bottom;labelPosition=center;align=center;html=1;outlineConnect=0;fillColor=#CCCCCC;strokeColor=#6881B3;gradientColor=none;gradientDirection=north;strokeWidth=2;shape=mxgraph.networks.server_storage;" vertex="1" parent="z4CzeoHyWsNDpYlZFiTu-27">
|
|
||||||
<mxGeometry x="20" y="40" width="105" height="105" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="z4CzeoHyWsNDpYlZFiTu-19" value="<div>pi.seyshiro.de</div><div>192.168.20.11<br></div>" style="fontColor=#0066CC;verticalAlign=top;verticalLabelPosition=bottom;labelPosition=center;align=center;html=1;outlineConnect=0;fillColor=#CCCCCC;strokeColor=#6881B3;gradientColor=none;gradientDirection=north;strokeWidth=2;shape=mxgraph.networks.server;" vertex="1" parent="z4CzeoHyWsNDpYlZFiTu-27">
|
|
||||||
<mxGeometry x="250" y="40" width="90" height="100" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="z4CzeoHyWsNDpYlZFiTu-17" value="<div>inko.seyshiro.de</div><div>192.168.20.14<br></div>" style="fontColor=#0066CC;verticalAlign=top;verticalLabelPosition=bottom;labelPosition=center;align=center;html=1;outlineConnect=0;fillColor=#CCCCCC;strokeColor=#6881B3;gradientColor=none;gradientDirection=north;strokeWidth=2;shape=mxgraph.networks.server;" vertex="1" parent="z4CzeoHyWsNDpYlZFiTu-27">
|
|
||||||
<mxGeometry x="140" y="40" width="90" height="100" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="z4CzeoHyWsNDpYlZFiTu-20" value="<div>naruto.seyshiro.de</div><div>192.168.20.13<br></div>" style="fontColor=#0066CC;verticalAlign=top;verticalLabelPosition=bottom;labelPosition=center;align=center;html=1;outlineConnect=0;fillColor=#CCCCCC;strokeColor=#6881B3;gradientColor=none;gradientDirection=north;strokeWidth=2;shape=mxgraph.networks.server;" vertex="1" parent="z4CzeoHyWsNDpYlZFiTu-27">
|
|
||||||
<mxGeometry x="360" y="40" width="90" height="100" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="z4CzeoHyWsNDpYlZFiTu-35" value="User VLAN30" style="swimlane;whiteSpace=wrap;html=1;" vertex="1" parent="1">
|
|
||||||
<mxGeometry x="-200" y="600" width="360" height="400" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="z4CzeoHyWsNDpYlZFiTu-28" value="" style="fontColor=#0066CC;verticalAlign=top;verticalLabelPosition=bottom;labelPosition=center;align=center;html=1;outlineConnect=0;fillColor=#CCCCCC;strokeColor=#6881B3;gradientColor=none;gradientDirection=north;strokeWidth=2;shape=mxgraph.networks.tablet;" vertex="1" parent="z4CzeoHyWsNDpYlZFiTu-35">
|
|
||||||
<mxGeometry x="50" y="50" width="100" height="70" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="z4CzeoHyWsNDpYlZFiTu-8" value="" style="fontColor=#0066CC;verticalAlign=top;verticalLabelPosition=bottom;labelPosition=center;align=center;html=1;outlineConnect=0;fillColor=#CCCCCC;strokeColor=#6881B3;gradientColor=none;gradientDirection=north;strokeWidth=2;shape=mxgraph.networks.pc;" vertex="1" parent="z4CzeoHyWsNDpYlZFiTu-35">
|
|
||||||
<mxGeometry x="100" y="140" width="100" height="70" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="z4CzeoHyWsNDpYlZFiTu-33" value="" style="fontColor=#0066CC;verticalAlign=top;verticalLabelPosition=bottom;labelPosition=center;align=center;html=1;outlineConnect=0;fillColor=#CCCCCC;strokeColor=#6881B3;gradientColor=none;gradientDirection=north;strokeWidth=2;shape=mxgraph.networks.mobile;" vertex="1" parent="z4CzeoHyWsNDpYlZFiTu-35">
|
|
||||||
<mxGeometry x="250" y="70" width="50" height="100" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="z4CzeoHyWsNDpYlZFiTu-36" value="" style="fontColor=#0066CC;verticalAlign=top;verticalLabelPosition=bottom;labelPosition=center;align=center;html=1;outlineConnect=0;fillColor=#CCCCCC;strokeColor=#6881B3;gradientColor=none;gradientDirection=north;strokeWidth=2;shape=mxgraph.networks.video_projector;" vertex="1" parent="z4CzeoHyWsNDpYlZFiTu-35">
|
|
||||||
<mxGeometry x="220" y="210" width="100" height="35" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="z4CzeoHyWsNDpYlZFiTu-46" value="" style="fontColor=#0066CC;verticalAlign=top;verticalLabelPosition=bottom;labelPosition=center;align=center;html=1;outlineConnect=0;fillColor=#CCCCCC;strokeColor=#6881B3;gradientColor=none;gradientDirection=north;strokeWidth=2;shape=mxgraph.networks.laptop;" vertex="1" parent="z4CzeoHyWsNDpYlZFiTu-35">
|
|
||||||
<mxGeometry x="50" y="260" width="100" height="55" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="z4CzeoHyWsNDpYlZFiTu-39" value="IoT VLAN50" style="swimlane;whiteSpace=wrap;html=1;" vertex="1" parent="1">
|
|
||||||
<mxGeometry x="680" y="600" width="280" height="460" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="z4CzeoHyWsNDpYlZFiTu-52" value="<div>Brother MFC-L2710DW</div><div>192.168.50.219</div>" style="fontColor=#0066CC;verticalAlign=top;verticalLabelPosition=bottom;labelPosition=center;align=center;html=1;outlineConnect=0;fillColor=#CCCCCC;strokeColor=#6881B3;gradientColor=none;gradientDirection=north;strokeWidth=2;shape=mxgraph.networks.copier;" vertex="1" parent="z4CzeoHyWsNDpYlZFiTu-39">
|
|
||||||
<mxGeometry x="20" y="35" width="100" height="100" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="z4CzeoHyWsNDpYlZFiTu-51" value="<div>Brother QL-820NWB</div><div>192.168.50.218</div>" style="fontColor=#0066CC;verticalAlign=top;verticalLabelPosition=bottom;labelPosition=center;align=center;html=1;outlineConnect=0;fillColor=#CCCCCC;strokeColor=#6881B3;gradientColor=none;gradientDirection=north;strokeWidth=2;shape=mxgraph.networks.copier;" vertex="1" parent="z4CzeoHyWsNDpYlZFiTu-39">
|
|
||||||
<mxGeometry x="150" y="35" width="100" height="100" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="z4CzeoHyWsNDpYlZFiTu-60" value="Lightbulbs" style="fontColor=#0066CC;verticalAlign=top;verticalLabelPosition=bottom;labelPosition=center;align=center;html=1;outlineConnect=0;fillColor=#CCCCCC;strokeColor=#6881B3;gradientColor=none;gradientDirection=north;strokeWidth=2;shape=mxgraph.networks.comm_link;" vertex="1" parent="z4CzeoHyWsNDpYlZFiTu-39">
|
|
||||||
<mxGeometry x="50" y="190" width="40" height="80" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="z4CzeoHyWsNDpYlZFiTu-62" value="Shelly Power Outlet" style="fontColor=#0066CC;verticalAlign=top;verticalLabelPosition=bottom;labelPosition=center;align=center;html=1;outlineConnect=0;fillColor=#CCCCCC;strokeColor=#6881B3;gradientColor=none;gradientDirection=north;strokeWidth=2;shape=mxgraph.networks.comm_link;" vertex="1" parent="z4CzeoHyWsNDpYlZFiTu-39">
|
|
||||||
<mxGeometry x="180" y="190" width="40" height="80" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="z4CzeoHyWsNDpYlZFiTu-81" value="BirbCam" style="fontColor=#0066CC;verticalAlign=top;verticalLabelPosition=bottom;labelPosition=center;align=center;html=1;outlineConnect=0;fillColor=#CCCCCC;strokeColor=#6881B3;gradientColor=none;gradientDirection=north;strokeWidth=2;shape=mxgraph.networks.security_camera;" vertex="1" parent="z4CzeoHyWsNDpYlZFiTu-39">
|
|
||||||
<mxGeometry x="30" y="330" width="100" height="75" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="z4CzeoHyWsNDpYlZFiTu-53" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;entryX=0;entryY=0.5;entryDx=0;entryDy=0;" edge="1" parent="1" source="z4CzeoHyWsNDpYlZFiTu-40" target="z4CzeoHyWsNDpYlZFiTu-73">
|
|
||||||
<mxGeometry relative="1" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="z4CzeoHyWsNDpYlZFiTu-69" value="192.168.200.1/32" style="edgeLabel;html=1;align=center;verticalAlign=middle;resizable=0;points=[];" vertex="1" connectable="0" parent="z4CzeoHyWsNDpYlZFiTu-53">
|
|
||||||
<mxGeometry x="-0.3672" relative="1" as="geometry">
|
|
||||||
<mxPoint as="offset" />
|
|
||||||
</mxGeometry>
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="z4CzeoHyWsNDpYlZFiTu-40" value="netcup VPS" style="swimlane;whiteSpace=wrap;html=1;" vertex="1" parent="1">
|
|
||||||
<mxGeometry x="-290" y="40" width="150" height="220" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="z4CzeoHyWsNDpYlZFiTu-38" value="<div>mii.seyshiro.de</div><div>tudattr.dev<br></div><div>192.168.200.2<br></div>" style="fontColor=#0066CC;verticalAlign=top;verticalLabelPosition=bottom;labelPosition=center;align=center;html=1;outlineConnect=0;fillColor=#CCCCCC;strokeColor=#6881B3;gradientColor=none;gradientDirection=north;strokeWidth=2;shape=mxgraph.networks.proxy_server;" vertex="1" parent="z4CzeoHyWsNDpYlZFiTu-40">
|
|
||||||
<mxGeometry x="20" y="50" width="105" height="105" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="z4CzeoHyWsNDpYlZFiTu-41" value="Guest VLAN40" style="swimlane;whiteSpace=wrap;html=1;" vertex="1" parent="1">
|
|
||||||
<mxGeometry x="240" y="600" width="360" height="280" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="z4CzeoHyWsNDpYlZFiTu-44" value="" style="fontColor=#0066CC;verticalAlign=top;verticalLabelPosition=bottom;labelPosition=center;align=center;html=1;outlineConnect=0;fillColor=#CCCCCC;strokeColor=#6881B3;gradientColor=none;gradientDirection=north;strokeWidth=2;shape=mxgraph.networks.mobile;" vertex="1" parent="z4CzeoHyWsNDpYlZFiTu-41">
|
|
||||||
<mxGeometry x="250" y="70" width="50" height="100" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="z4CzeoHyWsNDpYlZFiTu-47" value="" style="fontColor=#0066CC;verticalAlign=top;verticalLabelPosition=bottom;labelPosition=center;align=center;html=1;outlineConnect=0;fillColor=#CCCCCC;strokeColor=#6881B3;gradientColor=none;gradientDirection=north;strokeWidth=2;shape=mxgraph.networks.tablet;" vertex="1" parent="z4CzeoHyWsNDpYlZFiTu-41">
|
|
||||||
<mxGeometry x="40" y="50" width="100" height="70" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="z4CzeoHyWsNDpYlZFiTu-48" value="" style="fontColor=#0066CC;verticalAlign=top;verticalLabelPosition=bottom;labelPosition=center;align=center;html=1;outlineConnect=0;fillColor=#CCCCCC;strokeColor=#6881B3;gradientColor=none;gradientDirection=north;strokeWidth=2;shape=mxgraph.networks.laptop;" vertex="1" parent="z4CzeoHyWsNDpYlZFiTu-41">
|
|
||||||
<mxGeometry x="90" y="160" width="100" height="55" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="z4CzeoHyWsNDpYlZFiTu-73" value="<div>Network Backbone&nbsp;</div><div>(Management VLAN 70)</div>" style="swimlane;whiteSpace=wrap;html=1;startSize=40;" vertex="1" parent="1">
|
|
||||||
<mxGeometry x="10" y="40" width="380" height="220" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="z4CzeoHyWsNDpYlZFiTu-10" value="<div>Mikrotik CRS 326</div><div>192.168.70.1<br></div>" style="fontColor=#0066CC;verticalAlign=top;verticalLabelPosition=bottom;labelPosition=center;align=center;html=1;outlineConnect=0;fillColor=#CCCCCC;strokeColor=#6881B3;gradientColor=none;gradientDirection=north;strokeWidth=2;shape=mxgraph.networks.router;" vertex="1" parent="z4CzeoHyWsNDpYlZFiTu-73">
|
|
||||||
<mxGeometry x="60" y="85" width="100" height="30" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="z4CzeoHyWsNDpYlZFiTu-70" value="<div>TP-Link EAP 225</div><div>192.168.70.250</div>" style="fontColor=#0066CC;verticalAlign=top;verticalLabelPosition=bottom;labelPosition=center;align=center;html=1;outlineConnect=0;fillColor=#CCCCCC;strokeColor=#6881B3;gradientColor=none;gradientDirection=north;strokeWidth=2;shape=mxgraph.networks.wireless_modem;" vertex="1" parent="z4CzeoHyWsNDpYlZFiTu-73">
|
|
||||||
<mxGeometry x="260" y="57.5" width="100" height="85" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="z4CzeoHyWsNDpYlZFiTu-71" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=1;exitY=0.5;exitDx=0;exitDy=0;exitPerimeter=0;endArrow=none;endFill=0;" edge="1" parent="z4CzeoHyWsNDpYlZFiTu-73" source="z4CzeoHyWsNDpYlZFiTu-10" target="z4CzeoHyWsNDpYlZFiTu-70">
|
|
||||||
<mxGeometry relative="1" as="geometry">
|
|
||||||
<mxPoint x="30" y="142.5" as="sourcePoint" />
|
|
||||||
</mxGeometry>
|
|
||||||
</mxCell>
|
|
||||||
</root>
|
|
||||||
</mxGraphModel>
|
|
||||||
</diagram>
|
|
||||||
<diagram id="2pU-qBdMS-FfD6IS7qYU" name="VLAN View">
|
|
||||||
<mxGraphModel dx="2440" dy="1405" grid="1" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="1" pageScale="1" pageWidth="850" pageHeight="1100" math="0" shadow="0">
|
|
||||||
<root>
|
|
||||||
<mxCell id="0" />
|
|
||||||
<mxCell id="1" parent="0" />
|
|
||||||
<mxCell id="7z5INb6uvPQJT5LWZGVQ-28" value="netcup VPS" style="swimlane;whiteSpace=wrap;html=1;" vertex="1" parent="1">
|
|
||||||
<mxGeometry x="480" y="20" width="150" height="220" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="7z5INb6uvPQJT5LWZGVQ-29" value="<div>mii.seyshiro.de</div><div>tudattr.dev<br></div><div>192.168.200.2<br></div>" style="fontColor=#0066CC;verticalAlign=top;verticalLabelPosition=bottom;labelPosition=center;align=center;html=1;outlineConnect=0;fillColor=#CCCCCC;strokeColor=#6881B3;gradientColor=none;gradientDirection=north;strokeWidth=2;shape=mxgraph.networks.proxy_server;" vertex="1" parent="7z5INb6uvPQJT5LWZGVQ-28">
|
|
||||||
<mxGeometry x="20" y="50" width="105" height="105" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="7z5INb6uvPQJT5LWZGVQ-34" value="<div>Network Backbone&nbsp;</div><div>(Management VLAN 70)</div>" style="swimlane;whiteSpace=wrap;html=1;startSize=40;" vertex="1" parent="1">
|
|
||||||
<mxGeometry x="780" y="20" width="380" height="220" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="7z5INb6uvPQJT5LWZGVQ-36" value="<div>TP-Link EAP 225</div><div>192.168.70.250</div>" style="fontColor=#0066CC;verticalAlign=top;verticalLabelPosition=bottom;labelPosition=center;align=center;html=1;outlineConnect=0;fillColor=#CCCCCC;strokeColor=#6881B3;gradientColor=none;gradientDirection=north;strokeWidth=2;shape=mxgraph.networks.wireless_modem;" vertex="1" parent="7z5INb6uvPQJT5LWZGVQ-34">
|
|
||||||
<mxGeometry x="260" y="57.5" width="100" height="85" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="7z5INb6uvPQJT5LWZGVQ-35" value="<div>Mikrotik CRS 326</div><div>192.168.70.1<br></div>" style="fontColor=#0066CC;verticalAlign=top;verticalLabelPosition=bottom;labelPosition=center;align=center;html=1;outlineConnect=0;fillColor=#CCCCCC;strokeColor=#6881B3;gradientColor=none;gradientDirection=north;strokeWidth=2;shape=mxgraph.networks.router;" vertex="1" parent="7z5INb6uvPQJT5LWZGVQ-34">
|
|
||||||
<mxGeometry x="60" y="100" width="100" height="30" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="7z5INb6uvPQJT5LWZGVQ-13" value="<div>naruto.seyshiro.de</div><div>192.168.20.13<br></div>" style="fontColor=#0066CC;verticalAlign=top;verticalLabelPosition=bottom;labelPosition=center;align=center;html=1;outlineConnect=0;fillColor=#CCCCCC;strokeColor=#6881B3;gradientColor=none;gradientDirection=north;strokeWidth=2;shape=mxgraph.networks.server;" vertex="1" parent="1">
|
|
||||||
<mxGeometry x="420" y="370" width="90" height="100" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="7z5INb6uvPQJT5LWZGVQ-11" value="<div>pi.seyshiro.de</div><div>192.168.20.11<br></div>" style="fontColor=#0066CC;verticalAlign=top;verticalLabelPosition=bottom;labelPosition=center;align=center;html=1;outlineConnect=0;fillColor=#CCCCCC;strokeColor=#6881B3;gradientColor=none;gradientDirection=north;strokeWidth=2;shape=mxgraph.networks.server;" vertex="1" parent="1">
|
|
||||||
<mxGeometry x="310" y="370" width="90" height="100" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="7z5INb6uvPQJT5LWZGVQ-12" value="<div>inko.seyshiro.de</div><div>192.168.20.14<br></div>" style="fontColor=#0066CC;verticalAlign=top;verticalLabelPosition=bottom;labelPosition=center;align=center;html=1;outlineConnect=0;fillColor=#CCCCCC;strokeColor=#6881B3;gradientColor=none;gradientDirection=north;strokeWidth=2;shape=mxgraph.networks.server;" vertex="1" parent="1">
|
|
||||||
<mxGeometry x="200" y="370" width="90" height="100" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="7z5INb6uvPQJT5LWZGVQ-10" value="<div>aya01.seyshiro.de</div><div>192.168.20.12</div>" style="fontColor=#0066CC;verticalAlign=top;verticalLabelPosition=bottom;labelPosition=center;align=center;html=1;outlineConnect=0;fillColor=#CCCCCC;strokeColor=#6881B3;gradientColor=none;gradientDirection=north;strokeWidth=2;shape=mxgraph.networks.server_storage;" vertex="1" parent="1">
|
|
||||||
<mxGeometry x="80" y="370" width="105" height="105" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="7z5INb6uvPQJT5LWZGVQ-21" value="<div>Brother MFC-L2710DW</div><div>192.168.50.219</div>" style="fontColor=#0066CC;verticalAlign=top;verticalLabelPosition=bottom;labelPosition=center;align=center;html=1;outlineConnect=0;fillColor=#CCCCCC;strokeColor=#6881B3;gradientColor=none;gradientDirection=north;strokeWidth=2;shape=mxgraph.networks.copier;" vertex="1" parent="1">
|
|
||||||
<mxGeometry x="1330" y="160" width="100" height="100" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="7z5INb6uvPQJT5LWZGVQ-22" value="<div>Brother QL-820NWB</div><div>192.168.50.218</div>" style="fontColor=#0066CC;verticalAlign=top;verticalLabelPosition=bottom;labelPosition=center;align=center;html=1;outlineConnect=0;fillColor=#CCCCCC;strokeColor=#6881B3;gradientColor=none;gradientDirection=north;strokeWidth=2;shape=mxgraph.networks.copier;" vertex="1" parent="1">
|
|
||||||
<mxGeometry x="1460" y="160" width="100" height="100" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="7z5INb6uvPQJT5LWZGVQ-23" value="Lightbulbs" style="fontColor=#0066CC;verticalAlign=top;verticalLabelPosition=bottom;labelPosition=center;align=center;html=1;outlineConnect=0;fillColor=#CCCCCC;strokeColor=#6881B3;gradientColor=none;gradientDirection=north;strokeWidth=2;shape=mxgraph.networks.comm_link;" vertex="1" parent="1">
|
|
||||||
<mxGeometry x="1360" y="315" width="40" height="80" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="7z5INb6uvPQJT5LWZGVQ-24" value="Shelly Power Outlet" style="fontColor=#0066CC;verticalAlign=top;verticalLabelPosition=bottom;labelPosition=center;align=center;html=1;outlineConnect=0;fillColor=#CCCCCC;strokeColor=#6881B3;gradientColor=none;gradientDirection=north;strokeWidth=2;shape=mxgraph.networks.comm_link;" vertex="1" parent="1">
|
|
||||||
<mxGeometry x="1490" y="315" width="40" height="80" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
<mxCell id="7z5INb6uvPQJT5LWZGVQ-25" value="BirbCam" style="fontColor=#0066CC;verticalAlign=top;verticalLabelPosition=bottom;labelPosition=center;align=center;html=1;outlineConnect=0;fillColor=#CCCCCC;strokeColor=#6881B3;gradientColor=none;gradientDirection=north;strokeWidth=2;shape=mxgraph.networks.security_camera;" vertex="1" parent="1">
|
|
||||||
<mxGeometry x="1340" y="455" width="100" height="75" as="geometry" />
|
|
||||||
</mxCell>
|
|
||||||
</root>
|
|
||||||
</mxGraphModel>
|
|
||||||
</diagram>
|
|
||||||
</mxfile>
|
|
||||||
Binary file not shown.
29
aya01.yml
29
aya01.yml
|
|
@ -1,29 +0,0 @@
|
||||||
---
|
|
||||||
- name: Set up Servers
|
|
||||||
hosts: aya01
|
|
||||||
gather_facts: yes
|
|
||||||
roles:
|
|
||||||
- role: common
|
|
||||||
tags:
|
|
||||||
- common
|
|
||||||
- role: samba
|
|
||||||
tags:
|
|
||||||
- samba
|
|
||||||
# - role: power_management
|
|
||||||
# tags:
|
|
||||||
# - power_management
|
|
||||||
- role: backblaze
|
|
||||||
tags:
|
|
||||||
- backblaze
|
|
||||||
- role: node_exporter
|
|
||||||
tags:
|
|
||||||
- node_exporter
|
|
||||||
- role: snmp_exporter
|
|
||||||
tags:
|
|
||||||
- snmp_exporter
|
|
||||||
- role: smart_exporter
|
|
||||||
tags:
|
|
||||||
- smart_exporter
|
|
||||||
- role: docker
|
|
||||||
tags:
|
|
||||||
- docker
|
|
||||||
|
|
@ -1,6 +1,7 @@
|
||||||
#
|
#
|
||||||
# Essential
|
# Essential
|
||||||
#
|
#
|
||||||
|
|
||||||
user: tudattr
|
user: tudattr
|
||||||
timezone: Europe/Berlin
|
timezone: Europe/Berlin
|
||||||
rclone_config: "/root/.config/rclone/"
|
rclone_config: "/root/.config/rclone/"
|
||||||
|
|
@ -9,537 +10,21 @@ pgid: "1000"
|
||||||
pk_path: "/mnt/veracrypt1/genesis"
|
pk_path: "/mnt/veracrypt1/genesis"
|
||||||
pubkey: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKqc9fnzfCz8fQDFzla+D8PBhvaMmFu2aF+TYkkZRxl9 tuan@genesis-2022-01-20"
|
pubkey: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKqc9fnzfCz8fQDFzla+D8PBhvaMmFu2aF+TYkkZRxl9 tuan@genesis-2022-01-20"
|
||||||
|
|
||||||
|
public_domain: tudattr.dev
|
||||||
local_domain: tudattr.dev
|
internal_domain: seyshiro.de
|
||||||
local_subdomains: "local"
|
|
||||||
remote_domain: tudattr.dev
|
|
||||||
remote_subdomains: "www,plex,status,tautulli"
|
|
||||||
backup_domain: seyshiro.de
|
|
||||||
backup_subdomains: "hass,qbit,zm,"
|
|
||||||
|
|
||||||
#
|
|
||||||
# aya01
|
|
||||||
#
|
|
||||||
|
|
||||||
aya01_host: "aya01"
|
|
||||||
aya01_ip: "192.168.20.12"
|
|
||||||
|
|
||||||
#
|
|
||||||
# mii
|
|
||||||
#
|
|
||||||
|
|
||||||
mii_host: "mii"
|
|
||||||
mii_ip: "192.168.200.2"
|
|
||||||
|
|
||||||
#
|
|
||||||
# naruto
|
|
||||||
#
|
|
||||||
naruto_host: "naruto"
|
|
||||||
naruto_ip: "192.168.20.13"
|
|
||||||
|
|
||||||
#
|
|
||||||
# pi
|
|
||||||
#
|
|
||||||
|
|
||||||
pi_host: "pi"
|
|
||||||
pi_ip: "192.168.20.11"
|
|
||||||
|
|
||||||
#
|
|
||||||
# inko
|
|
||||||
#
|
|
||||||
|
|
||||||
inko_host: "inko"
|
|
||||||
inko_ip: "192.168.20.14"
|
|
||||||
|
|
||||||
#
|
|
||||||
# Used to download for git releases
|
|
||||||
#
|
|
||||||
|
|
||||||
go_arch_map:
|
|
||||||
i386: '386'
|
|
||||||
x86_64: 'amd64'
|
|
||||||
aarch64: 'arm64'
|
|
||||||
armv7l: 'armv7'
|
|
||||||
armv6l: 'armv6'
|
|
||||||
|
|
||||||
go_arch: "{{ go_arch_map[ansible_architecture] | default(ansible_architecture) }}"
|
|
||||||
|
|
||||||
#
|
|
||||||
# aya01 - Disks
|
|
||||||
#
|
|
||||||
|
|
||||||
fstab_entries:
|
|
||||||
- name: "config"
|
|
||||||
path: "/opt"
|
|
||||||
type: "ext4"
|
|
||||||
uuid: "cad60133-dd84-4a2a-8db4-2881c608addf"
|
|
||||||
- name: "media0"
|
|
||||||
path: "/mnt/media0"
|
|
||||||
type: "ext4"
|
|
||||||
uuid: "c4c724ec-4fe3-4665-adf4-acd31d6b7f95"
|
|
||||||
- name: "media1"
|
|
||||||
path: "/mnt/media1"
|
|
||||||
type: "ext4"
|
|
||||||
uuid: "8d66d395-1e35-4f5a-a5a7-d181d6642ebf"
|
|
||||||
|
|
||||||
mergerfs_entries:
|
|
||||||
- name: "media"
|
|
||||||
path: "/media"
|
|
||||||
branches:
|
|
||||||
- "/mnt/media0"
|
|
||||||
- "/mnt/media1"
|
|
||||||
opts:
|
|
||||||
- "use_ino"
|
|
||||||
- "allow_other"
|
|
||||||
- "cache.files=partial"
|
|
||||||
- "dropcacheonclose=true"
|
|
||||||
- "category.create=mfs"
|
|
||||||
type: "fuse.mergerfs"
|
|
||||||
|
|
||||||
#
|
#
|
||||||
# Packages
|
# Packages
|
||||||
#
|
#
|
||||||
|
|
||||||
common_packages:
|
common_packages:
|
||||||
- sudo
|
- build-essential
|
||||||
|
- curl
|
||||||
- git
|
- git
|
||||||
- iperf3
|
- iperf3
|
||||||
- git
|
- neovim
|
||||||
- smartmontools
|
|
||||||
- vim
|
|
||||||
- curl
|
|
||||||
- tree
|
|
||||||
- rsync
|
- rsync
|
||||||
|
- smartmontools
|
||||||
|
- sudo
|
||||||
- systemd-timesyncd
|
- systemd-timesyncd
|
||||||
- neofetch
|
- tree
|
||||||
- build-essential
|
|
||||||
- btrfs-progs
|
|
||||||
|
|
||||||
#
|
|
||||||
# Docker
|
|
||||||
#
|
|
||||||
docker_repo_url: https://download.docker.com/linux
|
|
||||||
docker_apt_gpg_key: "{{ docker_repo_url }}/{{ ansible_distribution | lower }}/gpg"
|
|
||||||
docker_apt_release_channel: stable
|
|
||||||
docker_apt_arch: "{{ 'arm64' if ansible_architecture == 'aarch64' else 'amd64' }}"
|
|
||||||
docker_apt_repository: "deb [arch={{ docker_apt_arch }}] {{ docker_repo_url }}/{{ ansible_distribution | lower }} {{ ansible_distribution_release }} {{ docker_apt_release_channel }}"
|
|
||||||
docker_network: "172.16.69.0/24"
|
|
||||||
|
|
||||||
docker_compose_dir: /opt/docker/compose
|
|
||||||
docker_dir: /opt/docker/config
|
|
||||||
docker_data_dir: /media/docker/data # only available on aya01
|
|
||||||
|
|
||||||
mysql_user: user
|
|
||||||
|
|
||||||
#
|
|
||||||
# ZoneMinder
|
|
||||||
#
|
|
||||||
|
|
||||||
zoneminder_host: "zm"
|
|
||||||
zoneminder_port: "8081"
|
|
||||||
zoneminder_network: "172.16.42.0/24"
|
|
||||||
|
|
||||||
zoneminder_root: "{{ docker_dir }}/zm"
|
|
||||||
zoneminder_config: "{{ zoneminder_root }}/config"
|
|
||||||
zoneminder_log: "{{ zoneminder_root}}/log"
|
|
||||||
zoneminder_db: "{{ zoneminder_root}}/db"
|
|
||||||
|
|
||||||
zoneminder_data: "{{ docker_data_dir }}/zm/data"
|
|
||||||
|
|
||||||
#
|
|
||||||
# Syncthing
|
|
||||||
#
|
|
||||||
|
|
||||||
syncthing_host: "syncthing"
|
|
||||||
syncthing_port: "8384"
|
|
||||||
syncthing_data: "{{docker_data_dir}}/syncthing/"
|
|
||||||
|
|
||||||
#
|
|
||||||
# Softserve
|
|
||||||
#
|
|
||||||
|
|
||||||
softserve_data: "{{docker_dir}}/softserve/data"
|
|
||||||
|
|
||||||
#
|
|
||||||
# cupsd
|
|
||||||
#
|
|
||||||
|
|
||||||
cupsd_host: "cupsd"
|
|
||||||
cupsd_port: "631"
|
|
||||||
cupsd_config: "{{ docker_dir }}/cupsd/"
|
|
||||||
|
|
||||||
#
|
|
||||||
# Uptime Kuma
|
|
||||||
#
|
|
||||||
|
|
||||||
kuma_host: "status"
|
|
||||||
kuma_port: "3001"
|
|
||||||
kuma_config: "{{ docker_dir }}/kuma/"
|
|
||||||
|
|
||||||
#
|
|
||||||
# Traefik
|
|
||||||
#
|
|
||||||
|
|
||||||
traefik:
|
|
||||||
host: "traefik"
|
|
||||||
admin:
|
|
||||||
port: "8080"
|
|
||||||
config: "{{ docker_dir }}/traefik/etc-traefik/"
|
|
||||||
data: "{{ docker_dir }}/traefik/var-log/"
|
|
||||||
letsencrypt: "{{ docker_dir }}/traefik/letsencrypt/"
|
|
||||||
user:
|
|
||||||
web: "80"
|
|
||||||
websecure: "443"
|
|
||||||
|
|
||||||
#
|
|
||||||
# DynDns Updater
|
|
||||||
#
|
|
||||||
|
|
||||||
ddns_host: "ddns"
|
|
||||||
ddns_port: "8000"
|
|
||||||
ddns_data: "{{ docker_dir }}/ddns-updater/data/"
|
|
||||||
|
|
||||||
#
|
|
||||||
# Home Assistant
|
|
||||||
#
|
|
||||||
|
|
||||||
ha_host: "hass"
|
|
||||||
ha_port: "8123"
|
|
||||||
ha_config: "{{ docker_dir }}/home-assistant/config/"
|
|
||||||
|
|
||||||
#
|
|
||||||
# pihole
|
|
||||||
#
|
|
||||||
|
|
||||||
pihole_host: "pihole"
|
|
||||||
pihole_port: "8089"
|
|
||||||
pihole_config: "{{ docker_dir }}/pihole/etc-pihole/"
|
|
||||||
pihole_dnsmasq: "{{ docker_dir }}/pihole/etc-dnsmasq.d/"
|
|
||||||
|
|
||||||
#
|
|
||||||
# backblaze
|
|
||||||
#
|
|
||||||
|
|
||||||
# Directories that will be backupped to backblaze
|
|
||||||
# MOVED TO HOSTVARS
|
|
||||||
# backblaze_paths:
|
|
||||||
# aya01:
|
|
||||||
# - "{{ docker_compose_dir }}"
|
|
||||||
# - "{{ docker_dir }}"
|
|
||||||
# pi:
|
|
||||||
# - "{{ docker_compose_dir }}"
|
|
||||||
# - "{{ docker_dir }}"
|
|
||||||
|
|
||||||
#
|
|
||||||
# samba
|
|
||||||
#
|
|
||||||
samba:
|
|
||||||
dependencies:
|
|
||||||
- "samba"
|
|
||||||
- "smbclient"
|
|
||||||
- "cifs-utils"
|
|
||||||
user: "smbuser"
|
|
||||||
group: "smbshare"
|
|
||||||
config: "templates/smb.conf"
|
|
||||||
shares:
|
|
||||||
media:
|
|
||||||
name: "media"
|
|
||||||
path: "/media"
|
|
||||||
paperless:
|
|
||||||
name: "paperless"
|
|
||||||
path: "{{ paperless.data.consume }}"
|
|
||||||
|
|
||||||
|
|
||||||
#
|
|
||||||
# netdata
|
|
||||||
#
|
|
||||||
|
|
||||||
netdata_port: "19999"
|
|
||||||
netdata_config: "{{ docker_dir }}/netdata/"
|
|
||||||
netdata_lib: "{{ docker_data_dir }}/netdata/lib/"
|
|
||||||
netdata_cache: "{{ docker_data_dir }}/netdata/cache"
|
|
||||||
|
|
||||||
#
|
|
||||||
# Plex
|
|
||||||
#
|
|
||||||
|
|
||||||
plex_host: "plex"
|
|
||||||
# plex_ip: "172.16.69.12"
|
|
||||||
plex_port: "32400"
|
|
||||||
plex_config: "{{docker_data_dir}}/{{ plex_host }}/config"
|
|
||||||
plex_tv: "/media/series"
|
|
||||||
plex_movies: "/media/movies"
|
|
||||||
plex_music: "/media/songs"
|
|
||||||
|
|
||||||
#
|
|
||||||
# WireGuard
|
|
||||||
#
|
|
||||||
|
|
||||||
wg_config: "templates/wg0.conf"
|
|
||||||
wg_remote_config: "/etc/wireguard/wg0.conf"
|
|
||||||
wg_service: "wg-quick@wg0.service"
|
|
||||||
wg_deps: "wireguard"
|
|
||||||
|
|
||||||
wg_ip: "192.168.200.2"
|
|
||||||
wg_pubkey: "+LaPESyBF6Sb1lqkk4UcestFpXNaKYyyX99tkqwLQhU="
|
|
||||||
wg_endpoint: "{{ local_subdomains }}.{{ local_domain }}:51820"
|
|
||||||
wg_allowed_ips: "192.168.20.0/24,192.168.200.1/32"
|
|
||||||
wg_dns: "{{ aya01_ip }},{{ pi_ip }},1.1.1.1"
|
|
||||||
|
|
||||||
arr_downloads: "{{ docker_data_dir }}/arr_downloads"
|
|
||||||
#
|
|
||||||
# Sonarr
|
|
||||||
#
|
|
||||||
|
|
||||||
sonarr_port: "8989"
|
|
||||||
sonarr_host: "sonarr"
|
|
||||||
sonarr_config: "{{ docker_dir }}/{{ sonarr_host }}/config"
|
|
||||||
sonarr_media: "{{ plex_tv }}"
|
|
||||||
sonarr_downloads: "{{ arr_downloads }}/{{ sonarr_host }}"
|
|
||||||
|
|
||||||
#
|
|
||||||
# Radarr
|
|
||||||
#
|
|
||||||
|
|
||||||
radarr_port: "7878"
|
|
||||||
radarr_host: "radarr"
|
|
||||||
radarr_config: "{{ docker_dir }}/{{ radarr_host }}/config"
|
|
||||||
radarr_media: "{{ plex_movies }}"
|
|
||||||
radarr_downloads: "{{ arr_downloads }}/{{ radarr_host }}"
|
|
||||||
|
|
||||||
#
|
|
||||||
# Lidarr
|
|
||||||
#
|
|
||||||
|
|
||||||
lidarr_port: "8686"
|
|
||||||
lidarr_host: "lidarr"
|
|
||||||
lidarr_config: "{{ docker_dir }}/{{ lidarr_host }}/config"
|
|
||||||
lidarr_media: "{{ plex_music }}"
|
|
||||||
lidarr_downloads: "{{ arr_downloads }}/{{ lidarr_host }}"
|
|
||||||
|
|
||||||
#
|
|
||||||
# Prowlarr
|
|
||||||
#
|
|
||||||
|
|
||||||
prowlarr_port: "9696"
|
|
||||||
prowlarr_host: "prowlarr"
|
|
||||||
prowlarr_config: "{{ docker_dir }}/{{ prowlarr_host }}/config"
|
|
||||||
|
|
||||||
#
|
|
||||||
# bin
|
|
||||||
#
|
|
||||||
|
|
||||||
bin_port: "6162"
|
|
||||||
bin_host: "bin"
|
|
||||||
bin_upload: "{{ docker_data_dir }}/{{bin_host}}/upload"
|
|
||||||
|
|
||||||
#
|
|
||||||
# qbittorrentvpn
|
|
||||||
#
|
|
||||||
|
|
||||||
qbit_port: "8082"
|
|
||||||
qbit_host: "qbit"
|
|
||||||
qbit_config: "templates/aya01/qbittorrentvpn/config"
|
|
||||||
|
|
||||||
qbit_remote_config: "{{ docker_dir }}/{{ qbit_host }}/config"
|
|
||||||
qbit_downloads: "{{ arr_downloads }}"
|
|
||||||
qbit_type: "openvpn"
|
|
||||||
qbit_ssl: "no"
|
|
||||||
qbit_lan: "192.168.20.0/24, 192.168.30.0/24, {{ docker_network }}"
|
|
||||||
qbit_dns: "{{ aya01_ip }}, {{ pi_ip }}, 1.1.1.1"
|
|
||||||
|
|
||||||
#
|
|
||||||
# qbittorrentvpn - torrentleech
|
|
||||||
#
|
|
||||||
|
|
||||||
torrentleech_port: "8083"
|
|
||||||
torrentleech_host: "torrentleech"
|
|
||||||
torrentleech_remote_config: "{{ docker_dir }}/{{ torrentleech_host }}/config"
|
|
||||||
|
|
||||||
#
|
|
||||||
# Home Assistant
|
|
||||||
#
|
|
||||||
|
|
||||||
hass_port: ""
|
|
||||||
hass_host: "hass"
|
|
||||||
|
|
||||||
#
|
|
||||||
# Tautulli
|
|
||||||
#
|
|
||||||
|
|
||||||
tautulli_port: "8181"
|
|
||||||
tautulli_host: "tautulli"
|
|
||||||
tautulli_config: "{{ docker_dir }}/{{ tautulli_host }}/config"
|
|
||||||
|
|
||||||
#
|
|
||||||
# Code Server
|
|
||||||
#
|
|
||||||
|
|
||||||
code_port: "8443"
|
|
||||||
code_host: "code"
|
|
||||||
code_config: "{{ docker_dir }}/{{ code_host }}/config"
|
|
||||||
|
|
||||||
#
|
|
||||||
# GlueTun
|
|
||||||
#
|
|
||||||
|
|
||||||
gluetun_port: ""
|
|
||||||
gluetun_host: "gluetun"
|
|
||||||
gluetun_country: "Hungary"
|
|
||||||
gluetun_config: "{{ docker_dir }}/{{ gluetun_host }}/config"
|
|
||||||
|
|
||||||
#
|
|
||||||
# NodeExporter
|
|
||||||
#
|
|
||||||
|
|
||||||
node_exporter:
|
|
||||||
port: 9100
|
|
||||||
host: 'node'
|
|
||||||
version: 'latest'
|
|
||||||
serve: 'localhost'
|
|
||||||
options: ''
|
|
||||||
bin_path: /usr/local/bin/node_exporter
|
|
||||||
|
|
||||||
#
|
|
||||||
# Prometheus
|
|
||||||
#
|
|
||||||
|
|
||||||
prometheus_puid: "65534"
|
|
||||||
prometheus_pgid: "65534"
|
|
||||||
prometheus_host: "prometheus"
|
|
||||||
prometheus_data: "{{docker_data_dir}}/prometheus/"
|
|
||||||
prometheus_config: "{{docker_dir}}/prometheus/"
|
|
||||||
prometheus_port: "9090"
|
|
||||||
|
|
||||||
#
|
|
||||||
# Grafana
|
|
||||||
#
|
|
||||||
|
|
||||||
grafana_host: "grafana"
|
|
||||||
grafana_port: "3000"
|
|
||||||
grafana_data: "{{docker_data_dir}}/grafana/"
|
|
||||||
grafana_config: "{{docker_dir}}/grafana/config/"
|
|
||||||
grafana_logs: "{{docker_dir}}/grafana/logs/"
|
|
||||||
grafana_puid: "472"
|
|
||||||
grafana_pgid: "472"
|
|
||||||
|
|
||||||
#
|
|
||||||
# SNMP Exporter
|
|
||||||
#
|
|
||||||
|
|
||||||
snmp_exporter_port: "9116"
|
|
||||||
snmp_exporter_target: "192.168.20.1"
|
|
||||||
snmp_exporter_config: "{{ docker_dir }}/snmp_exporter/"
|
|
||||||
snmp_exporter_host: "snmp_exporter"
|
|
||||||
|
|
||||||
#
|
|
||||||
# SMART Exporter
|
|
||||||
#
|
|
||||||
|
|
||||||
smart_exporter:
|
|
||||||
port: 9633
|
|
||||||
version: 'latest'
|
|
||||||
options: '--web.listen-address=9633'
|
|
||||||
bin_path: /usr/local/bin/smart_exporter
|
|
||||||
|
|
||||||
#
|
|
||||||
# Stirling-pdf
|
|
||||||
#
|
|
||||||
|
|
||||||
stirling:
|
|
||||||
host: "stirling"
|
|
||||||
dns: "pdf"
|
|
||||||
port: 8084
|
|
||||||
|
|
||||||
#
|
|
||||||
# nginx proxy manager
|
|
||||||
#
|
|
||||||
|
|
||||||
nginx:
|
|
||||||
host: "nginx"
|
|
||||||
endpoints:
|
|
||||||
http: 80
|
|
||||||
https: 443
|
|
||||||
admin: 8080
|
|
||||||
paths:
|
|
||||||
letsencrypt: "{{docker_dir}}/nginx/letsencrypt"
|
|
||||||
data: "{{docker_dir}}/nginx/data"
|
|
||||||
|
|
||||||
#
|
|
||||||
# Jellyfin
|
|
||||||
#
|
|
||||||
|
|
||||||
jellyfin:
|
|
||||||
host: "jellyfin"
|
|
||||||
port: "8096"
|
|
||||||
config: "{{docker_dir}}/jellyfin/config"
|
|
||||||
cache: "{{docker_dir}}/jellyfin/cache"
|
|
||||||
media:
|
|
||||||
tv: "{{ plex_tv }}"
|
|
||||||
movies: "{{ plex_movies }}"
|
|
||||||
music: "{{ plex_music }}"
|
|
||||||
|
|
||||||
#
|
|
||||||
# paperless-ngx
|
|
||||||
#
|
|
||||||
|
|
||||||
paperless:
|
|
||||||
host: "paperless"
|
|
||||||
port: "8000"
|
|
||||||
data:
|
|
||||||
data: "{{ docker_dir }}/paperless/data/data"
|
|
||||||
media: "{{ docker_dir }}/paperless/data/media"
|
|
||||||
export: "{{ docker_dir }}/paperless/data/export"
|
|
||||||
consume: "{{ docker_dir }}/paperless/data/consume"
|
|
||||||
db:
|
|
||||||
host: "paperless-sqlite"
|
|
||||||
db: "paperless"
|
|
||||||
user: "paperless"
|
|
||||||
password: "{{ host.paperless.db.password }}"
|
|
||||||
data: "{{ docker_dir }}/paperless/db/data"
|
|
||||||
redis:
|
|
||||||
host: "paperless-redis"
|
|
||||||
data: "{{ docker_dir }}/paperless/redis/data"
|
|
||||||
|
|
||||||
#
|
|
||||||
# Homarr
|
|
||||||
#
|
|
||||||
|
|
||||||
homarr:
|
|
||||||
host: "homarr"
|
|
||||||
volumes:
|
|
||||||
configs: "{{docker_dir}}/homarr/configs"
|
|
||||||
data: "{{ docker_data_dir }}/homarr/data/"
|
|
||||||
icons: "{{docker_dir}}/homarr/icons"
|
|
||||||
|
|
||||||
#
|
|
||||||
# gitea
|
|
||||||
#
|
|
||||||
|
|
||||||
gitea:
|
|
||||||
host: "git"
|
|
||||||
url: "https://git.tudattr.dev"
|
|
||||||
volumes:
|
|
||||||
data: "{{ docker_data_dir }}/gitea/data"
|
|
||||||
config: "{{ docker_dir }}/gitea/config"
|
|
||||||
ports:
|
|
||||||
http: "3000"
|
|
||||||
ssh: "2222"
|
|
||||||
runner:
|
|
||||||
host: "gitea-runner-{{ host.hostname }}"
|
|
||||||
token: "{{ host.gitea.runner.token }}"
|
|
||||||
name: "{{ host.hostname }}"
|
|
||||||
volumes:
|
|
||||||
data: "{{ docker_data_dir }}/gitea/runner/data/"
|
|
||||||
config: "{{ docker_dir }}/gitea/runner/config/"
|
|
||||||
config_file: "{{ docker_dir }}/gitea/runner/config/config.yml"
|
|
||||||
|
|
||||||
#
|
|
||||||
# Jellyseer
|
|
||||||
#
|
|
||||||
|
|
||||||
jellyseer:
|
|
||||||
host: "jellyseer"
|
|
||||||
ports:
|
|
||||||
http: "5055"
|
|
||||||
volumes:
|
|
||||||
config: "{{ docker_dir }}/jellyseer/config"
|
|
||||||
|
|
|
||||||
|
|
@ -0,0 +1,9 @@
|
||||||
|
ansible_user: "{{ user }}"
|
||||||
|
ansible_host: 192.168.20.12
|
||||||
|
ansible_port: 22
|
||||||
|
ansible_ssh_private_key_file: "{{ pk_path }}"
|
||||||
|
ansible_become_pass: "{{ vault.aya01.sudo }}"
|
||||||
|
|
||||||
|
host:
|
||||||
|
hostname: "k3s.server"
|
||||||
|
ip: "{{ ansible_host }}"
|
||||||
|
|
@ -1,10 +0,0 @@
|
||||||
ansible_user: "{{ user }}"
|
|
||||||
ansible_host: 192.168.20.14
|
|
||||||
ansible_port: 22
|
|
||||||
ansible_ssh_private_key_file: '{{ pk_path }}'
|
|
||||||
ansible_become_pass: '{{ vault.inko.sudo }}'
|
|
||||||
|
|
||||||
host:
|
|
||||||
ip: "{{ ansible_host }}"
|
|
||||||
fstab:
|
|
||||||
mergerfs:
|
|
||||||
|
|
@ -0,0 +1,9 @@
|
||||||
|
ansible_user: "{{ user }}"
|
||||||
|
ansible_host: 192.168.20.21
|
||||||
|
ansible_port: 22
|
||||||
|
ansible_ssh_private_key_file: "{{ pk_path }}"
|
||||||
|
ansible_become_pass: "{{ vault.k3s-server.sudo }}"
|
||||||
|
|
||||||
|
host:
|
||||||
|
hostname: "k3s.server"
|
||||||
|
ip: "{{ ansible_host }}"
|
||||||
|
|
@ -1,20 +0,0 @@
|
||||||
ansible_user: "{{ user }}"
|
|
||||||
ansible_host: 202.61.207.139
|
|
||||||
ansible_port: 22
|
|
||||||
ansible_ssh_private_key_file: '{{ pk_path }}'
|
|
||||||
ansible_become_pass: '{{ vault.mii.sudo }}'
|
|
||||||
|
|
||||||
host:
|
|
||||||
hostname: "mii"
|
|
||||||
ip: "192.168.200.2"
|
|
||||||
backblaze:
|
|
||||||
account: "{{ vault.mii.backblaze.account }}"
|
|
||||||
key: "{{ vault.mii.backblaze.key }}"
|
|
||||||
remote: "remote:mii-tudattr-dev"
|
|
||||||
password: "{{ vault.mii.rclone.password }}"
|
|
||||||
password2: "{{ vault.mii.rclone.password2 }}"
|
|
||||||
paths:
|
|
||||||
- "{{ docker_compose_dir }}"
|
|
||||||
- "{{ docker_dir }}"
|
|
||||||
fstab:
|
|
||||||
mergerfs:
|
|
||||||
|
|
@ -1,23 +0,0 @@
|
||||||
ansible_user: "{{ user }}"
|
|
||||||
ansible_host: 192.168.20.13
|
|
||||||
ansible_port: 22
|
|
||||||
ansible_ssh_private_key_file: '{{ pk_path }}'
|
|
||||||
ansible_become_pass: '{{ vault.naruto.sudo }}'
|
|
||||||
|
|
||||||
host:
|
|
||||||
hostname: "naruto"
|
|
||||||
ip: "{{ ansible_host }}"
|
|
||||||
backblaze:
|
|
||||||
account: "{{ vault.naruto.backblaze.account }}"
|
|
||||||
key: "{{ vault.naruto.backblaze.key }}"
|
|
||||||
remote: "remote:naruto-tudattr-dev"
|
|
||||||
password: "{{ vault.naruto.rclone.password }}"
|
|
||||||
password2: "{{ vault.naruto.rclone.password2 }}"
|
|
||||||
paths:
|
|
||||||
- "{{ docker_compose_dir }}"
|
|
||||||
- "{{ docker_dir }}"
|
|
||||||
fstab:
|
|
||||||
mergerfs:
|
|
||||||
gitea:
|
|
||||||
runner:
|
|
||||||
token: "{{ vault.naruto.gitea.runner.token }}"
|
|
||||||
|
|
@ -1,23 +0,0 @@
|
||||||
ansible_user: "{{ user }}"
|
|
||||||
ansible_host: 192.168.20.11
|
|
||||||
ansible_port: 22
|
|
||||||
ansible_ssh_private_key_file: '{{ pk_path }}'
|
|
||||||
ansible_become_pass: '{{ vault.pi.sudo }}'
|
|
||||||
|
|
||||||
host:
|
|
||||||
hostname: "pi"
|
|
||||||
ip: "{{ ansible_host }}"
|
|
||||||
backblaze:
|
|
||||||
account: "{{ vault.pi.backblaze.account }}"
|
|
||||||
key: "{{ vault.pi.backblaze.key }}"
|
|
||||||
remote: "remote:pi-tudattr-dev"
|
|
||||||
password: "{{ vault.pi.rclone.password }}"
|
|
||||||
password2: "{{ vault.pi.rclone.password2 }}"
|
|
||||||
paths:
|
|
||||||
- "{{ docker_compose_dir }}"
|
|
||||||
- "{{ docker_dir }}"
|
|
||||||
fstab:
|
|
||||||
mergerfs:
|
|
||||||
gitea:
|
|
||||||
runner:
|
|
||||||
token: "{{ vault.pi.gitea.runner.token }}"
|
|
||||||
|
|
@ -1,14 +1,14 @@
|
||||||
---
|
---
|
||||||
- name: Set up Servers
|
- name: Set up Servers
|
||||||
hosts: inko
|
hosts: aya01
|
||||||
gather_facts: yes
|
gather_facts: yes
|
||||||
roles:
|
roles:
|
||||||
- role: common
|
- role: common
|
||||||
tags:
|
tags:
|
||||||
- common
|
- common
|
||||||
- role: power_management
|
- role: k3s-server
|
||||||
tags:
|
tags:
|
||||||
- power_management
|
- k3s-server
|
||||||
- role: node_exporter
|
- role: node_exporter
|
||||||
tags:
|
tags:
|
||||||
- node_exporter
|
- node_exporter
|
||||||
20
mii.yml
20
mii.yml
|
|
@ -1,20 +0,0 @@
|
||||||
---
|
|
||||||
- name: Set up Servers
|
|
||||||
hosts: mii
|
|
||||||
gather_facts: yes
|
|
||||||
roles:
|
|
||||||
- role: common
|
|
||||||
tags:
|
|
||||||
- common
|
|
||||||
- role: backblaze
|
|
||||||
tags:
|
|
||||||
- backblaze
|
|
||||||
- role: node_exporter
|
|
||||||
tags:
|
|
||||||
- node_exporter
|
|
||||||
- role: docker
|
|
||||||
tags:
|
|
||||||
- docker
|
|
||||||
- role: wireguard
|
|
||||||
tags:
|
|
||||||
- wireguard
|
|
||||||
17
naruto.yml
17
naruto.yml
|
|
@ -1,17 +0,0 @@
|
||||||
---
|
|
||||||
- name: Set up Servers
|
|
||||||
hosts: naruto
|
|
||||||
gather_facts: yes
|
|
||||||
roles:
|
|
||||||
- role: common
|
|
||||||
tags:
|
|
||||||
- common
|
|
||||||
- role: samba
|
|
||||||
tags:
|
|
||||||
- samba
|
|
||||||
- role: node_exporter
|
|
||||||
tags:
|
|
||||||
- node_exporter
|
|
||||||
- role: smart_exporter
|
|
||||||
tags:
|
|
||||||
- smart_exporter
|
|
||||||
17
pi.yml
17
pi.yml
|
|
@ -1,17 +0,0 @@
|
||||||
---
|
|
||||||
- name: Set up Raspberry Pis
|
|
||||||
hosts: pi
|
|
||||||
gather_facts: yes
|
|
||||||
roles:
|
|
||||||
- role: common
|
|
||||||
tags:
|
|
||||||
- common
|
|
||||||
- role: backblaze
|
|
||||||
tags:
|
|
||||||
- backblaze
|
|
||||||
- role: node_exporter
|
|
||||||
tags:
|
|
||||||
- node_exporter
|
|
||||||
- role: docker
|
|
||||||
tags:
|
|
||||||
- docker
|
|
||||||
16
production
16
production
|
|
@ -1,9 +1,11 @@
|
||||||
[server]
|
|
||||||
aya01
|
|
||||||
|
|
||||||
[raspberry]
|
|
||||||
pi
|
|
||||||
naruto
|
|
||||||
|
|
||||||
[vps]
|
[vps]
|
||||||
mii
|
mii
|
||||||
|
|
||||||
|
[k3s]
|
||||||
|
k3s.server
|
||||||
|
|
||||||
|
[vm]
|
||||||
|
k3s.server
|
||||||
|
|
||||||
|
[controller]
|
||||||
|
genesis
|
||||||
|
|
|
||||||
|
|
@ -1,24 +0,0 @@
|
||||||
---
|
|
||||||
- name: Shut down docker
|
|
||||||
systemd:
|
|
||||||
name: docker
|
|
||||||
state: stopped
|
|
||||||
become: true
|
|
||||||
|
|
||||||
# - name: Backing up for "{{ inventory_hostname }}"
|
|
||||||
# shell:
|
|
||||||
# cmd: "rclone sync {{ item }} secret:{{ item }} --transfers 16"
|
|
||||||
# loop: "{{ host.backblaze.paths }}"
|
|
||||||
# become: true
|
|
||||||
|
|
||||||
- name: Backing up for "{{ inventory_hostname }}"
|
|
||||||
shell:
|
|
||||||
cmd: "rclone sync {{ item }} secret:{{ item }} --skip-links"
|
|
||||||
loop: "{{ host.backblaze.paths }}"
|
|
||||||
become: true
|
|
||||||
|
|
||||||
- name: Restart docker
|
|
||||||
systemd:
|
|
||||||
name: docker
|
|
||||||
state: started
|
|
||||||
become: true
|
|
||||||
|
|
@ -1,18 +0,0 @@
|
||||||
---
|
|
||||||
- name: Create rclone config folder
|
|
||||||
file:
|
|
||||||
path: "{{ rclone_config }}"
|
|
||||||
owner: '0'
|
|
||||||
group: '0'
|
|
||||||
mode: '700'
|
|
||||||
state: directory
|
|
||||||
become: true
|
|
||||||
|
|
||||||
- name: Copy "rclone.conf"
|
|
||||||
template:
|
|
||||||
src: "rclone.conf.j2"
|
|
||||||
dest: "{{ rclone_config }}/rclone.conf"
|
|
||||||
owner: '0'
|
|
||||||
group: '0'
|
|
||||||
mode: '400'
|
|
||||||
become: true
|
|
||||||
|
|
@ -1,13 +0,0 @@
|
||||||
---
|
|
||||||
- name: Update and upgrade packages
|
|
||||||
apt:
|
|
||||||
update_cache: true
|
|
||||||
upgrade: true
|
|
||||||
autoremove: true
|
|
||||||
become: true
|
|
||||||
|
|
||||||
- name: Install rclone
|
|
||||||
apt:
|
|
||||||
name: "rclone"
|
|
||||||
state: present
|
|
||||||
become: true
|
|
||||||
|
|
@ -1,5 +0,0 @@
|
||||||
---
|
|
||||||
|
|
||||||
- include_tasks: install.yml
|
|
||||||
- include_tasks: config.yml
|
|
||||||
- include_tasks: backup.yml
|
|
||||||
|
|
@ -1,10 +0,0 @@
|
||||||
[remote]
|
|
||||||
type = b2
|
|
||||||
account = {{ host.backblaze.account }}
|
|
||||||
key = {{ host.backblaze.key }}
|
|
||||||
|
|
||||||
[secret]
|
|
||||||
type = crypt
|
|
||||||
remote = {{ host.backblaze.remote }}
|
|
||||||
password = {{ host.backblaze.password }}
|
|
||||||
password2 = {{ host.backblaze.password2 }}
|
|
||||||
|
|
@ -1,42 +0,0 @@
|
||||||
---
|
|
||||||
- name: Install dependencies
|
|
||||||
apt:
|
|
||||||
name: "mergerfs"
|
|
||||||
state: present
|
|
||||||
become: yes
|
|
||||||
|
|
||||||
- name: Create mount folders
|
|
||||||
file:
|
|
||||||
path: "{{ item.path }}"
|
|
||||||
state: directory
|
|
||||||
loop: "{{ host.fstab if host.fstab is iterable else []}}"
|
|
||||||
become: true
|
|
||||||
|
|
||||||
- name: Create fstab entries
|
|
||||||
mount:
|
|
||||||
src: "UUID={{ item.uuid }}"
|
|
||||||
path: "{{ item.path }}"
|
|
||||||
fstype: "{{ item.type }}"
|
|
||||||
state: present
|
|
||||||
backup: true
|
|
||||||
loop: "{{ host.fstab if host.fstab is iterable else []}}"
|
|
||||||
become: true
|
|
||||||
register: fstab
|
|
||||||
|
|
||||||
- name: Create/mount mergerfs
|
|
||||||
mount:
|
|
||||||
src: "{{ item.branches | join(':') }}"
|
|
||||||
path: "{{ item.path }}"
|
|
||||||
fstype: "{{ item.type }}"
|
|
||||||
opts: "{{ item.opts | join(',') }}"
|
|
||||||
state: present
|
|
||||||
backup: true
|
|
||||||
become: true
|
|
||||||
loop: "{{ host.mergerfs if host.mergerfs is iterable else []}}"
|
|
||||||
register: fstab
|
|
||||||
|
|
||||||
- name: Mount all disks
|
|
||||||
command: mount -a
|
|
||||||
become: true
|
|
||||||
when: fstab.changed
|
|
||||||
|
|
||||||
|
|
@ -3,4 +3,3 @@
|
||||||
- include_tasks: essential.yml
|
- include_tasks: essential.yml
|
||||||
- include_tasks: bash.yml
|
- include_tasks: bash.yml
|
||||||
- include_tasks: sshd.yml
|
- include_tasks: sshd.yml
|
||||||
- include_tasks: fstab.yml
|
|
||||||
|
|
|
||||||
|
|
@ -1,96 +0,0 @@
|
||||||
---
|
|
||||||
|
|
||||||
# - include_tasks: zoneminder.yml
|
|
||||||
# tags:
|
|
||||||
# - zoneminder
|
|
||||||
|
|
||||||
- include_tasks: pihole.yml
|
|
||||||
tags:
|
|
||||||
- pihole
|
|
||||||
|
|
||||||
- include_tasks: syncthing.yml
|
|
||||||
tags:
|
|
||||||
- syncthing
|
|
||||||
|
|
||||||
# - include_tasks: softserve.yml
|
|
||||||
# tags:
|
|
||||||
# - softserve
|
|
||||||
|
|
||||||
- include_tasks: cupsd.yml
|
|
||||||
tags:
|
|
||||||
- cupsd
|
|
||||||
|
|
||||||
- include_tasks: kuma.yml
|
|
||||||
tags:
|
|
||||||
- kuma
|
|
||||||
|
|
||||||
# - include_tasks: traefik.yml
|
|
||||||
# tags:
|
|
||||||
# - traefik
|
|
||||||
|
|
||||||
- include_tasks: plex.yml
|
|
||||||
tags:
|
|
||||||
- plex
|
|
||||||
- include_tasks: ddns.yml
|
|
||||||
tags:
|
|
||||||
- ddns
|
|
||||||
|
|
||||||
- include_tasks: homeassistant.yml
|
|
||||||
tags:
|
|
||||||
- homeassistant
|
|
||||||
|
|
||||||
- include_tasks: tautulli.yml
|
|
||||||
tags:
|
|
||||||
- tautulli
|
|
||||||
|
|
||||||
- include_tasks: sonarr.yml
|
|
||||||
tags:
|
|
||||||
- sonarr
|
|
||||||
|
|
||||||
- include_tasks: radarr.yml
|
|
||||||
tags:
|
|
||||||
- radarr
|
|
||||||
|
|
||||||
- include_tasks: lidarr.yml
|
|
||||||
tags:
|
|
||||||
- lidarr
|
|
||||||
|
|
||||||
- include_tasks: prowlarr.yml
|
|
||||||
tags:
|
|
||||||
- prowlarr
|
|
||||||
|
|
||||||
- include_tasks: bin.yml
|
|
||||||
tags:
|
|
||||||
- bin
|
|
||||||
|
|
||||||
- include_tasks: gluetun.yml
|
|
||||||
tags:
|
|
||||||
- gluetun
|
|
||||||
|
|
||||||
- include_tasks: qbit.yml
|
|
||||||
tags:
|
|
||||||
- qbit
|
|
||||||
|
|
||||||
- include_tasks: qbit_private.yml
|
|
||||||
tags:
|
|
||||||
- qbit_priv
|
|
||||||
|
|
||||||
- include_tasks: prometheus.yml
|
|
||||||
tags:
|
|
||||||
- prometheus
|
|
||||||
|
|
||||||
- include_tasks: grafana.yml
|
|
||||||
tags:
|
|
||||||
- grafana
|
|
||||||
|
|
||||||
- include_tasks: jellyfin.yml
|
|
||||||
tags:
|
|
||||||
- jellyfin
|
|
||||||
|
|
||||||
- include_tasks: gitea.yml
|
|
||||||
tags:
|
|
||||||
- gitea
|
|
||||||
|
|
||||||
- include_tasks: gitea-runner.yml
|
|
||||||
tags:
|
|
||||||
- gitea-runner
|
|
||||||
|
|
@ -1,9 +0,0 @@
|
||||||
---
|
|
||||||
- name: Create bin-config directory
|
|
||||||
file:
|
|
||||||
path: "{{ bin_upload }}"
|
|
||||||
owner: "{{ puid }}"
|
|
||||||
group: "{{ pgid }}"
|
|
||||||
mode: '755'
|
|
||||||
state: directory
|
|
||||||
become: yes
|
|
||||||
|
|
@ -1,19 +0,0 @@
|
||||||
---
|
|
||||||
- name: Create cupsd-config directory
|
|
||||||
file:
|
|
||||||
path: "{{ item }}"
|
|
||||||
owner: "{{ puid }}"
|
|
||||||
group: "{{ pgid }}"
|
|
||||||
mode: '755'
|
|
||||||
state: directory
|
|
||||||
loop:
|
|
||||||
- "{{ cupsd_config }}"
|
|
||||||
become: true
|
|
||||||
|
|
||||||
- name: Copy cupsd config
|
|
||||||
template:
|
|
||||||
owner: "{{ puid }}"
|
|
||||||
src: "templates/aya01/cupsd/cupsd.conf"
|
|
||||||
dest: "{{ cupsd_config }}/cupsd.conf"
|
|
||||||
mode: '660'
|
|
||||||
become: true
|
|
||||||
|
|
@ -1,16 +0,0 @@
|
||||||
---
|
|
||||||
- name: Create ddns-config directory
|
|
||||||
file:
|
|
||||||
path: "{{ docker_dir }}/ddns-updater/data/"
|
|
||||||
owner: 1000
|
|
||||||
group: 1000
|
|
||||||
mode: '700'
|
|
||||||
state: directory
|
|
||||||
|
|
||||||
- name: Copy ddns-config
|
|
||||||
template:
|
|
||||||
owner: 1000
|
|
||||||
src: "templates/{{host.hostname}}/ddns-updater/data/config.json"
|
|
||||||
dest: "{{ docker_dir }}/ddns-updater/data/config.json"
|
|
||||||
mode: '400'
|
|
||||||
|
|
||||||
|
|
@ -1,11 +0,0 @@
|
||||||
---
|
|
||||||
- name: Create gitea-runner directories
|
|
||||||
file:
|
|
||||||
path: "{{ item }}"
|
|
||||||
owner: "{{ puid }}"
|
|
||||||
group: "{{ pgid }}"
|
|
||||||
mode: '755'
|
|
||||||
state: directory
|
|
||||||
become: yes
|
|
||||||
loop:
|
|
||||||
- "{{ gitea.runner.volumes.data }}"
|
|
||||||
|
|
@ -1,12 +0,0 @@
|
||||||
---
|
|
||||||
- name: Create gitea directories
|
|
||||||
file:
|
|
||||||
path: "{{ item }}"
|
|
||||||
owner: "{{ puid }}"
|
|
||||||
group: "{{ pgid }}"
|
|
||||||
mode: '755'
|
|
||||||
state: directory
|
|
||||||
become: yes
|
|
||||||
loop:
|
|
||||||
- "{{ gitea.volumes.data }}"
|
|
||||||
- "{{ gitea.volumes.config }}"
|
|
||||||
|
|
@ -1,11 +0,0 @@
|
||||||
---
|
|
||||||
- name: Create gitlab-runner directories
|
|
||||||
file:
|
|
||||||
path: "{{ item }}"
|
|
||||||
owner: "{{ puid }}"
|
|
||||||
group: "{{ pgid }}"
|
|
||||||
mode: '755'
|
|
||||||
state: directory
|
|
||||||
become: yes
|
|
||||||
loop:
|
|
||||||
- "{{ gitlab.runner.volumes.config }}"
|
|
||||||
|
|
@ -1,14 +0,0 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: Create gitlab-config
|
|
||||||
file:
|
|
||||||
path: "{{ item }}"
|
|
||||||
owner: "{{ gitlab.puid }}"
|
|
||||||
group: "{{ gitlab.pgid }}"
|
|
||||||
mode: '755'
|
|
||||||
state: directory
|
|
||||||
become: yes
|
|
||||||
loop:
|
|
||||||
- "{{ gitlab.paths.config }}"
|
|
||||||
- "{{ gitlab.paths.logs }}"
|
|
||||||
- "{{ gitlab.paths.data }}"
|
|
||||||
|
|
@ -1,11 +0,0 @@
|
||||||
---
|
|
||||||
- name: Create gluetun-config directory
|
|
||||||
file:
|
|
||||||
path: "{{ item }}"
|
|
||||||
owner: "{{ puid }}"
|
|
||||||
group: "{{ pgid }}"
|
|
||||||
mode: '775'
|
|
||||||
state: directory
|
|
||||||
loop:
|
|
||||||
- "{{ gluetun_config}}"
|
|
||||||
become: true
|
|
||||||
|
|
@ -1,22 +0,0 @@
|
||||||
---
|
|
||||||
- name: Create grafana data directory
|
|
||||||
file:
|
|
||||||
path: "{{ item }}"
|
|
||||||
owner: "{{ grafana_puid }}"
|
|
||||||
group: "{{ grafana_pgid }}"
|
|
||||||
mode: '755'
|
|
||||||
state: directory
|
|
||||||
loop:
|
|
||||||
- "{{ grafana_data }}"
|
|
||||||
- "{{ grafana_config }}"
|
|
||||||
become: true
|
|
||||||
|
|
||||||
- name: Copy grafana config
|
|
||||||
template:
|
|
||||||
owner: "{{ grafana_puid }}"
|
|
||||||
group: "{{ grafana_pgid }}"
|
|
||||||
src: "templates/aya01/grafana/etc-grafana/grafana.ini.j2"
|
|
||||||
dest: "{{ grafana_config }}/grafana.ini"
|
|
||||||
mode: '644'
|
|
||||||
become: true
|
|
||||||
|
|
||||||
|
|
@ -1,8 +0,0 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: Create homeassistant-config directory
|
|
||||||
file:
|
|
||||||
path: "{{ ha_config }}"
|
|
||||||
mode: '755'
|
|
||||||
state: directory
|
|
||||||
become: true
|
|
||||||
|
|
@ -1,30 +0,0 @@
|
||||||
---
|
|
||||||
- name: Create zoneminder user
|
|
||||||
user:
|
|
||||||
name: zm
|
|
||||||
uid: 911
|
|
||||||
shell: /bin/false
|
|
||||||
become: true
|
|
||||||
|
|
||||||
- name: Create Zoneminder config directory
|
|
||||||
file:
|
|
||||||
path: "{{ item }}"
|
|
||||||
owner: 911
|
|
||||||
group: 911
|
|
||||||
mode: '700'
|
|
||||||
state: directory
|
|
||||||
loop:
|
|
||||||
- "{{ zoneminder_config }}"
|
|
||||||
become: true
|
|
||||||
|
|
||||||
- name: Create Zoneminder data directory
|
|
||||||
file:
|
|
||||||
path: "{{ item }}"
|
|
||||||
owner: 911
|
|
||||||
group: 911
|
|
||||||
mode: '755'
|
|
||||||
state: directory
|
|
||||||
loop:
|
|
||||||
- "{{ zoneminder_data }}"
|
|
||||||
become: true
|
|
||||||
|
|
||||||
|
|
@ -1,67 +0,0 @@
|
||||||
---
|
|
||||||
- name: Uninstall old versions
|
|
||||||
apt:
|
|
||||||
name: "{{ item }}"
|
|
||||||
state: absent
|
|
||||||
purge: true
|
|
||||||
loop:
|
|
||||||
- docker
|
|
||||||
- docker-engine
|
|
||||||
- docker.io
|
|
||||||
- containerd
|
|
||||||
- runc
|
|
||||||
become: true
|
|
||||||
|
|
||||||
- name: Update cache
|
|
||||||
apt:
|
|
||||||
update_cache: true
|
|
||||||
become: true
|
|
||||||
|
|
||||||
- name: Install dependencies for apt to use repositories over HTTPS
|
|
||||||
apt:
|
|
||||||
name: "{{ item }}"
|
|
||||||
state: present
|
|
||||||
loop:
|
|
||||||
- ca-certificates
|
|
||||||
- curl
|
|
||||||
- gnupg
|
|
||||||
- lsb-release
|
|
||||||
become: true
|
|
||||||
|
|
||||||
- name: Create keyrings direcoty
|
|
||||||
ansible.builtin.file:
|
|
||||||
path: /etc/apt/keyrings
|
|
||||||
state: directory
|
|
||||||
mode: '0755'
|
|
||||||
become: true
|
|
||||||
|
|
||||||
- name: Add Docker apt key.
|
|
||||||
ansible.builtin.get_url:
|
|
||||||
url: "{{ docker_apt_gpg_key }}"
|
|
||||||
dest: /etc/apt/trusted.gpg.d/docker.asc
|
|
||||||
mode: '0664'
|
|
||||||
force: true
|
|
||||||
become: true
|
|
||||||
|
|
||||||
- name: Add Docker repository.
|
|
||||||
apt_repository:
|
|
||||||
repo: "{{ docker_apt_repository }}"
|
|
||||||
state: present
|
|
||||||
become: true
|
|
||||||
|
|
||||||
- name: Update cache
|
|
||||||
apt:
|
|
||||||
update_cache: true
|
|
||||||
become: true
|
|
||||||
|
|
||||||
- name: Install Docker Engine, containerd, and Docker Compose.
|
|
||||||
apt:
|
|
||||||
name: "{{ item }}"
|
|
||||||
state: present
|
|
||||||
loop:
|
|
||||||
- docker-ce
|
|
||||||
- docker-ce-cli
|
|
||||||
- docker-compose-plugin
|
|
||||||
- containerd.io
|
|
||||||
become: true
|
|
||||||
|
|
||||||
|
|
@ -1,31 +0,0 @@
|
||||||
---
|
|
||||||
- name: Create jellyfin-config directory
|
|
||||||
file:
|
|
||||||
path: "{{ jellyfin.config }}"
|
|
||||||
owner: "{{ puid }}"
|
|
||||||
group: "{{ pgid }}"
|
|
||||||
mode: '755'
|
|
||||||
state: directory
|
|
||||||
become: yes
|
|
||||||
|
|
||||||
- name: Create jellyfin-cache directory
|
|
||||||
file:
|
|
||||||
path: "{{ jellyfin.cache }}"
|
|
||||||
owner: "{{ puid }}"
|
|
||||||
group: "{{ pgid }}"
|
|
||||||
mode: '755'
|
|
||||||
state: directory
|
|
||||||
become: yes
|
|
||||||
|
|
||||||
- name: Create jellyfin media directories
|
|
||||||
file:
|
|
||||||
path: "{{ item }}"
|
|
||||||
owner: "{{ puid }}"
|
|
||||||
group: "{{ pgid }}"
|
|
||||||
mode: '755'
|
|
||||||
state: directory
|
|
||||||
become: yes
|
|
||||||
loop:
|
|
||||||
- "{{ jellyfin.media.tv }}"
|
|
||||||
- "{{ jellyfin.media.movies }}"
|
|
||||||
- "{{ jellyfin.media.music }}"
|
|
||||||
|
|
@ -1,11 +0,0 @@
|
||||||
---
|
|
||||||
- name: Create kuma-config directory
|
|
||||||
file:
|
|
||||||
path: "{{ item }}"
|
|
||||||
owner: "{{ puid }}"
|
|
||||||
group: "{{ pgid }}"
|
|
||||||
mode: '755'
|
|
||||||
state: directory
|
|
||||||
loop:
|
|
||||||
- "{{ kuma_config }}"
|
|
||||||
become: true
|
|
||||||
|
|
@ -1,13 +0,0 @@
|
||||||
---
|
|
||||||
- name: Create lidarr directories
|
|
||||||
file:
|
|
||||||
path: "{{ item }}"
|
|
||||||
owner: "{{ puid }}"
|
|
||||||
group: "{{ pgid }}"
|
|
||||||
mode: '755'
|
|
||||||
state: directory
|
|
||||||
become: yes
|
|
||||||
loop:
|
|
||||||
- "{{ lidarr_config }}"
|
|
||||||
- "{{ lidarr_media }}"
|
|
||||||
- "{{ lidarr_downloads }}"
|
|
||||||
|
|
@ -1,24 +0,0 @@
|
||||||
---
|
|
||||||
- include_tasks: install.yml
|
|
||||||
|
|
||||||
- include_tasks: user_group_setup.yml
|
|
||||||
|
|
||||||
- name: Copy the compose file
|
|
||||||
template:
|
|
||||||
src: templates/{{ inventory_hostname }}/compose.yaml
|
|
||||||
dest: "{{ docker_compose_dir }}/compose.yaml"
|
|
||||||
register: compose
|
|
||||||
|
|
||||||
- include_tasks: "{{ inventory_hostname }}_compose.yml"
|
|
||||||
tags:
|
|
||||||
- reload_compose
|
|
||||||
|
|
||||||
- name: Update docker Images
|
|
||||||
shell:
|
|
||||||
cmd: "docker compose pull"
|
|
||||||
chdir: "{{ docker_compose_dir }}"
|
|
||||||
|
|
||||||
- name: Rebuilding docker images
|
|
||||||
shell:
|
|
||||||
cmd: "docker compose up -d --build"
|
|
||||||
chdir: "{{ docker_compose_dir }}"
|
|
||||||
|
|
@ -1,5 +0,0 @@
|
||||||
---
|
|
||||||
|
|
||||||
- include_tasks: nginx-proxy-manager.yml
|
|
||||||
tags:
|
|
||||||
- nginx
|
|
||||||
|
|
@ -1,13 +0,0 @@
|
||||||
---
|
|
||||||
|
|
||||||
- include_tasks: nginx-proxy-manager.yml
|
|
||||||
tags:
|
|
||||||
- nginx
|
|
||||||
|
|
||||||
- include_tasks: pihole.yml
|
|
||||||
tags:
|
|
||||||
- pihole
|
|
||||||
|
|
||||||
- include_tasks: gitea-runner.yml
|
|
||||||
tags:
|
|
||||||
- gitea-runner
|
|
||||||
|
|
@ -1,14 +0,0 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: Create netdata dirs
|
|
||||||
file:
|
|
||||||
path: "{{ item }}"
|
|
||||||
owner: 1000
|
|
||||||
group: 1000
|
|
||||||
mode: '777'
|
|
||||||
state: directory
|
|
||||||
loop:
|
|
||||||
- "{{ netdata_config }}"
|
|
||||||
- "{{ netdata_cache }}"
|
|
||||||
- "{{ netdata_lib }}"
|
|
||||||
become: true
|
|
||||||
|
|
@ -1,13 +0,0 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: Create nginx-data directory
|
|
||||||
file:
|
|
||||||
path: "{{ item }}"
|
|
||||||
owner: "{{ puid }}"
|
|
||||||
group: "{{ pgid }}"
|
|
||||||
mode: '755'
|
|
||||||
state: directory
|
|
||||||
loop:
|
|
||||||
- "{{ nginx.paths.letsencrypt }}"
|
|
||||||
- "{{ nginx.paths.data }}"
|
|
||||||
become: yes
|
|
||||||
|
|
@ -1,14 +0,0 @@
|
||||||
---
|
|
||||||
|
|
||||||
- include_tasks: nginx-proxy-manager.yml
|
|
||||||
tags:
|
|
||||||
- nginx
|
|
||||||
|
|
||||||
- include_tasks: pihole.yml
|
|
||||||
tags:
|
|
||||||
- pihole
|
|
||||||
|
|
||||||
- include_tasks: gitea-runner.yml
|
|
||||||
tags:
|
|
||||||
- gitea-runner
|
|
||||||
|
|
||||||
|
|
@ -1,14 +0,0 @@
|
||||||
---
|
|
||||||
- name: Create pihole-config directory
|
|
||||||
file:
|
|
||||||
path: "{{ item }}"
|
|
||||||
owner: "{{ puid }}"
|
|
||||||
group: "{{ pgid }}"
|
|
||||||
mode: '755'
|
|
||||||
state: directory
|
|
||||||
loop:
|
|
||||||
- "{{ docker_dir }}/pihole/etc-pihole/"
|
|
||||||
- "{{ docker_dir }}/pihole/etc-dnsmasq.d/"
|
|
||||||
become: true
|
|
||||||
|
|
||||||
|
|
||||||
|
|
@ -1,22 +0,0 @@
|
||||||
---
|
|
||||||
- name: Create plex-config directory
|
|
||||||
file:
|
|
||||||
path: "{{ plex_config }}"
|
|
||||||
owner: "{{ puid }}"
|
|
||||||
group: "{{ pgid }}"
|
|
||||||
mode: '755'
|
|
||||||
state: directory
|
|
||||||
become: yes
|
|
||||||
|
|
||||||
- name: Create plex media directories
|
|
||||||
file:
|
|
||||||
path: "{{ item }}"
|
|
||||||
owner: "{{ puid }}"
|
|
||||||
group: "{{ pgid }}"
|
|
||||||
mode: '755'
|
|
||||||
state: directory
|
|
||||||
become: yes
|
|
||||||
loop:
|
|
||||||
- "{{ plex_tv }}"
|
|
||||||
- "{{ plex_movies }}"
|
|
||||||
- "{{ plex_music }}"
|
|
||||||
|
|
@ -1,21 +0,0 @@
|
||||||
---
|
|
||||||
- name: Create prometheus dirs
|
|
||||||
file:
|
|
||||||
path: "{{ item }}"
|
|
||||||
owner: "{{ prometheus_puid }}"
|
|
||||||
group: "{{ prometheus_pgid }}"
|
|
||||||
mode: '755'
|
|
||||||
state: directory
|
|
||||||
loop:
|
|
||||||
- "{{ prometheus_config }}"
|
|
||||||
- "{{ prometheus_data }}"
|
|
||||||
become: true
|
|
||||||
|
|
||||||
- name: Place prometheus config
|
|
||||||
template:
|
|
||||||
owner: "{{ prometheus_puid }}"
|
|
||||||
group: "{{ prometheus_pgid}}"
|
|
||||||
src: "templates/aya01/prometheus/prometheus.yml.j2"
|
|
||||||
dest: "{{ prometheus_config }}/prometheus.yml"
|
|
||||||
mode: '644'
|
|
||||||
become: true
|
|
||||||
|
|
@ -1,11 +0,0 @@
|
||||||
---
|
|
||||||
- name: Create prowlarr directories
|
|
||||||
file:
|
|
||||||
path: "{{ item }}"
|
|
||||||
owner: "{{ puid }}"
|
|
||||||
group: "{{ pgid }}"
|
|
||||||
mode: '755'
|
|
||||||
state: directory
|
|
||||||
become: yes
|
|
||||||
loop:
|
|
||||||
- "{{ prowlarr_config }}"
|
|
||||||
|
|
@ -1,12 +0,0 @@
|
||||||
---
|
|
||||||
- name: Create qbit-config directory
|
|
||||||
file:
|
|
||||||
path: "{{ item }}"
|
|
||||||
owner: "{{ puid }}"
|
|
||||||
group: "{{ pgid }}"
|
|
||||||
mode: '775'
|
|
||||||
state: directory
|
|
||||||
loop:
|
|
||||||
- "{{ qbit_remote_config }}"
|
|
||||||
- "{{ qbit_downloads }}"
|
|
||||||
become: true
|
|
||||||
|
|
@ -1,12 +0,0 @@
|
||||||
---
|
|
||||||
- name: Create qbit_torrentleech-config directory
|
|
||||||
file:
|
|
||||||
path: "{{ item }}"
|
|
||||||
owner: "{{ puid }}"
|
|
||||||
group: "{{ pgid }}"
|
|
||||||
mode: '775'
|
|
||||||
state: directory
|
|
||||||
loop:
|
|
||||||
- "{{ torrentleech_remote_config }}"
|
|
||||||
- "{{ qbit_downloads }}"
|
|
||||||
become: true
|
|
||||||
|
|
@ -1,13 +0,0 @@
|
||||||
---
|
|
||||||
- name: Create radarr directories
|
|
||||||
file:
|
|
||||||
path: "{{ item }}"
|
|
||||||
owner: "{{ puid }}"
|
|
||||||
group: "{{ pgid }}"
|
|
||||||
mode: '755'
|
|
||||||
state: directory
|
|
||||||
become: yes
|
|
||||||
loop:
|
|
||||||
- "{{ radarr_config }}"
|
|
||||||
- "{{ radarr_media }}"
|
|
||||||
- "{{ radarr_downloads }}"
|
|
||||||
|
|
@ -1,12 +0,0 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: Create soft-serve directory
|
|
||||||
file:
|
|
||||||
path: "{{ item }}"
|
|
||||||
owner: "{{ puid }}"
|
|
||||||
group: "{{ pgid }}"
|
|
||||||
mode: '755'
|
|
||||||
state: directory
|
|
||||||
loop:
|
|
||||||
- "{{ softserve_data }}"
|
|
||||||
become: true
|
|
||||||
|
|
@ -1,13 +0,0 @@
|
||||||
---
|
|
||||||
- name: Create sonarr directories
|
|
||||||
file:
|
|
||||||
path: "{{ item }}"
|
|
||||||
owner: "{{ puid }}"
|
|
||||||
group: "{{ pgid }}"
|
|
||||||
mode: '755'
|
|
||||||
state: directory
|
|
||||||
become: yes
|
|
||||||
loop:
|
|
||||||
- "{{ sonarr_config }}"
|
|
||||||
- "{{ sonarr_media }}"
|
|
||||||
- "{{ sonarr_downloads }}"
|
|
||||||
|
|
@ -1,20 +0,0 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: Create swag-config directory
|
|
||||||
file:
|
|
||||||
path: "{{ item }}"
|
|
||||||
owner: "{{ puid }}"
|
|
||||||
group: "{{ pgid }}"
|
|
||||||
state: directory
|
|
||||||
loop:
|
|
||||||
- "{{ swag_config }}"
|
|
||||||
|
|
||||||
- name: Copy site-confs
|
|
||||||
template:
|
|
||||||
owner: "{{ puid }}"
|
|
||||||
group: "{{ pgid }}"
|
|
||||||
src: "{{ item }}"
|
|
||||||
dest: "{{ swag_remote_site_confs }}"
|
|
||||||
mode: '664'
|
|
||||||
loop: "{{ swag_site_confs }}"
|
|
||||||
become: true
|
|
||||||
|
|
@ -1,18 +0,0 @@
|
||||||
---
|
|
||||||
- name: Create syncthing directory
|
|
||||||
file:
|
|
||||||
path: "{{ item }}"
|
|
||||||
owner: "{{ puid }}"
|
|
||||||
group: "{{ pgid }}"
|
|
||||||
mode: '755'
|
|
||||||
state: directory
|
|
||||||
loop:
|
|
||||||
- "{{ syncthing_data }}"
|
|
||||||
become: true
|
|
||||||
|
|
||||||
- name: Resolve inotify error for syncthing
|
|
||||||
template:
|
|
||||||
src: "templates/aya01/syncthing/syncthing.conf"
|
|
||||||
dest: "/etc/sysctl.d/syncthing.conf"
|
|
||||||
mode: "660"
|
|
||||||
become: true
|
|
||||||
|
|
@ -1,9 +0,0 @@
|
||||||
---
|
|
||||||
- name: Create tautulli-config directory
|
|
||||||
file:
|
|
||||||
path: "{{ tautulli_config }}"
|
|
||||||
owner: "{{ puid }}"
|
|
||||||
group: "{{ pgid }}"
|
|
||||||
mode: '755'
|
|
||||||
state: directory
|
|
||||||
become: yes
|
|
||||||
|
|
@ -1,18 +0,0 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: Create traefik-config directory
|
|
||||||
file:
|
|
||||||
path: "{{ item }}"
|
|
||||||
owner: "{{ puid }}"
|
|
||||||
group: "{{ pgid }}"
|
|
||||||
state: directory
|
|
||||||
loop:
|
|
||||||
- "{{ docker_dir }}/traefik/etc-traefik/"
|
|
||||||
- "{{ docker_dir }}/traefik/var-log/"
|
|
||||||
|
|
||||||
- name: Copy traefik-config
|
|
||||||
template:
|
|
||||||
owner: 1000
|
|
||||||
src: "templates/common/traefik/etc-traefik/traefik.yml"
|
|
||||||
dest: "{{ traefik.config }}"
|
|
||||||
mode: '400'
|
|
||||||
|
|
@ -1,25 +0,0 @@
|
||||||
---
|
|
||||||
- name: Ensure group "docker" exists
|
|
||||||
group:
|
|
||||||
name: docker
|
|
||||||
state: present
|
|
||||||
become: yes
|
|
||||||
|
|
||||||
- name: Append the group "docker" to "{{ user }}" groups
|
|
||||||
ansible.builtin.user:
|
|
||||||
name: "{{ user }}"
|
|
||||||
shell: /bin/bash
|
|
||||||
groups: docker
|
|
||||||
append: yes
|
|
||||||
become: yes
|
|
||||||
|
|
||||||
- name: Make sure that the docker folders exists
|
|
||||||
ansible.builtin.file:
|
|
||||||
path: "{{ item }}"
|
|
||||||
owner: "{{ user }}"
|
|
||||||
group: "{{ user }}"
|
|
||||||
state: directory
|
|
||||||
loop:
|
|
||||||
- "{{docker_compose_dir}}"
|
|
||||||
- "{{docker_dir}}"
|
|
||||||
become: yes
|
|
||||||
|
|
@ -1,30 +0,0 @@
|
||||||
---
|
|
||||||
- name: Create zoneminder user
|
|
||||||
user:
|
|
||||||
name: zm
|
|
||||||
uid: '911'
|
|
||||||
shell: /bin/false
|
|
||||||
become: true
|
|
||||||
|
|
||||||
- name: Create Zoneminder config directory
|
|
||||||
file:
|
|
||||||
path: "{{ item }}"
|
|
||||||
owner: '911'
|
|
||||||
group: '911'
|
|
||||||
mode: '755'
|
|
||||||
state: directory
|
|
||||||
loop:
|
|
||||||
- "{{ zoneminder_config }}"
|
|
||||||
become: true
|
|
||||||
|
|
||||||
- name: Create Zoneminder data directory
|
|
||||||
file:
|
|
||||||
path: "{{ item }}"
|
|
||||||
owner: '911'
|
|
||||||
group: '911'
|
|
||||||
mode: '755'
|
|
||||||
state: directory
|
|
||||||
loop:
|
|
||||||
- "{{ zoneminder_data }}"
|
|
||||||
become: true
|
|
||||||
|
|
||||||
|
|
@ -1,518 +0,0 @@
|
||||||
version: '3'
|
|
||||||
services:
|
|
||||||
nginx:
|
|
||||||
container_name: "{{nginx.host}}"
|
|
||||||
image: 'jc21/nginx-proxy-manager:latest'
|
|
||||||
restart: unless-stopped
|
|
||||||
networks:
|
|
||||||
net: {}
|
|
||||||
ports:
|
|
||||||
- '{{nginx.endpoints.http}}:80'
|
|
||||||
- '{{nginx.endpoints.https}}:443'
|
|
||||||
- '{{nginx.endpoints.admin}}:81'
|
|
||||||
volumes:
|
|
||||||
- "{{nginx.paths.data}}:/data"
|
|
||||||
- "{{nginx.paths.letsencrypt}}:/etc/letsencrypt"
|
|
||||||
- '/var/run/docker.sock:/var/run/docker.sock'
|
|
||||||
|
|
||||||
pihole:
|
|
||||||
container_name: pihole
|
|
||||||
image: pihole/pihole:latest
|
|
||||||
restart: unless-stopped
|
|
||||||
depends_on:
|
|
||||||
- nginx
|
|
||||||
networks:
|
|
||||||
- net
|
|
||||||
ports:
|
|
||||||
- "53:53/tcp"
|
|
||||||
- "53:53/udp"
|
|
||||||
volumes:
|
|
||||||
- "/etc/localtime:/etc/localtime:ro"
|
|
||||||
- "{{ pihole_config }}:/etc/pihole/"
|
|
||||||
- "{{ pihole_dnsmasq }}:/etc/dnsmasq.d/"
|
|
||||||
environment:
|
|
||||||
- PUID={{puid}}
|
|
||||||
- PGID={{pgid}}
|
|
||||||
- TZ={{timezone}}
|
|
||||||
- "WEBPASSWORD={{ vault_aya01_pihole_password }}"
|
|
||||||
- "ServerIP={{ host.ip }}"
|
|
||||||
- "INTERFACE=eth0"
|
|
||||||
- "DNS1=1.1.1.1"
|
|
||||||
- "DNS1=1.0.0.1"
|
|
||||||
dns:
|
|
||||||
- 127.0.0.1
|
|
||||||
- 1.1.1.1
|
|
||||||
cap_add:
|
|
||||||
- NET_ADMIN
|
|
||||||
|
|
||||||
syncthing:
|
|
||||||
image: syncthing/syncthing
|
|
||||||
container_name: syncthing
|
|
||||||
restart: unless-stopped
|
|
||||||
depends_on:
|
|
||||||
- pihole
|
|
||||||
networks:
|
|
||||||
- net
|
|
||||||
ports:
|
|
||||||
- 22000:22000/tcp # TCP file transfers
|
|
||||||
- 22000:22000/udp # QUIC file transfers
|
|
||||||
- 21027:21027/udp # Receive local discovery broadcasts
|
|
||||||
volumes:
|
|
||||||
- "{{syncthing_data}}:/var/syncthing"
|
|
||||||
environment:
|
|
||||||
- PUID={{puid}}
|
|
||||||
- PGID={{pgid}}
|
|
||||||
- TZ={{timezone}}
|
|
||||||
hostname: syncthing
|
|
||||||
|
|
||||||
cupsd:
|
|
||||||
container_name: cupsd
|
|
||||||
image: olbat/cupsd
|
|
||||||
restart: unless-stopped
|
|
||||||
depends_on:
|
|
||||||
- pihole
|
|
||||||
networks:
|
|
||||||
- net
|
|
||||||
environment:
|
|
||||||
- PUID={{puid}}
|
|
||||||
- PGID={{pgid}}
|
|
||||||
- TZ={{timezone}}
|
|
||||||
volumes:
|
|
||||||
- /var/run/dbus:/var/run/dbus
|
|
||||||
- "{{cupsd_config}}:/etc/cups"
|
|
||||||
|
|
||||||
kuma:
|
|
||||||
container_name: kuma
|
|
||||||
image: louislam/uptime-kuma:1
|
|
||||||
restart: unless-stopped
|
|
||||||
depends_on:
|
|
||||||
- pihole
|
|
||||||
networks:
|
|
||||||
- net
|
|
||||||
environment:
|
|
||||||
- PUID={{puid}}
|
|
||||||
- PGID={{pgid}}
|
|
||||||
- TZ={{timezone}}
|
|
||||||
ports:
|
|
||||||
- "{{kuma_port}}:3001"
|
|
||||||
volumes:
|
|
||||||
- "{{ kuma_config }}:/app/data"
|
|
||||||
|
|
||||||
plex:
|
|
||||||
image: lscr.io/linuxserver/plex:latest
|
|
||||||
container_name: plex
|
|
||||||
restart: unless-stopped
|
|
||||||
depends_on:
|
|
||||||
- pihole
|
|
||||||
networks:
|
|
||||||
- net
|
|
||||||
devices:
|
|
||||||
- /dev/dri:/dev/dri
|
|
||||||
ports:
|
|
||||||
- "{{ plex_port }}:32400"
|
|
||||||
- "1900:1900"
|
|
||||||
- "3005:3005"
|
|
||||||
- "5353:5353"
|
|
||||||
- "32410:32410"
|
|
||||||
- "8324:8324"
|
|
||||||
- "32412:32412"
|
|
||||||
- "32469:32469"
|
|
||||||
environment:
|
|
||||||
- PUID={{puid}}
|
|
||||||
- PGID={{pgid}}
|
|
||||||
- TZ={{timezone}}
|
|
||||||
- VERSION=docker
|
|
||||||
volumes:
|
|
||||||
- "{{ plex_config }}:/config"
|
|
||||||
- "{{ plex_tv }}:/tv:ro"
|
|
||||||
- "{{ plex_movies }}:/movies:ro"
|
|
||||||
- "{{ plex_music }}:/music:ro"
|
|
||||||
|
|
||||||
sonarr:
|
|
||||||
image: lscr.io/linuxserver/sonarr:latest
|
|
||||||
container_name: sonarr
|
|
||||||
restart: unless-stopped
|
|
||||||
depends_on:
|
|
||||||
- prowlarr
|
|
||||||
networks:
|
|
||||||
- net
|
|
||||||
environment:
|
|
||||||
- PUID={{ puid }}
|
|
||||||
- PGID={{ pgid }}
|
|
||||||
- TZ={{ timezone }}
|
|
||||||
volumes:
|
|
||||||
- {{ sonarr_config }}:/config
|
|
||||||
- {{ sonarr_media }}:/tv #optional
|
|
||||||
- {{ sonarr_downloads }}:/downloads #optional
|
|
||||||
|
|
||||||
radarr:
|
|
||||||
image: lscr.io/linuxserver/radarr:latest
|
|
||||||
container_name: radarr
|
|
||||||
restart: unless-stopped
|
|
||||||
depends_on:
|
|
||||||
- prowlarr
|
|
||||||
networks:
|
|
||||||
- net
|
|
||||||
environment:
|
|
||||||
- PUID={{ puid }}
|
|
||||||
- PGID={{ pgid }}
|
|
||||||
- TZ={{ timezone }}
|
|
||||||
volumes:
|
|
||||||
- {{ radarr_config }}:/config
|
|
||||||
- {{ radarr_media }}:/movies #optional
|
|
||||||
- {{ radarr_downloads }}:/downloads #optional
|
|
||||||
|
|
||||||
lidarr:
|
|
||||||
image: lscr.io/linuxserver/lidarr:latest
|
|
||||||
container_name: lidarr
|
|
||||||
restart: unless-stopped
|
|
||||||
depends_on:
|
|
||||||
- prowlarr
|
|
||||||
networks:
|
|
||||||
- net
|
|
||||||
environment:
|
|
||||||
- PUID={{ puid }}
|
|
||||||
- PGID={{ pgid }}
|
|
||||||
- TZ={{ timezone }}
|
|
||||||
volumes:
|
|
||||||
- {{ lidarr_config }}:/config
|
|
||||||
- {{ lidarr_media }}:/music #optional
|
|
||||||
- {{ lidarr_downloads }}:/downloads #optional
|
|
||||||
|
|
||||||
prowlarr:
|
|
||||||
image: lscr.io/linuxserver/prowlarr:latest
|
|
||||||
container_name: prowlarr
|
|
||||||
restart: unless-stopped
|
|
||||||
depends_on:
|
|
||||||
- pihole
|
|
||||||
networks:
|
|
||||||
- net
|
|
||||||
environment:
|
|
||||||
- PUID={{ puid }}
|
|
||||||
- PGID={{ pgid }}
|
|
||||||
- TZ={{ timezone }}
|
|
||||||
volumes:
|
|
||||||
- {{ prowlarr_config }}:/config
|
|
||||||
|
|
||||||
pastebin:
|
|
||||||
image: wantguns/bin
|
|
||||||
container_name: pastebin
|
|
||||||
restart: unless-stopped
|
|
||||||
depends_on:
|
|
||||||
- pihole
|
|
||||||
networks:
|
|
||||||
- net
|
|
||||||
environment:
|
|
||||||
- PUID={{ puid }}
|
|
||||||
- PGID={{ pgid }}
|
|
||||||
- TZ={{ timezone }}
|
|
||||||
- ROCKET_PORT={{ bin_port }}
|
|
||||||
- HOST_URL={{ bin_host }}.{{ aya01_host }}.{{ local_domain }}
|
|
||||||
volumes:
|
|
||||||
- {{ bin_upload }}:/app/upload
|
|
||||||
|
|
||||||
tautulli:
|
|
||||||
image: lscr.io/linuxserver/tautulli:latest
|
|
||||||
container_name: tautulli
|
|
||||||
restart: unless-stopped
|
|
||||||
depends_on:
|
|
||||||
- plex
|
|
||||||
networks:
|
|
||||||
- net
|
|
||||||
environment:
|
|
||||||
- PUID={{ puid }}
|
|
||||||
- PGID={{ pgid}}
|
|
||||||
- TZ={{ timezone }}
|
|
||||||
ports:
|
|
||||||
- "{{ tautulli_port }}:8181"
|
|
||||||
volumes:
|
|
||||||
- {{ tautulli_config}}:/config
|
|
||||||
|
|
||||||
{{ gluetun_host }}:
|
|
||||||
image: qmcgaw/gluetun
|
|
||||||
container_name: {{ gluetun_host }}
|
|
||||||
restart: unless-stopped
|
|
||||||
networks:
|
|
||||||
- net
|
|
||||||
cap_add:
|
|
||||||
- NET_ADMIN
|
|
||||||
devices:
|
|
||||||
- /dev/net/tun:/dev/net/tun
|
|
||||||
volumes:
|
|
||||||
- {{ gluetun_config }}:/gluetun
|
|
||||||
environment:
|
|
||||||
- PUID={{puid}}
|
|
||||||
- PGID={{pgid}}
|
|
||||||
- TZ={{ timezone }}
|
|
||||||
- VPN_SERVICE_PROVIDER=protonvpn
|
|
||||||
- UPDATER_VPN_SERVICE_PROVIDERS=protonvpn
|
|
||||||
- UPDATER_PERIOD=24h
|
|
||||||
- SERVER_COUNTRIES={{ gluetun_country }}
|
|
||||||
- OPENVPN_USER={{ vault_qbit_vpn_user }}+pmp
|
|
||||||
- OPENVPN_PASSWORD={{ vault_qbit_vpn_password }}
|
|
||||||
|
|
||||||
{{ torrentleech_host }}:
|
|
||||||
image: qbittorrentofficial/qbittorrent-nox
|
|
||||||
container_name: {{ torrentleech_host }}
|
|
||||||
restart: unless-stopped
|
|
||||||
depends_on:
|
|
||||||
- gluetun
|
|
||||||
- sonarr
|
|
||||||
- radarr
|
|
||||||
- lidarr
|
|
||||||
network_mode: "container:{{ gluetun_host }}"
|
|
||||||
environment:
|
|
||||||
- PUID={{ puid }}
|
|
||||||
- PGID={{ pgid }}
|
|
||||||
- TZ={{ timezone }}
|
|
||||||
- QBT_EULA="accept"
|
|
||||||
- QBT_WEBUI_PORT="{{ torrentleech_port }}"
|
|
||||||
volumes:
|
|
||||||
- {{ torrentleech_remote_config }}:/config
|
|
||||||
- {{ qbit_downloads }}:/downloads
|
|
||||||
|
|
||||||
{{qbit_host}}:
|
|
||||||
image: qbittorrentofficial/qbittorrent-nox
|
|
||||||
container_name: {{ qbit_host }}
|
|
||||||
restart: unless-stopped
|
|
||||||
depends_on:
|
|
||||||
- gluetun
|
|
||||||
- sonarr
|
|
||||||
- radarr
|
|
||||||
- lidarr
|
|
||||||
network_mode: "container:{{ gluetun_host }}"
|
|
||||||
environment:
|
|
||||||
- PUID={{ puid }}
|
|
||||||
- PGID={{ pgid }}
|
|
||||||
- TZ={{ timezone }}
|
|
||||||
- QBT_EULA="accept"
|
|
||||||
- QBT_WEBUI_PORT="{{ qbit_port }}"
|
|
||||||
volumes:
|
|
||||||
- {{ qbit_remote_config }}:/config
|
|
||||||
- {{ qbit_downloads }}:/downloads
|
|
||||||
|
|
||||||
{{ prometheus_host }}:
|
|
||||||
image: prom/prometheus
|
|
||||||
container_name: {{ prometheus_host }}
|
|
||||||
restart: unless-stopped
|
|
||||||
depends_on:
|
|
||||||
- pihole
|
|
||||||
networks:
|
|
||||||
- net
|
|
||||||
environment:
|
|
||||||
- PUID={{ prometheus_puid }}
|
|
||||||
- PGID={{ prometheus_pgid}}
|
|
||||||
- TZ={{ timezone }}
|
|
||||||
volumes:
|
|
||||||
- {{ prometheus_config }}:/etc/prometheus/
|
|
||||||
- prometheus_data:/prometheus/
|
|
||||||
|
|
||||||
{{ grafana_host }}:
|
|
||||||
image: grafana/grafana-oss
|
|
||||||
container_name: {{ grafana_host }}
|
|
||||||
restart: unless-stopped
|
|
||||||
user: "0:0"
|
|
||||||
depends_on:
|
|
||||||
- {{ prometheus_host }}
|
|
||||||
networks:
|
|
||||||
- net
|
|
||||||
environment:
|
|
||||||
- PUID={{ grafana_puid }}
|
|
||||||
- PGID={{ grafana_pgid }}
|
|
||||||
- TZ={{ timezone }}
|
|
||||||
volumes:
|
|
||||||
- {{ grafana_data }}:/var/lib/grafana/
|
|
||||||
- {{ grafana_config }}:/etc/grafana/
|
|
||||||
|
|
||||||
ddns-updater:
|
|
||||||
container_name: ddns-updater
|
|
||||||
image: "ghcr.io/qdm12/ddns-updater"
|
|
||||||
restart: unless-stopped
|
|
||||||
depends_on:
|
|
||||||
- pihole
|
|
||||||
networks:
|
|
||||||
net: {}
|
|
||||||
volumes:
|
|
||||||
- "{{ ddns_data }}:/updater/data/"
|
|
||||||
|
|
||||||
homeassistant:
|
|
||||||
container_name: homeassistant
|
|
||||||
image: "ghcr.io/home-assistant/home-assistant:stable"
|
|
||||||
restart: unless-stopped
|
|
||||||
depends_on:
|
|
||||||
- pihole
|
|
||||||
networks:
|
|
||||||
net: {}
|
|
||||||
volumes:
|
|
||||||
- "/etc/localtime:/etc/localtime:ro"
|
|
||||||
- "{{ ha_config }}:/config/"
|
|
||||||
privileged: true
|
|
||||||
ports:
|
|
||||||
- "{{ ha_port }}:8123"
|
|
||||||
- 4357:4357
|
|
||||||
- 5683:5683
|
|
||||||
- 5683:5683/udp
|
|
||||||
|
|
||||||
{{stirling.host}}:
|
|
||||||
container_name: {{stirling.host}}
|
|
||||||
image: frooodle/s-pdf:latest
|
|
||||||
restart: unless-stopped
|
|
||||||
depends_on:
|
|
||||||
- pihole
|
|
||||||
networks:
|
|
||||||
net: {}
|
|
||||||
|
|
||||||
{{ jellyfin.host }}:
|
|
||||||
container_name: {{ jellyfin.host }}
|
|
||||||
image: jellyfin/jellyfin
|
|
||||||
restart: 'unless-stopped'
|
|
||||||
depends_on:
|
|
||||||
- pihole
|
|
||||||
networks:
|
|
||||||
net: {}
|
|
||||||
devices:
|
|
||||||
- /dev/dri:/dev/dri
|
|
||||||
volumes:
|
|
||||||
- {{ jellyfin.config }}:/config
|
|
||||||
- {{ jellyfin.cache }}:/cache
|
|
||||||
- {{ jellyfin.media.tv }}:/tv:ro
|
|
||||||
- {{ jellyfin.media.movies }}:/movies:ro
|
|
||||||
- {{ jellyfin.media.music }}:/music:ro
|
|
||||||
ports:
|
|
||||||
- "{{ jellyfin.port }}:{{ jellyfin.port }}"
|
|
||||||
|
|
||||||
broker:
|
|
||||||
container_name: {{ paperless.redis.host }}
|
|
||||||
image: docker.io/library/redis:7
|
|
||||||
restart: unless-stopped
|
|
||||||
depends_on:
|
|
||||||
- pihole
|
|
||||||
networks:
|
|
||||||
- net
|
|
||||||
volumes:
|
|
||||||
- {{paperless.redis.data}}:/data
|
|
||||||
|
|
||||||
db:
|
|
||||||
container_name: {{ paperless.db.host }}
|
|
||||||
image: docker.io/library/postgres:15
|
|
||||||
restart: unless-stopped
|
|
||||||
depends_on:
|
|
||||||
- pihole
|
|
||||||
networks:
|
|
||||||
- net
|
|
||||||
volumes:
|
|
||||||
- {{paperless.db.data}}:/var/lib/postgresql/data
|
|
||||||
environment:
|
|
||||||
POSTGRES_DB: {{ paperless.db.db }}
|
|
||||||
POSTGRES_USER: {{ paperless.db.user }}
|
|
||||||
POSTGRES_PASSWORD: {{ paperless.db.password }}
|
|
||||||
|
|
||||||
paperless:
|
|
||||||
container_name: {{ paperless.host }}
|
|
||||||
image: ghcr.io/paperless-ngx/paperless-ngx:latest
|
|
||||||
restart: unless-stopped
|
|
||||||
depends_on:
|
|
||||||
- db
|
|
||||||
- broker
|
|
||||||
networks:
|
|
||||||
- net
|
|
||||||
healthcheck:
|
|
||||||
test: ["CMD", "curl", "-fs", "-S", "--max-time", "2", "http://localhost:{{ paperless.port }}"]
|
|
||||||
interval: 30s
|
|
||||||
timeout: 10s
|
|
||||||
retries: 5
|
|
||||||
volumes:
|
|
||||||
- {{ paperless.data.data }}:/usr/src/paperless/data
|
|
||||||
- {{ paperless.data.media }}:/usr/src/paperless/media
|
|
||||||
- {{ paperless.data.export }}:/usr/src/paperless/export
|
|
||||||
- {{ paperless.data.consume }}:/usr/src/paperless/consume
|
|
||||||
environment:
|
|
||||||
- "PAPERLESS_REDIS=redis://broker:6379"
|
|
||||||
- "PAPERLESS_DBHOST=db"
|
|
||||||
- "PAPERLESS_DBUSER={{paperless.db.user}}"
|
|
||||||
- "PAPERLESS_DBPASS={{paperless.db.password}}"
|
|
||||||
- "USERMAP_UID={{ puid }}"
|
|
||||||
- "USERMAP_GID={{ pgid}}"
|
|
||||||
- "PAPERLESS_URL=https://{{paperless.host}}.{{ host.hostname }}.{{ backup_domain }}"
|
|
||||||
- "PAPERLESS_TIME_ZONE={{ timezone }}"
|
|
||||||
- "PAPERLESS_OCR_LANGUAGE=deu"
|
|
||||||
|
|
||||||
{{ homarr.host }}:
|
|
||||||
container_name: {{ homarr.host }}
|
|
||||||
image: ghcr.io/ajnart/homarr:latest
|
|
||||||
restart: unless-stopped
|
|
||||||
depends_on:
|
|
||||||
- pihole
|
|
||||||
networks:
|
|
||||||
- net
|
|
||||||
volumes:
|
|
||||||
- {{ homarr.volumes.configs }}:/app/data/configs
|
|
||||||
- {{ homarr.volumes.data }}:/data
|
|
||||||
- {{ homarr.volumes.icons }}:/app/public/icons
|
|
||||||
|
|
||||||
|
|
||||||
{{ gitea.host }}:
|
|
||||||
container_name: {{ gitea.host }}
|
|
||||||
image: gitea/gitea:1.20.5-rootless
|
|
||||||
restart: unless-stopped
|
|
||||||
depends_on:
|
|
||||||
- pihole
|
|
||||||
networks:
|
|
||||||
- net
|
|
||||||
volumes:
|
|
||||||
- {{ gitea.volumes.data }}:/var/lib/gitea
|
|
||||||
- {{ gitea.volumes.config }}:/etc/gitea
|
|
||||||
- /etc/timezone:/etc/timezone:ro
|
|
||||||
- /etc/localtime:/etc/localtime:ro
|
|
||||||
ports:
|
|
||||||
- "{{ gitea.ports.http }}:3000"
|
|
||||||
- "{{ gitea.ports.ssh }}:2222"
|
|
||||||
|
|
||||||
|
|
||||||
{{ gitea.runner.host }}:
|
|
||||||
container_name: {{ gitea.runner.host }}
|
|
||||||
image: gitea/act_runner:nightly
|
|
||||||
restart: unless-stopped
|
|
||||||
depends_on:
|
|
||||||
- {{ gitea.host }}
|
|
||||||
networks:
|
|
||||||
- net
|
|
||||||
volumes:
|
|
||||||
- "{{ gitea.runner.config_file }}:/config.yaml"
|
|
||||||
- "{{ gitea.runner.volumes.data }}:/data"
|
|
||||||
- "/var/run/docker.sock:/var/run/docker.sock"
|
|
||||||
environment:
|
|
||||||
- "GITEA_INSTANCE_URL={{ gitea.url }}"
|
|
||||||
- "GITEA_RUNNER_REGISTRATION_TOKEN={{ gitea.runner.token }}"
|
|
||||||
- "GITEA_RUNNER_NAME: {{ gitea.runner.name }}"
|
|
||||||
- "CONFIG_FILE: /config.yaml"
|
|
||||||
|
|
||||||
{{ jellyseer.host }}:
|
|
||||||
container_name: {{ jellyseer.host }}
|
|
||||||
image: fallenbagel/jellyseerr:latest
|
|
||||||
restart: unless-stopped
|
|
||||||
environment:
|
|
||||||
- LOG_LEVEL=info
|
|
||||||
- TZ={{ timezone }}
|
|
||||||
depends_on:
|
|
||||||
- {{ jellyfin.host }}
|
|
||||||
networks:
|
|
||||||
- net
|
|
||||||
volumes:
|
|
||||||
- {{ jellyseer.volumes.config }}:/app/config
|
|
||||||
|
|
||||||
networks:
|
|
||||||
zoneminder:
|
|
||||||
driver: bridge
|
|
||||||
ipam:
|
|
||||||
driver: default
|
|
||||||
config:
|
|
||||||
- subnet: {{ zoneminder_network }}
|
|
||||||
net:
|
|
||||||
driver: bridge
|
|
||||||
ipam:
|
|
||||||
driver: default
|
|
||||||
config:
|
|
||||||
- subnet: {{ docker_network }}
|
|
||||||
volumes:
|
|
||||||
prometheus_data: {}
|
|
||||||
|
|
@ -1,196 +0,0 @@
|
||||||
#
|
|
||||||
# Configuration file for the CUPS scheduler. See "man cupsd.conf" for a
|
|
||||||
# complete description of this file.
|
|
||||||
#
|
|
||||||
|
|
||||||
# Log general information in error_log - change "warn" to "debug"
|
|
||||||
# for troubleshooting...
|
|
||||||
LogLevel warn
|
|
||||||
PageLogFormat
|
|
||||||
ServerAlias *
|
|
||||||
|
|
||||||
# Specifies the maximum size of the log files before they are rotated. The value "0" disables log rotation.
|
|
||||||
MaxLogSize 0
|
|
||||||
|
|
||||||
# Default error policy for printers
|
|
||||||
ErrorPolicy retry-job
|
|
||||||
|
|
||||||
# Allow remote access
|
|
||||||
Listen *:631
|
|
||||||
|
|
||||||
# Show shared printers on the local network.
|
|
||||||
Browsing Yes
|
|
||||||
BrowseLocalProtocols dnssd
|
|
||||||
|
|
||||||
# Default authentication type, when authentication is required...
|
|
||||||
DefaultAuthType Basic
|
|
||||||
DefaultEncryption IfRequested
|
|
||||||
|
|
||||||
# Web interface setting...
|
|
||||||
WebInterface Yes
|
|
||||||
|
|
||||||
# Timeout after cupsd exits if idle (applied only if cupsd runs on-demand - with -l)
|
|
||||||
IdleExitTimeout 60
|
|
||||||
|
|
||||||
# Restrict access to the server...
|
|
||||||
<Location />
|
|
||||||
Order allow,deny
|
|
||||||
Allow all
|
|
||||||
</Location>
|
|
||||||
|
|
||||||
# Restrict access to the admin pages...
|
|
||||||
<Location /admin>
|
|
||||||
Order allow,deny
|
|
||||||
Allow all
|
|
||||||
</Location>
|
|
||||||
|
|
||||||
# Restrict access to configuration files...
|
|
||||||
<Location /admin/conf>
|
|
||||||
AuthType Default
|
|
||||||
Require user @SYSTEM
|
|
||||||
Order allow,deny
|
|
||||||
Allow all
|
|
||||||
</Location>
|
|
||||||
|
|
||||||
# Restrict access to log files...
|
|
||||||
<Location /admin/log>
|
|
||||||
AuthType Default
|
|
||||||
Require user @SYSTEM
|
|
||||||
Order allow,deny
|
|
||||||
Allow all
|
|
||||||
</Location>
|
|
||||||
|
|
||||||
# Set the default printer/job policies...
|
|
||||||
<Policy default>
|
|
||||||
# Job/subscription privacy...
|
|
||||||
JobPrivateAccess default
|
|
||||||
JobPrivateValues default
|
|
||||||
SubscriptionPrivateAccess default
|
|
||||||
SubscriptionPrivateValues default
|
|
||||||
|
|
||||||
# Job-related operations must be done by the owner or an administrator...
|
|
||||||
<Limit Create-Job Print-Job Print-URI Validate-Job>
|
|
||||||
Order deny,allow
|
|
||||||
</Limit>
|
|
||||||
|
|
||||||
<Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document>
|
|
||||||
Require user @OWNER @SYSTEM
|
|
||||||
Order deny,allow
|
|
||||||
</Limit>
|
|
||||||
|
|
||||||
# All administration operations require an administrator to authenticate...
|
|
||||||
<Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default CUPS-Get-Devices>
|
|
||||||
AuthType Default
|
|
||||||
Require user @SYSTEM
|
|
||||||
Order deny,allow
|
|
||||||
</Limit>
|
|
||||||
|
|
||||||
# All printer operations require a printer operator to authenticate...
|
|
||||||
<Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs>
|
|
||||||
AuthType Default
|
|
||||||
Require user @SYSTEM
|
|
||||||
Order deny,allow
|
|
||||||
</Limit>
|
|
||||||
|
|
||||||
# Only the owner or an administrator can cancel or authenticate a job...
|
|
||||||
<Limit Cancel-Job CUPS-Authenticate-Job>
|
|
||||||
Require user @OWNER @SYSTEM
|
|
||||||
Order deny,allow
|
|
||||||
</Limit>
|
|
||||||
|
|
||||||
<Limit All>
|
|
||||||
Order deny,allow
|
|
||||||
</Limit>
|
|
||||||
</Policy>
|
|
||||||
|
|
||||||
# Set the authenticated printer/job policies...
|
|
||||||
<Policy authenticated>
|
|
||||||
# Job/subscription privacy...
|
|
||||||
JobPrivateAccess default
|
|
||||||
JobPrivateValues default
|
|
||||||
SubscriptionPrivateAccess default
|
|
||||||
SubscriptionPrivateValues default
|
|
||||||
|
|
||||||
# Job-related operations must be done by the owner or an administrator...
|
|
||||||
<Limit Create-Job Print-Job Print-URI Validate-Job>
|
|
||||||
AuthType Default
|
|
||||||
Order deny,allow
|
|
||||||
</Limit>
|
|
||||||
|
|
||||||
<Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document>
|
|
||||||
AuthType Default
|
|
||||||
Require user @OWNER @SYSTEM
|
|
||||||
Order deny,allow
|
|
||||||
</Limit>
|
|
||||||
|
|
||||||
# All administration operations require an administrator to authenticate...
|
|
||||||
<Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
|
|
||||||
AuthType Default
|
|
||||||
Require user @SYSTEM
|
|
||||||
Order deny,allow
|
|
||||||
</Limit>
|
|
||||||
|
|
||||||
# All printer operations require a printer operator to authenticate...
|
|
||||||
<Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs>
|
|
||||||
AuthType Default
|
|
||||||
Require user @SYSTEM
|
|
||||||
Order deny,allow
|
|
||||||
</Limit>
|
|
||||||
|
|
||||||
# Only the owner or an administrator can cancel or authenticate a job...
|
|
||||||
<Limit Cancel-Job CUPS-Authenticate-Job>
|
|
||||||
AuthType Default
|
|
||||||
Require user @OWNER @SYSTEM
|
|
||||||
Order deny,allow
|
|
||||||
</Limit>
|
|
||||||
|
|
||||||
<Limit All>
|
|
||||||
Order deny,allow
|
|
||||||
</Limit>
|
|
||||||
</Policy>
|
|
||||||
|
|
||||||
# Set the kerberized printer/job policies...
|
|
||||||
<Policy kerberos>
|
|
||||||
# Job/subscription privacy...
|
|
||||||
JobPrivateAccess default
|
|
||||||
JobPrivateValues default
|
|
||||||
SubscriptionPrivateAccess default
|
|
||||||
SubscriptionPrivateValues default
|
|
||||||
|
|
||||||
# Job-related operations must be done by the owner or an administrator...
|
|
||||||
<Limit Create-Job Print-Job Print-URI Validate-Job>
|
|
||||||
AuthType Negotiate
|
|
||||||
Order deny,allow
|
|
||||||
</Limit>
|
|
||||||
|
|
||||||
<Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document>
|
|
||||||
AuthType Negotiate
|
|
||||||
Require user @OWNER @SYSTEM
|
|
||||||
Order deny,allow
|
|
||||||
</Limit>
|
|
||||||
|
|
||||||
# All administration operations require an administrator to authenticate...
|
|
||||||
<Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
|
|
||||||
AuthType Default
|
|
||||||
Require user @SYSTEM
|
|
||||||
Order deny,allow
|
|
||||||
</Limit>
|
|
||||||
|
|
||||||
# All printer operations require a printer operator to authenticate...
|
|
||||||
<Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs>
|
|
||||||
AuthType Default
|
|
||||||
Require user @SYSTEM
|
|
||||||
Order deny,allow
|
|
||||||
</Limit>
|
|
||||||
|
|
||||||
# Only the owner or an administrator can cancel or authenticate a job...
|
|
||||||
<Limit Cancel-Job CUPS-Authenticate-Job>
|
|
||||||
AuthType Negotiate
|
|
||||||
Require user @OWNER @SYSTEM
|
|
||||||
Order deny,allow
|
|
||||||
</Limit>
|
|
||||||
|
|
||||||
<Limit All>
|
|
||||||
Order deny,allow
|
|
||||||
</Limit>
|
|
||||||
</Policy>
|
|
||||||
|
|
@ -1,11 +0,0 @@
|
||||||
{
|
|
||||||
"settings": [
|
|
||||||
{
|
|
||||||
"provider": "namecheap",
|
|
||||||
"domain": "{{ local_domain }}",
|
|
||||||
"host": "{{ local_subdomains }}",
|
|
||||||
"password": "{{ vault_ddns_local_password }}",
|
|
||||||
"provider_ip": true
|
|
||||||
}
|
|
||||||
]
|
|
||||||
}
|
|
||||||
File diff suppressed because it is too large
Load Diff
|
|
@ -1,18 +0,0 @@
|
||||||
devices:
|
|
||||||
- name: mikrotik
|
|
||||||
address: "{{ e_mikrotik_ip }}"
|
|
||||||
user: "{{ prm_user }}"
|
|
||||||
password: "{{ vault_prm_user_password }}"
|
|
||||||
|
|
||||||
features:
|
|
||||||
bgp: false
|
|
||||||
dhcp: true
|
|
||||||
dhcpv6: true
|
|
||||||
dhcpl: true
|
|
||||||
routes: true
|
|
||||||
pools: true
|
|
||||||
optics: true
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
@ -1,46 +0,0 @@
|
||||||
# Sample config for Prometheus.
|
|
||||||
|
|
||||||
global:
|
|
||||||
scrape_interval: 15s # Set the scrape interval to every 15 seconds. Default is every 1 minute.
|
|
||||||
evaluation_interval: 15s # Evaluate rules every 15 seconds. The default is every 1 minute.
|
|
||||||
# scrape_timeout is set to the global default (10s).
|
|
||||||
|
|
||||||
# Attach these labels to any time series or alerts when communicating with
|
|
||||||
# external systems (federation, remote storage, Alertmanager).
|
|
||||||
external_labels:
|
|
||||||
monitor: '{{ user }}'
|
|
||||||
|
|
||||||
# Load rules once and periodically evaluate them according to the global 'evaluation_interval'.
|
|
||||||
rule_files:
|
|
||||||
# - "first_rules.yml"
|
|
||||||
# - "second_rules.yml"
|
|
||||||
|
|
||||||
scrape_configs:
|
|
||||||
- job_name: 'node'
|
|
||||||
scrape_interval: 10s
|
|
||||||
scrape_timeout: 10s
|
|
||||||
tls_config:
|
|
||||||
insecure_skip_verify: true
|
|
||||||
static_configs:
|
|
||||||
- targets: ['{{ aya01_ip }}:{{node_exporter.port}}']
|
|
||||||
- targets: ['{{ mii_ip }}:{{node_exporter.port}}']
|
|
||||||
- targets: ['{{ pi_ip }}:{{node_exporter.port}}']
|
|
||||||
- targets: ['{{ naruto_ip }}:{{node_exporter.port}}']
|
|
||||||
- targets: ['{{ inko_ip }}:{{node_exporter.port}}']
|
|
||||||
- job_name: 'mikrotik'
|
|
||||||
static_configs:
|
|
||||||
- targets:
|
|
||||||
- {{ snmp_exporter_target }}
|
|
||||||
metrics_path: /snmp
|
|
||||||
params:
|
|
||||||
module: [mikrotik]
|
|
||||||
relabel_configs:
|
|
||||||
- source_labels: [__address__]
|
|
||||||
target_label: __param_target
|
|
||||||
- source_labels: [__param_target]
|
|
||||||
target_label: instance
|
|
||||||
- target_label: __address__
|
|
||||||
replacement: {{ aya01_ip }}:{{ snmp_exporter_port }} # The SNMP exporter's real hostname:port.
|
|
||||||
- job_name: 'SMART'
|
|
||||||
static_configs:
|
|
||||||
- targets: ['{{ aya01_ip }}:{{smart_exporter.port}}']
|
|
||||||
|
|
@ -1 +0,0 @@
|
||||||
fs.inotify.max_user_watches=204800
|
|
||||||
|
|
@ -1,36 +0,0 @@
|
||||||
## traefik.yml
|
|
||||||
# Entry Points
|
|
||||||
entryPoints:
|
|
||||||
web:
|
|
||||||
address: ":80"
|
|
||||||
websecure:
|
|
||||||
address: ":443"
|
|
||||||
|
|
||||||
# Docker configuration backend
|
|
||||||
providers:
|
|
||||||
docker:
|
|
||||||
endpoint: "unix:///var/run/docker.sock"
|
|
||||||
exposedbydefault: "false"
|
|
||||||
|
|
||||||
# API and dashboard configuration
|
|
||||||
api:
|
|
||||||
insecure: true
|
|
||||||
dashboard: true
|
|
||||||
|
|
||||||
log:
|
|
||||||
filePath: "/var/log/traefik.log"
|
|
||||||
|
|
||||||
accessLog:
|
|
||||||
filePath: "/var/log/access.log"
|
|
||||||
|
|
||||||
certificatesResolvers:
|
|
||||||
myresolver:
|
|
||||||
acme:
|
|
||||||
email: "me+cert@tudattr.dev"
|
|
||||||
storage: "/letsencrypt/acme.json"
|
|
||||||
dnsChallenge:
|
|
||||||
provider: "namecheap"
|
|
||||||
|
|
||||||
metrics:
|
|
||||||
prometheus:
|
|
||||||
entrypoint: "traefik"
|
|
||||||
|
|
@ -1,25 +0,0 @@
|
||||||
version: '3'
|
|
||||||
services:
|
|
||||||
nginx:
|
|
||||||
container_name: "{{nginx.host}}"
|
|
||||||
image: 'jc21/nginx-proxy-manager:latest'
|
|
||||||
restart: unless-stopped
|
|
||||||
networks:
|
|
||||||
net: {}
|
|
||||||
ports:
|
|
||||||
- '{{nginx.endpoints.http}}:80'
|
|
||||||
- '{{nginx.endpoints.https}}:443'
|
|
||||||
- '{{nginx.endpoints.admin}}:81'
|
|
||||||
volumes:
|
|
||||||
- "{{nginx.paths.data}}:/data"
|
|
||||||
- "{{nginx.paths.letsencrypt}}:/etc/letsencrypt"
|
|
||||||
- '/var/run/docker.sock:/var/run/docker.sock'
|
|
||||||
|
|
||||||
networks:
|
|
||||||
net:
|
|
||||||
driver: bridge
|
|
||||||
ipam:
|
|
||||||
# driver: default
|
|
||||||
config:
|
|
||||||
- subnet: 172.16.69.0/24
|
|
||||||
gateway: 172.16.69.1
|
|
||||||
|
|
@ -1,73 +0,0 @@
|
||||||
## Version 2023/02/09 - Changelog: https://github.com/linuxserver/docker-swag/commits/master/root/defaults/nginx/site-confs/default.conf.sample
|
|
||||||
|
|
||||||
# redirect all traffic to https
|
|
||||||
server {
|
|
||||||
listen 80 default_server;
|
|
||||||
listen [::]:80 default_server;
|
|
||||||
|
|
||||||
location / {
|
|
||||||
return 301 https://$host$request_uri;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
# main server block
|
|
||||||
server {
|
|
||||||
listen 443 ssl http2 default_server;
|
|
||||||
listen [::]:443 ssl http2 default_server;
|
|
||||||
|
|
||||||
server_name _;
|
|
||||||
|
|
||||||
root /config/www;
|
|
||||||
index index.html index.htm index.php;
|
|
||||||
|
|
||||||
# enable subfolder method reverse proxy confs
|
|
||||||
include /config/nginx/proxy-confs/*.subfolder.conf;
|
|
||||||
|
|
||||||
# enable for ldap auth (requires ldap-location.conf in the location block)
|
|
||||||
#include /config/nginx/ldap-server.conf;
|
|
||||||
|
|
||||||
# enable for Authelia (requires authelia-location.conf in the location block)
|
|
||||||
#include /config/nginx/authelia-server.conf;
|
|
||||||
|
|
||||||
# enable for Authentik (requires authentik-location.conf in the location block)
|
|
||||||
#include /config/nginx/authentik-server.conf;
|
|
||||||
|
|
||||||
location / {
|
|
||||||
# enable for basic auth
|
|
||||||
#auth_basic "Restricted";
|
|
||||||
#auth_basic_user_file /config/nginx/.htpasswd;
|
|
||||||
|
|
||||||
# enable for ldap auth (requires ldap-server.conf in the server block)
|
|
||||||
#include /config/nginx/ldap-location.conf;
|
|
||||||
|
|
||||||
# enable for Authelia (requires authelia-server.conf in the server block)
|
|
||||||
#include /config/nginx/authelia-location.conf;
|
|
||||||
|
|
||||||
# enable for Authentik (requires authentik-server.conf in the server block)
|
|
||||||
#include /config/nginx/authentik-location.conf;
|
|
||||||
|
|
||||||
try_files $uri $uri/ /index.html /index.php$is_args$args =404;
|
|
||||||
}
|
|
||||||
|
|
||||||
location /ip {
|
|
||||||
add_header Content-Type "text/plain";
|
|
||||||
return 200 '$remote_addr\n';
|
|
||||||
}
|
|
||||||
|
|
||||||
location ~ ^(.+\.php)(.*)$ {
|
|
||||||
fastcgi_split_path_info ^(.+\.php)(.*)$;
|
|
||||||
fastcgi_pass 127.0.0.1:9000;
|
|
||||||
fastcgi_index index.php;
|
|
||||||
include /etc/nginx/fastcgi_params;
|
|
||||||
}
|
|
||||||
|
|
||||||
# deny access to .htaccess/.htpasswd files
|
|
||||||
location ~ /\.ht {
|
|
||||||
deny all;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
# enable subdomain method reverse proxy confs
|
|
||||||
include /config/nginx/proxy-confs/*.subdomain.conf;
|
|
||||||
# enable proxy cache for auth
|
|
||||||
proxy_cache_path cache/ keys_zone=auth_cache:10m;
|
|
||||||
|
|
@ -1,31 +0,0 @@
|
||||||
server {
|
|
||||||
listen 443 ssl;
|
|
||||||
listen [::]:443 ssl;
|
|
||||||
|
|
||||||
server_name {{ plex_host }}.{{ remote_domain }};
|
|
||||||
|
|
||||||
include /config/nginx/ssl.conf;
|
|
||||||
|
|
||||||
client_max_body_size 0;
|
|
||||||
proxy_redirect off;
|
|
||||||
proxy_buffering off;
|
|
||||||
|
|
||||||
location / {
|
|
||||||
include /config/nginx/resolver.conf;
|
|
||||||
proxy_pass http://{{ plex_host }}.{{ aya01_host }}.{{ local_domain }};
|
|
||||||
|
|
||||||
|
|
||||||
proxy_set_header X-Plex-Client-Identifier $http_x_plex_client_identifier;
|
|
||||||
proxy_set_header X-Plex-Device $http_x_plex_device;
|
|
||||||
proxy_set_header X-Plex-Device-Name $http_x_plex_device_name;
|
|
||||||
proxy_set_header X-Plex-Platform $http_x_plex_platform;
|
|
||||||
proxy_set_header X-Plex-Platform-Version $http_x_plex_platform_version;
|
|
||||||
proxy_set_header X-Plex-Product $http_x_plex_product;
|
|
||||||
proxy_set_header X-Plex-Token $http_x_plex_token;
|
|
||||||
proxy_set_header X-Plex-Version $http_x_plex_version;
|
|
||||||
proxy_set_header X-Plex-Nocache $http_x_plex_nocache;
|
|
||||||
proxy_set_header X-Plex-Provides $http_x_plex_provides;
|
|
||||||
proxy_set_header X-Plex-Device-Vendor $http_x_plex_device_vendor;
|
|
||||||
proxy_set_header X-Plex-Model $http_x_plex_model;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
@ -1,20 +0,0 @@
|
||||||
server {
|
|
||||||
listen 443 ssl;
|
|
||||||
listen [::]:443 ssl;
|
|
||||||
|
|
||||||
server_name {{ stub_host }}.{{ local_domain }};
|
|
||||||
|
|
||||||
access_log off;
|
|
||||||
allow 192.168.20.12;
|
|
||||||
deny all;
|
|
||||||
|
|
||||||
include /config/nginx/ssl.conf;
|
|
||||||
|
|
||||||
client_max_body_size 0;
|
|
||||||
|
|
||||||
location /stub_status {
|
|
||||||
include /config/nginx/resolver.conf;
|
|
||||||
stub_status on;
|
|
||||||
proxy_pass http://{{ stub_host }}.{{ aya01_host }}.{{ local_domain }};
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
@ -1,34 +0,0 @@
|
||||||
## Version 2023/02/05
|
|
||||||
# make sure that your tautulli container is named tautulli
|
|
||||||
# make sure that your dns has a cname set for tautulli
|
|
||||||
|
|
||||||
server {
|
|
||||||
listen 443 ssl;
|
|
||||||
listen [::]:443 ssl;
|
|
||||||
|
|
||||||
server_name {{ tautulli_host }}.{{ remote_domain }};
|
|
||||||
|
|
||||||
include /config/nginx/ssl.conf;
|
|
||||||
|
|
||||||
client_max_body_size 0;
|
|
||||||
|
|
||||||
location / {
|
|
||||||
include /config/nginx/resolver.conf;
|
|
||||||
proxy_pass http://{{ tautulli_host }}.{{ aya01_host }}.{{ local_domain }};
|
|
||||||
}
|
|
||||||
|
|
||||||
location ~ (/tautulli)?/api {
|
|
||||||
include /config/nginx/resolver.conf;
|
|
||||||
proxy_pass http://{{ tautulli_host }}.{{ aya01_host }}.{{ local_domain }};
|
|
||||||
}
|
|
||||||
|
|
||||||
location ~ (/tautulli)?/newsletter {
|
|
||||||
include /config/nginx/resolver.conf;
|
|
||||||
proxy_pass http://{{ tautulli_host }}.{{ aya01_host }}.{{ local_domain }};
|
|
||||||
}
|
|
||||||
|
|
||||||
location ~ (/tautulli)?/image {
|
|
||||||
include /config/nginx/resolver.conf;
|
|
||||||
proxy_pass http://{{ tautulli_host }}.{{ aya01_host }}.{{ local_domain }};
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
@ -1,17 +0,0 @@
|
||||||
server {
|
|
||||||
listen 443 ssl;
|
|
||||||
listen [::]:443 ssl;
|
|
||||||
|
|
||||||
server_name {{ kuma_host }}.{{ remote_domain }};
|
|
||||||
|
|
||||||
include /config/nginx/ssl.conf;
|
|
||||||
|
|
||||||
client_max_body_size 0;
|
|
||||||
|
|
||||||
location / {
|
|
||||||
include /config/nginx/resolver.conf;
|
|
||||||
proxy_pass http://{{ kuma_host }}.{{ aya01_host }}.{{ local_domain }};
|
|
||||||
proxy_set_header Upgrade $http_upgrade;
|
|
||||||
proxy_set_header Connection "upgrade";
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
@ -1,42 +0,0 @@
|
||||||
version: '3'
|
|
||||||
services:
|
|
||||||
nginx:
|
|
||||||
container_name: "{{nginx.host}}"
|
|
||||||
image: 'jc21/nginx-proxy-manager:latest'
|
|
||||||
restart: unless-stopped
|
|
||||||
networks:
|
|
||||||
net: {}
|
|
||||||
ports:
|
|
||||||
- '{{nginx.endpoints.http}}:80'
|
|
||||||
- '{{nginx.endpoints.https}}:443'
|
|
||||||
- '{{nginx.endpoints.admin}}:81'
|
|
||||||
volumes:
|
|
||||||
- "{{nginx.paths.data}}:/data"
|
|
||||||
- "{{nginx.paths.letsencrypt}}:/etc/letsencrypt"
|
|
||||||
- '/var/run/docker.sock:/var/run/docker.sock'
|
|
||||||
|
|
||||||
{{ gitea.runner.host }}:
|
|
||||||
container_name: {{ gitea.runner.host }}
|
|
||||||
image: gitea/act_runner:nightly
|
|
||||||
restart: unless-stopped
|
|
||||||
depends_on:
|
|
||||||
- nginx
|
|
||||||
networks:
|
|
||||||
- net
|
|
||||||
volumes:
|
|
||||||
- "{{ gitea.runner.config_file }}:/config.yaml"
|
|
||||||
- "/var/run/docker.sock:/var/run/docker.sock"
|
|
||||||
environment:
|
|
||||||
- "GITEA_INSTANCE_URL={{ gitea.url }}"
|
|
||||||
- "GITEA_RUNNER_REGISTRATION_TOKEN={{ gitea.runner.token }}"
|
|
||||||
- "GITEA_RUNNER_NAME: {{ gitea.runner.name }}"
|
|
||||||
- "CONFIG_FILE: /config.yaml"
|
|
||||||
|
|
||||||
networks:
|
|
||||||
net:
|
|
||||||
driver: bridge
|
|
||||||
ipam:
|
|
||||||
# driver: default
|
|
||||||
config:
|
|
||||||
- subnet: 172.16.69.0/24
|
|
||||||
gateway: 172.16.69.1
|
|
||||||
|
|
@ -1,68 +0,0 @@
|
||||||
version: '3'
|
|
||||||
services:
|
|
||||||
nginx:
|
|
||||||
container_name: "{{nginx.host}}"
|
|
||||||
image: 'jc21/nginx-proxy-manager:latest'
|
|
||||||
restart: unless-stopped
|
|
||||||
networks:
|
|
||||||
net: {}
|
|
||||||
ports:
|
|
||||||
- '{{nginx.endpoints.http}}:80'
|
|
||||||
- '{{nginx.endpoints.https}}:443'
|
|
||||||
- '{{nginx.endpoints.admin}}:81'
|
|
||||||
volumes:
|
|
||||||
- "{{nginx.paths.data}}:/data"
|
|
||||||
- "{{nginx.paths.letsencrypt}}:/etc/letsencrypt"
|
|
||||||
- '/var/run/docker.sock:/var/run/docker.sock'
|
|
||||||
|
|
||||||
|
|
||||||
pihole:
|
|
||||||
container_name: pihole
|
|
||||||
image: pihole/pihole:latest
|
|
||||||
restart: unless-stopped
|
|
||||||
depends_on:
|
|
||||||
- nginx
|
|
||||||
networks:
|
|
||||||
net: {}
|
|
||||||
ports:
|
|
||||||
- "53:53/tcp"
|
|
||||||
- "53:53/udp"
|
|
||||||
environment:
|
|
||||||
- "WEBPASSWORD={{ vault.pi.pihole.password }}"
|
|
||||||
- "ServerIP=192.168.20.11"
|
|
||||||
- "INTERFACE=eth0"
|
|
||||||
- "DNS1=1.1.1.1"
|
|
||||||
- "DNS1=1.0.0.1"
|
|
||||||
volumes:
|
|
||||||
- "/etc/localtime:/etc/localtime:ro"
|
|
||||||
- "{{ pihole_config }}:/etc/pihole/"
|
|
||||||
- "{{ pihole_dnsmasq }}:/etc/dnsmasq.d/"
|
|
||||||
dns:
|
|
||||||
- 127.0.0.1
|
|
||||||
- 1.1.1.1
|
|
||||||
cap_add:
|
|
||||||
- NET_ADMIN
|
|
||||||
|
|
||||||
{{ gitea.runner.host }}:
|
|
||||||
container_name: {{ gitea.runner.host }}
|
|
||||||
image: gitea/act_runner:nightly
|
|
||||||
restart: unless-stopped
|
|
||||||
depends_on:
|
|
||||||
- nginx
|
|
||||||
networks:
|
|
||||||
- net
|
|
||||||
volumes:
|
|
||||||
- /var/run/docker.sock:/var/run/docker.sock
|
|
||||||
- {{ gitea.runner.volumes.data }}:/data
|
|
||||||
environment:
|
|
||||||
- "GITEA_INSTANCE_URL={{ gitea.url }}"
|
|
||||||
- "GITEA_RUNNER_REGISTRATION_TOKEN={{ gitea.runner.token }}"
|
|
||||||
|
|
||||||
networks:
|
|
||||||
net:
|
|
||||||
driver: bridge
|
|
||||||
ipam:
|
|
||||||
# driver: default
|
|
||||||
config:
|
|
||||||
- subnet: 172.16.69.0/24
|
|
||||||
gateway: 172.16.69.1
|
|
||||||
|
|
@ -0,0 +1,8 @@
|
||||||
|
go_arch_map:
|
||||||
|
i386: "386"
|
||||||
|
x86_64: "amd64"
|
||||||
|
aarch64: "arm64"
|
||||||
|
armv7l: "armv7"
|
||||||
|
armv6l: "armv6"
|
||||||
|
|
||||||
|
go_arch: "{{ go_arch_map[ansible_architecture] | default(ansible_architecture) }}"
|
||||||
|
|
@ -1,24 +0,0 @@
|
||||||
---
|
|
||||||
- name: Copy powertop service
|
|
||||||
template:
|
|
||||||
src: templates/powertop.service
|
|
||||||
dest: /etc/systemd/system/powertop.service
|
|
||||||
become: true
|
|
||||||
|
|
||||||
- name: Reload all services
|
|
||||||
ansible.builtin.systemd:
|
|
||||||
daemon_reload: yes
|
|
||||||
become: true
|
|
||||||
|
|
||||||
- name: Start and enable the new powertop service
|
|
||||||
ansible.builtin.systemd:
|
|
||||||
state: started
|
|
||||||
enabled: true
|
|
||||||
name: powertop
|
|
||||||
become: true
|
|
||||||
|
|
||||||
- name: Copy hdparm.conf
|
|
||||||
template:
|
|
||||||
src: templates/hdparm.conf
|
|
||||||
dest: /etc/hdparm.conf
|
|
||||||
become: true
|
|
||||||
|
|
@ -1,15 +0,0 @@
|
||||||
---
|
|
||||||
- name: Update cache
|
|
||||||
apt:
|
|
||||||
update_cache: true
|
|
||||||
become: true
|
|
||||||
|
|
||||||
- name: Install packages
|
|
||||||
apt:
|
|
||||||
name: "{{ item }}"
|
|
||||||
state: present
|
|
||||||
loop:
|
|
||||||
- powertop
|
|
||||||
- hdparm
|
|
||||||
become: true
|
|
||||||
|
|
||||||
|
|
@ -1,3 +0,0 @@
|
||||||
---
|
|
||||||
- include_tasks: install.yml
|
|
||||||
- include_tasks: configure.yml
|
|
||||||
|
|
@ -1,18 +0,0 @@
|
||||||
quiet
|
|
||||||
/dev/sda {
|
|
||||||
apm = 128
|
|
||||||
spindown_time = 240
|
|
||||||
}
|
|
||||||
|
|
||||||
/dev/sdb {
|
|
||||||
apm = 128
|
|
||||||
spindown_time = 240
|
|
||||||
}
|
|
||||||
/dev/sdc {
|
|
||||||
apm = 128
|
|
||||||
spindown_time = 240
|
|
||||||
}
|
|
||||||
/dev/sdd {
|
|
||||||
apm = 128
|
|
||||||
spindown_time = 240
|
|
||||||
}
|
|
||||||
|
|
@ -1,11 +0,0 @@
|
||||||
[Unit]
|
|
||||||
Description=PowerTOP auto tune
|
|
||||||
|
|
||||||
[Service]
|
|
||||||
Type=oneshot
|
|
||||||
Environment="TERM=dumb"
|
|
||||||
RemainAfterExit=true
|
|
||||||
ExecStart=/usr/sbin/powertop --auto-tune
|
|
||||||
|
|
||||||
[Install]
|
|
||||||
WantedBy=multi-user.target
|
|
||||||
|
|
@ -1,15 +0,0 @@
|
||||||
---
|
|
||||||
- name: Copy "{{ samba.config }}"
|
|
||||||
template:
|
|
||||||
src: "{{ samba.config }}"
|
|
||||||
dest: /etc/samba/smb.conf
|
|
||||||
become: true
|
|
||||||
register: smbconf
|
|
||||||
|
|
||||||
- name: Restart nmbd.service
|
|
||||||
systemd:
|
|
||||||
name: nmbd
|
|
||||||
state: restarted
|
|
||||||
enabled: yes
|
|
||||||
become: true
|
|
||||||
when: smbconf.changed
|
|
||||||
|
|
@ -1,46 +0,0 @@
|
||||||
---
|
|
||||||
- name: Update and upgrade packages
|
|
||||||
apt:
|
|
||||||
update_cache: true
|
|
||||||
upgrade: true
|
|
||||||
autoremove: true
|
|
||||||
become: true
|
|
||||||
|
|
||||||
- name: Install Samba dependencies
|
|
||||||
apt:
|
|
||||||
name: "{{ samba.dependencies }}"
|
|
||||||
state: present
|
|
||||||
become: true
|
|
||||||
|
|
||||||
- name: Add group "{{ samba.group }}"
|
|
||||||
group:
|
|
||||||
name: "{{ samba.group }}"
|
|
||||||
state: present
|
|
||||||
become: true
|
|
||||||
|
|
||||||
- name: Change permission on share
|
|
||||||
file:
|
|
||||||
path: "{{ item }}"
|
|
||||||
group: "{{ samba.group }}"
|
|
||||||
mode: "2770"
|
|
||||||
become: true
|
|
||||||
loop:
|
|
||||||
- "{{ samba.shares.media.path }}"
|
|
||||||
- "{{ samba.shares.paperless.path }}"
|
|
||||||
|
|
||||||
- name: Add user "{{ samba.user }}"
|
|
||||||
user:
|
|
||||||
name: "{{ samba.user }}"
|
|
||||||
shell: "/sbin/nologin"
|
|
||||||
groups: "{{ samba.group }}"
|
|
||||||
append: true
|
|
||||||
become: true
|
|
||||||
register: new_user
|
|
||||||
|
|
||||||
- name: Add password to "{{ samba.user }}"
|
|
||||||
shell:
|
|
||||||
cmd: smbpasswd -a "{{ samba.user }}"
|
|
||||||
stdin: "{{ host.samba.password }}\n{{ host.samba.password }}"
|
|
||||||
become: true
|
|
||||||
when: new_user.changed
|
|
||||||
|
|
||||||
|
|
@ -1,3 +0,0 @@
|
||||||
---
|
|
||||||
- include_tasks: install.yaml
|
|
||||||
- include_tasks: config.yaml
|
|
||||||
|
|
@ -1,14 +0,0 @@
|
||||||
[{{ samba.shares.media.name }}]
|
|
||||||
comment = {{ samba.shares.media.name }}
|
|
||||||
path = "{{ samba.shares.media.path }}"
|
|
||||||
writable = no
|
|
||||||
guest ok = no
|
|
||||||
valid users = "@{{samba.group}}"
|
|
||||||
|
|
||||||
[{{ samba.shares.paperless.name }}]
|
|
||||||
comment = {{ samba.shares.paperless.name }}
|
|
||||||
path = "{{ samba.shares.paperless.path }}"
|
|
||||||
writable = yes
|
|
||||||
guest ok = no
|
|
||||||
valid users = "@{{samba.group}}"
|
|
||||||
create mask = 755
|
|
||||||
|
|
@ -1,8 +0,0 @@
|
||||||
---
|
|
||||||
- name: Upgrade shelly
|
|
||||||
uri:
|
|
||||||
url: {{ip}}/ota?url=http://archive.shelly-tools.de/version/v1.9.4/SHBDUO-1.zip
|
|
||||||
|
|
||||||
- name: Connect shelly to wifi
|
|
||||||
uri:
|
|
||||||
url: {{ip}}/settings/sta?enabled=1&ssid={{SSID}}&key={{password}}&ipv4_method=dhcp
|
|
||||||
|
|
@ -1,2 +0,0 @@
|
||||||
---
|
|
||||||
- include_tasks: init.yaml
|
|
||||||
|
|
@ -1,18 +0,0 @@
|
||||||
---
|
|
||||||
- name: Determine latest GitHub release (local)
|
|
||||||
delegate_to: localhost
|
|
||||||
uri:
|
|
||||||
url: "https://api.github.com/repos/prometheus-community/smartctl_exporter/releases/{{ smart_exporter.version }}"
|
|
||||||
body_format: json
|
|
||||||
register: _github_release
|
|
||||||
until: _github_release.status == 200
|
|
||||||
retries: 3
|
|
||||||
|
|
||||||
- name: Set smart_exporter_version
|
|
||||||
set_fact:
|
|
||||||
smart_exporter_version: "{{ _github_release.json.tag_name
|
|
||||||
| regex_replace('^v?([0-9\\.]+)$', '\\1') }}"
|
|
||||||
|
|
||||||
- name: Set smart_exporter_download_url
|
|
||||||
set_fact:
|
|
||||||
smart_exporter_download_url: "https://github.com/prometheus-community/smartctl_exporter/releases/download/v{{ smart_exporter_version }}/smartctl_exporter-{{ smart_exporter_version }}.linux-{{ go_arch }}.tar.gz"
|
|
||||||
|
|
@ -1,30 +0,0 @@
|
||||||
---
|
|
||||||
- name: Download/Extract "{{ smart_exporter_download_url }}"
|
|
||||||
unarchive:
|
|
||||||
src: "{{ smart_exporter_download_url }}"
|
|
||||||
dest: /tmp/
|
|
||||||
remote_src: true
|
|
||||||
mode: 755
|
|
||||||
|
|
||||||
- name: Move smart_exporter into path
|
|
||||||
copy:
|
|
||||||
src: "/tmp/smartctl_exporter-{{ smart_exporter_version }}.linux-{{ go_arch }}/smartctl_exporter"
|
|
||||||
dest: "{{ smart_exporter.bin_path }}"
|
|
||||||
mode: 755
|
|
||||||
remote_src: true
|
|
||||||
become: true
|
|
||||||
|
|
||||||
- name: Create smart_exporter user.
|
|
||||||
user:
|
|
||||||
name: smart_exporter
|
|
||||||
shell: /sbin/nologin
|
|
||||||
state: present
|
|
||||||
become: true
|
|
||||||
|
|
||||||
- name: Copy the smart_exporter systemd unit file.
|
|
||||||
template:
|
|
||||||
src: smart_exporter.service.j2
|
|
||||||
dest: /etc/systemd/system/smart_exporter.service
|
|
||||||
mode: 0644
|
|
||||||
register: smart_exporter_service
|
|
||||||
become: true
|
|
||||||
|
|
@ -1,4 +0,0 @@
|
||||||
---
|
|
||||||
- include_tasks: get_version.yml
|
|
||||||
- include_tasks: install.yml
|
|
||||||
- include_tasks: systemd.yml
|
|
||||||
|
|
@ -1,9 +0,0 @@
|
||||||
---
|
|
||||||
- name: Ensure smart_exporter is running and enabled at boot.
|
|
||||||
service:
|
|
||||||
daemon_reload: true
|
|
||||||
name: smart_exporter
|
|
||||||
state: restarted
|
|
||||||
enabled: true
|
|
||||||
when: smart_exporter_service is changed
|
|
||||||
become: true
|
|
||||||
|
|
@ -1,19 +0,0 @@
|
||||||
[Unit]
|
|
||||||
Description=smartctl exporter service
|
|
||||||
After=network-online.target
|
|
||||||
|
|
||||||
[Service]
|
|
||||||
Type=simple
|
|
||||||
PIDFile=/run/smartctl_exporter.pid
|
|
||||||
ExecStart={{ smart_exporter.bin_path }}
|
|
||||||
User=root
|
|
||||||
Group=root
|
|
||||||
SyslogIdentifier=smartctl_exporter
|
|
||||||
Restart=on-failure
|
|
||||||
RemainAfterExit=no
|
|
||||||
RestartSec=100ms
|
|
||||||
StandardOutput=journal
|
|
||||||
StandardError=journal
|
|
||||||
|
|
||||||
[Install]
|
|
||||||
WantedBy=multi-user.target
|
|
||||||
|
|
@ -1,15 +0,0 @@
|
||||||
- name: Create snmp-exporter container
|
|
||||||
docker_container:
|
|
||||||
image: prom/snmp-exporter
|
|
||||||
name: "{{ snmp_exporter_host }}"
|
|
||||||
restart_policy: unless-stopped
|
|
||||||
networks:
|
|
||||||
- name: compose_net
|
|
||||||
env:
|
|
||||||
PUID: "{{ puid }}"
|
|
||||||
PGID: "{{ pgid}}"
|
|
||||||
TZ: "{{ timezone }}"
|
|
||||||
volumes:
|
|
||||||
- "{{ snmp_exporter_config }}:/etc/snmp_exporter/"
|
|
||||||
ports:
|
|
||||||
- "{{ snmp_exporter_port }}:9116"
|
|
||||||
|
|
@ -1,3 +0,0 @@
|
||||||
---
|
|
||||||
- include_tasks: setup.yml
|
|
||||||
- include_tasks: docker.yml
|
|
||||||
|
|
@ -1,20 +0,0 @@
|
||||||
---
|
|
||||||
- name: Create snmp_exporter directories
|
|
||||||
file:
|
|
||||||
path: "{{ item }}"
|
|
||||||
owner: "{{ puid }}"
|
|
||||||
group: "{{ pgid }}"
|
|
||||||
mode: '755'
|
|
||||||
state: directory
|
|
||||||
loop:
|
|
||||||
- "{{ snmp_exporter_config }}"
|
|
||||||
become: true
|
|
||||||
|
|
||||||
- name: Copy snmp_exporter config
|
|
||||||
template:
|
|
||||||
owner: "{{ puid }}"
|
|
||||||
group: "{{ pgid }}"
|
|
||||||
src: "snmp.yml.j2"
|
|
||||||
dest: "{{ snmp_exporter_config }}/snmp.yml"
|
|
||||||
mode: '644'
|
|
||||||
become: true
|
|
||||||
File diff suppressed because it is too large
Load Diff
|
|
@ -1 +0,0 @@
|
||||||
{ip}/settings/sta?enabled=1&ssid={SSID}&key={password}&ipv4_method=dhcp
|
|
||||||
Loading…
Reference in New Issue