2020-08-19 12:29:49 +02:00
|
|
|
---
|
2021-05-09 18:23:35 +02:00
|
|
|
# Bind Mounts - fileserver
|
2021-03-25 08:15:48 +01:00
|
|
|
# pct set 109 -mp0 /hdd_data_raidz/videos,mp=/shares_videos
|
|
|
|
# pct set 109 -mp1 /hdd_data_raidz/data_crypt,mp=/shares
|
2021-05-09 18:23:35 +02:00
|
|
|
# pct set 109 -mp2 /hdd_data_raidz/vm_backup,mp=/shares_pve_backup
|
2021-03-25 08:15:48 +01:00
|
|
|
# pct set 109 -mp3 /hdd_data_raidz/papa_backup,mp=/shares_papa_backup
|
2021-05-09 18:23:35 +02:00
|
|
|
# pct set 109 -mp4 /hdd_data_raidz/music,mp=/shares_music
|
2021-06-02 19:23:41 +02:00
|
|
|
# pct set 109 -mp5 /hdd_data_raidz/tmp,mp=/shares_tmp
|
2021-06-14 08:34:02 +02:00
|
|
|
# pct set 109 -mp6 /hdd_data_raidz/archiv,mp=/shares_archiv
|
2021-05-09 18:23:35 +02:00
|
|
|
# Bind Mounts - fileserver-test
|
|
|
|
# pct set 158 -mp0 /rpool/vm/dir/vm-158/videos,mp=/shares_videos
|
|
|
|
# pct set 158 -mp1 /rpool/vm/dir/vm-158/data,mp=/shares
|
|
|
|
# pct set 158 -mp2 /rpool/vm/dir/vm-158/proxmox,mp=/shares_pve_backup
|
|
|
|
# pct set 158 -mp3 /rpool/vm/dir/vm-158/papa,mp=/shares_papa_backup
|
|
|
|
# pct set 158 -mp4 /rpool/vm/dir/vm-158/music,mp=/shares_music
|
2021-06-02 19:23:41 +02:00
|
|
|
# pct set 158 -mp5 /rpool/vm/dir/vm-158/tmp,mp=/shares_tmp
|
2021-06-14 08:34:02 +02:00
|
|
|
# pct set 158 -mp6 /rpool/vm/dir/vm-158/archiv,mp=/shares_archiv
|
|
|
|
|
2020-08-19 12:29:49 +02:00
|
|
|
### mgrote.smb_fileserver
|
2021-02-20 15:58:23 +01:00
|
|
|
smb_users:
|
2021-06-17 21:54:01 +02:00
|
|
|
- name: 'annemariedroessler2'
|
2020-12-31 01:36:22 +01:00
|
|
|
password: "{{ lookup('keepass', 'fileserver_smb_user_amd', 'password') }}"
|
|
|
|
- name: 'restic'
|
|
|
|
password: "{{ lookup('keepass', 'fileserver_smb_user_restic', 'password') }}"
|
|
|
|
- name: 'win10'
|
|
|
|
password: "{{ lookup('keepass', 'fileserver_smb_user_win10', 'password') }}"
|
|
|
|
- name: 'kodi'
|
|
|
|
password: "{{ lookup('keepass', 'fileserver_smb_user_kodi', 'password') }}"
|
|
|
|
- name: 'michaelgrote'
|
|
|
|
password: "{{ lookup('keepass', 'fileserver_smb_user_mg', 'password') }}"
|
|
|
|
- name: 'navidrome'
|
|
|
|
password: "{{ lookup('keepass', 'fileserver_smb_user_navidrome', 'password') }}"
|
|
|
|
- name: 'docker'
|
|
|
|
password: "{{ lookup('keepass', 'fileserver_smb_user_docker', 'password') }}"
|
2021-01-04 09:51:32 +01:00
|
|
|
- name: 'pve'
|
2021-02-13 20:00:26 +01:00
|
|
|
password: "{{ lookup('keepass', 'fileserver_smb_user_pve', 'password') }}"
|
2021-01-08 20:49:13 +01:00
|
|
|
- name: 'brother_ads2700w'
|
|
|
|
password: "{{ lookup('keepass', 'fileserver_smb_user_brother_ads2700w', 'password') }}"
|
2021-04-18 10:22:47 +02:00
|
|
|
- name: 'photoprism'
|
|
|
|
password: "{{ lookup('keepass', 'fileserver_smb_user_photoprism', 'password') }}"
|
2021-06-14 08:34:02 +02:00
|
|
|
- name: 'bdfr'
|
|
|
|
password: "{{ lookup('keepass', 'fileserver_smb_user_bdfr', 'password') }}"
|
|
|
|
|
2021-02-20 15:58:23 +01:00
|
|
|
smb_shares:
|
|
|
|
- name: 'videos'
|
|
|
|
path: '/shares_videos'
|
2021-04-13 20:59:59 +02:00
|
|
|
users_ro: 'kodi'
|
2021-06-17 21:54:01 +02:00
|
|
|
users_rw: 'annemariedroessler2 michaelgrote win10'
|
2021-02-20 15:58:23 +01:00
|
|
|
- name: 'scans'
|
|
|
|
path: '/shares/scans'
|
2021-06-17 21:54:01 +02:00
|
|
|
users_ro: 'annemariedroessler2 michaelgrote'
|
2021-03-24 18:35:20 +01:00
|
|
|
users_rw: 'brother_ads2700w'
|
|
|
|
- name: 'papa_backup'
|
|
|
|
path: '/shares_papa_backup'
|
2021-02-20 15:58:23 +01:00
|
|
|
users_ro: ''
|
|
|
|
users_rw: 'win10 michaelgrote'
|
|
|
|
- name: 'amd'
|
|
|
|
path: '/shares/amd'
|
2021-03-30 07:42:29 +02:00
|
|
|
users_ro: 'navidrome michaelgrote'
|
2021-06-17 21:54:01 +02:00
|
|
|
users_rw: 'annemariedroessler2 win10'
|
2021-02-20 15:58:23 +01:00
|
|
|
- name: 'backup'
|
|
|
|
path: '/shares/Backup'
|
|
|
|
users_ro: ''
|
2021-06-17 21:54:01 +02:00
|
|
|
users_rw: 'annemariedroessler2 restic win10 michaelgrote'
|
2021-06-14 08:34:02 +02:00
|
|
|
- name: 'archiv'
|
|
|
|
path: '/shares_archiv'
|
|
|
|
users_ro: ''
|
2021-06-17 12:38:25 +02:00
|
|
|
users_rw: 'bdfr michaelgrote win10'
|
2021-02-20 15:58:23 +01:00
|
|
|
- name: 'hm'
|
|
|
|
path: '/shares/hm'
|
|
|
|
users_ro: 'win10'
|
|
|
|
users_rw: 'michaelgrote'
|
|
|
|
- name: 'mg'
|
|
|
|
path: '/shares/mg'
|
|
|
|
users_ro: ''
|
|
|
|
users_rw: 'win10 michaelgrote'
|
|
|
|
- name: 'musik'
|
2021-05-09 10:11:12 +02:00
|
|
|
path: '/shares_music'
|
2021-06-17 21:54:01 +02:00
|
|
|
users_ro: 'navidrome kodi annemariedroessler2 '
|
2021-02-20 15:58:23 +01:00
|
|
|
users_rw: 'win10 michaelgrote'
|
|
|
|
- name: 'tmp'
|
2021-06-02 19:23:41 +02:00
|
|
|
path: '/shares_tmp'
|
2021-02-20 15:58:23 +01:00
|
|
|
users_ro: 'win10'
|
2021-06-17 21:54:01 +02:00
|
|
|
users_rw: 'kodi annemariedroessler2 restic win10 michaelgrote'
|
2021-02-20 15:58:23 +01:00
|
|
|
- name: 'bilder'
|
|
|
|
path: '/shares/bilder'
|
2021-04-18 10:22:47 +02:00
|
|
|
users_ro: 'photoprism'
|
2021-06-17 21:54:01 +02:00
|
|
|
users_rw: 'annemariedroessler2 michaelgrote win10'
|
2021-02-20 15:58:23 +01:00
|
|
|
- name: 'proxmox'
|
2021-03-19 23:07:23 +01:00
|
|
|
path: '/shares_pve_backup'
|
2021-03-30 07:42:29 +02:00
|
|
|
users_ro: 'michaelgrote'
|
|
|
|
users_rw: 'pve win10'
|
2020-08-19 12:29:49 +02:00
|
|
|
smb_workgroup: WORKGROUP
|
2021-02-13 20:00:26 +01:00
|
|
|
smb_min_protocol: "SMB2"
|
|
|
|
smb_client_min_protocol: "SMB2"
|
|
|
|
smb_client_max_protocol: "SMB3_11"
|
|
|
|
|
2020-08-19 12:29:49 +02:00
|
|
|
### oefenweb.ufw
|
|
|
|
ufw_rules:
|
|
|
|
- rule: allow
|
|
|
|
to_port: 22
|
|
|
|
protocol: tcp
|
|
|
|
comment: 'ssh'
|
2020-12-31 14:39:17 +01:00
|
|
|
from_ip: 192.168.2.0/24
|
2020-08-19 12:29:49 +02:00
|
|
|
- rule: allow
|
|
|
|
to_port: 445
|
|
|
|
comment: 'smb'
|
2020-12-31 14:39:17 +01:00
|
|
|
from_ip: 192.168.2.0/24
|
2020-08-19 12:29:49 +02:00
|
|
|
- rule: allow
|
|
|
|
to_port: 139
|
|
|
|
comment: 'smb'
|
2020-12-31 14:39:17 +01:00
|
|
|
from_ip: 192.168.2.0/24
|
2021-06-16 21:57:28 +02:00
|
|
|
- rule: allow
|
|
|
|
to_port: 4949
|
|
|
|
protocol: tcp
|
|
|
|
comment: 'munin'
|
|
|
|
from_ip: 192.168.2.144/24
|
|
|
|
|
|
|
|
### geerlingguy.munin-node
|
|
|
|
munin_node_plugins:
|
|
|
|
- name: chrony
|
|
|
|
- name: systemd_status
|
|
|
|
- name: samba_locked
|
|
|
|
- name: samba_users
|
|
|
|
munin_node_install_plugins: # in eigenes Repo gesichert
|
|
|
|
- remote_src: https://git.mgrote.net/mg/munin-plugins/raw/branch/master/chrony
|
|
|
|
- remote_src: https://git.mgrote.net/mg/munin-plugins/raw/branch/master/systemd_status
|
|
|
|
- remote_src: https://git.mgrote.net/mg/munin-plugins/raw/branch/master/samba_locked
|
|
|
|
- remote_src: https://git.mgrote.net/mg/munin-plugins/raw/branch/master/samba_users
|
2021-06-21 20:11:41 +02:00
|
|
|
munin_node_remove_plugins:
|
|
|
|
- name: meminfo # zu hohe last
|
|
|
|
- name: hddtemp2 # ersetzt durch hddtemp_smartctl
|
|
|
|
- name: squid_cache
|
|
|
|
- name: squid_objectsize
|
|
|
|
- name: squid_requests
|
|
|
|
- name: squid_traffic
|
|
|
|
- name: nfsd
|
|
|
|
- name: samba
|
|
|
|
- name: nfsd4
|
|
|
|
- name: ntp # verursacht zu viele dns ptr request
|
|
|
|
- name: cronjobs
|
|
|
|
- name: hddtempd # ersetzt durch hddtemp_smartctl
|
|
|
|
- name: ipmi_power # für pve2, leeres diagramm
|
|
|
|
- name: fail2ban
|
|
|
|
- name: fail2ban_
|
|
|
|
- name: apcupsd_pct
|
|
|
|
- name: kvm_io
|
|
|
|
- name: kvm_cpu
|
|
|
|
- name: docker_mem
|
|
|
|
- name: cpuspeed
|
|
|
|
- name: acpi
|
|
|
|
- name: lvm_
|