2020-08-19 12:29:49 +02:00
---
2023-10-25 22:26:17 +02:00
### wird in vielen Rollen verwendet
ssh_public_key_mg : ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKL8opSQ0rWVw9uCfbuiqmXq188OP4xh66MBTO3zV5jo heimserver_mg_v3
2023-11-03 11:59:01 +01:00
my_mail : michael.grote@posteo.de
2023-10-25 22:26:17 +02:00
file_header : |
#----------------------------------------------------------------#
# This file is managed with ansible! #
#----------------------------------------------------------------#
2023-10-31 11:37:50 +01:00
2023-11-24 14:11:59 +01:00
### mgrote_netplan
netplan_configure : true
2023-11-29 21:15:50 +01:00
### mgrote_restic
2023-10-25 22:26:17 +02:00
restic_user : root
restic_group : restic
restic_conf_dir : /etc/restic
restic_exclude : |
._*
desktop.ini
.Trash-*
**/**cache***/**
**/**Cache***/**
**/**AppData***/**
# https://github.com/restic/restic/issues/1005
# https://forum.restic.net/t/exclude-syntax-confusion/1531/12
restic_mount_timeout : "10 min"
restic_failure_delay : "30 s"
restic_schedule : "0/6:00" # alle 6 Stunden
restic_folders_to_backup : "/" # --one-file-system ist gesetzt, also werden weitere Dateisysteme nicht eingeschlossen, es sei denn sie werden hier explizit angegeben; https://restic.readthedocs.io/en/latest/040_backup.html#excluding-files
2023-11-25 19:08:24 +01:00
restic_repository : "//fileserver3.mgrote.net/restic"
2023-10-25 22:26:17 +02:00
restic_repository_password : "{{ lookup('keepass', 'restic_repository_password', 'password') }}"
restic_mount_user : restic
restic_mount_password : "{{ lookup('keepass', 'fileserver_smb_user_restic', 'password') }}"
2023-10-31 11:37:50 +01:00
restic_fail_mail : "{{ my_mail }}"
2023-11-29 21:15:50 +01:00
### mgrote_user
2023-10-25 22:26:17 +02:00
users :
- username : mg
password : "{{ lookup('keepass', 'mg_linux_password_hash', 'password') }}"
update_password : always
groups : ssh, sudo
state : present
public_ssh_key : "{{ ssh_public_key_mg }}"
allow_sudo : true
allow_passwordless_sudo : true
- username : ansible-user
password : "{{ lookup('keepass', 'ansible_user_linux_password_hash', 'password') }}"
update_password : always
groups : ssh, sudo
state : present
public_ssh_key : ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJcBwOjanQV6sFWaTetqpl20SVe3aRzGjKbsp7hKkDCE mg@irantu
allow_sudo : true
allow_passwordless_sudo : true
2023-07-05 11:47:57 +02:00
2023-10-25 22:26:17 +02:00
### jnv.unattended_upgrades
2023-10-31 11:37:50 +01:00
unattended_mail : "{{ my_mail }}"
2023-10-25 22:26:17 +02:00
unattended_mail_only_on_error : true
unattended_syslog_enable : true
unattended_origins_patterns :
- 'origin=Ubuntu,archive=${distro_codename}-security'
- 'o=Ubuntu,a=${distro_codename}-updates'
2023-10-31 11:37:50 +01:00
2023-11-29 21:15:50 +01:00
### mgrote_ntp_chrony_client
2023-10-25 22:26:17 +02:00
ntp_chrony_timezone : "Europe/Berlin" # Zeitzone in der sich der Computer befindet
ntp_chrony_driftfile_directory : "/var/lib/chrony" # Ordner für das driftfile
ntp_chrony_servers : # welche Server sollen befragt werden
2023-11-01 12:20:29 +01:00
- address : 192.168 .2 .1
2023-10-25 22:26:17 +02:00
options : iburst #optionaler parameter
ntp_chrony_user : _chrony # Nutzer + Gruppe für den Dienst
ntp_chrony_group : _chrony # Nutzer + Gruppe für den Dienst
ntp_chrony_logging : false
2023-07-05 15:30:24 +02:00
2023-11-29 21:15:50 +01:00
### mgrote_postfix
2023-11-25 19:08:24 +01:00
postfix_smtp_server : docker10.mgrote.net
2023-10-31 11:37:50 +01:00
postfix_smtp_server_port : 1025
2023-11-29 21:15:50 +01:00
### mgrote_tmux
2023-10-25 22:26:17 +02:00
tmux_conf_destination : "/home/mg/.tmux.conf"
tmux_bashrc_destination : "/home/mg/.bashrc"
tmux_standardsession_name : "default"
2023-10-31 11:37:50 +01:00
2023-11-29 21:15:50 +01:00
### mgrote_fail2ban
2023-10-25 22:26:17 +02:00
f2b_bantime : 300
f2b_findtime : 300
f2b_maxretry : 5
2023-10-31 11:37:50 +01:00
f2b_destemail : "{{ my_mail }}"
f2b_sender : info@mgrote.net
2023-10-25 22:26:17 +02:00
### oefenweb.ufw
ufw_rules :
- rule : allow
to_port : 22
protocol : tcp
comment : 'ssh'
from_ip : 0.0 .0 .0 /0
ufw_default_incoming_policy : deny
ufw_default_outgoing_policy : allow
2023-10-31 11:37:50 +01:00
2023-11-29 21:15:50 +01:00
### mgrote_apt_manage_packages
2023-10-25 22:26:17 +02:00
apt_packages_common :
- locales
- python3
- build-essential
- htop
- git
- dnsutils
- mc
- cifs-utils
- haveged #https://www.linux-magazin.de/ausgaben/2011/09/einfuehrung2/
- ca-certificates
- netdiscover
- tree
- curl
- whois
- logrotate
- ncdu
- net-tools
- apt-transport-https
- neofetch
- moreutils
- acl
- vim
- rsync
- at
- ripgrep
- iotop
- pwgen
- keychain
2023-11-03 11:59:01 +01:00
- fwupd
2023-10-25 22:26:17 +02:00
apt_packages_physical :
- s-tui
- smartmontools
- lm-sensors
- ethtool
apt_packages_vm :
- qemu-guest-agent
- open-vm-tools
apt_packages_absent :
- nano
- snapd
- ubuntu-advantage-tools
apt_packages_internet :
2023-11-25 19:08:24 +01:00
- http://docker10.mgrote.net:3344/bash-helper-scripts-mgrote-latest.deb
2020-11-05 17:16:30 +01:00
2023-11-29 21:15:50 +01:00
### mgrote_zfs_sanoid
2023-10-25 22:26:17 +02:00
sanoid_templates :
- name : '31tage'
keep_hourly : '24' # Aufheben (Stunde)
keep_daily : '31' # Aufheben (Tage)
keep_monthly : '3' # Aufheben (Monate)
keep_yearly : '0' # Aufheben (Jahre)
frequently : '16' # Aufheben (Minuten)
frequent_period : '15' # Intervall (alle 5 Minuten)
autosnap : 'yes' # Automatisches erstellen von Snapshots
autoprune : 'yes'
- name : '14tage'
keep_hourly : '24'
keep_daily : '14'
keep_monthly : '0'
keep_yearly : '0'
frequently : '16'
frequent_period : '15'
autosnap : 'yes'
autoprune : 'yes'
- name : '3tage'
keep_hourly : '24'
keep_daily : '7'
keep_monthly : '0'
keep_yearly : '0'
frequently : '16'
frequent_period : '15'
autosnap : 'yes'
autoprune : 'yes'
- name : '3monate'
keep_hourly : '24'
keep_daily : '7'
keep_monthly : '3'
keep_yearly : '0'
frequently : '16'
frequent_period : '15'
autosnap : 'yes'
autoprune : 'yes'
- name : 'pve3tage'
keep_hourly : '72'
keep_daily : '5'
keep_monthly : '0'
keep_yearly : '0'
frequently : '16'
frequent_period : '15'
autosnap : 'yes'
autoprune : 'yes'
2021-02-07 12:46:03 +01:00
2023-11-29 21:15:50 +01:00
### mgrote_zfs_sanoid
2023-11-25 19:08:24 +01:00
sanoid_deb_url : http://docker10.mgrote.net:3344/sanoid_3.0.4.deb
2021-02-07 12:46:03 +01:00
2023-10-25 22:26:17 +02:00
# Ansible Variablen
### User
ansible_user : "ansible-user"
### SSH
ansible_ssh_common_args : "'-o StrictHostKeyChecking=no'"
### python3
# https://docs.ansible.com/ansible/latest/reference_appendices/python_3_support.html
ansible_python_interpreter : "/usr/bin/python3"
2020-08-19 12:29:49 +02:00
2023-10-25 22:26:17 +02:00
# Ansible Plugin Variablen
### Keepass
# https://github.com/viczem/ansible-keepass
keepass_dbx : "./keepass_db.kdbx"
keepass_psw : !vault |
$ANSIBLE_VAULT;1.1;AES256
62383737623066396239383336646164616537646630653964313532383130343533346561633039
3437306134656535353438666165376332633064383135650a636537626662656130376537633164
61613132326536666466636632363866393066656236303766333338356337396338376266346631
6364336331623539300a313562303161373631613734313938346666376239613333333363376236
38363035376662353135333332363431343833656666643036326234656166643531