2020-08-19 12:29:49 +02:00
---
2022-05-17 12:05:45 +02:00
### mrlesmithjr.ansible-manage-lvm
lvm_groups :
- vgname : vg_docker
disks :
2022-08-08 21:26:56 +02:00
- /dev/disk/by-id/scsi-0QEMU_QEMU_HARDDISK_drive-scsi1
2022-05-17 12:05:45 +02:00
create : true
lvnames :
- lvname : lv_docker
2022-05-22 21:12:36 +02:00
size : +100%FREE
2022-05-17 12:05:45 +02:00
create : true
filesystem : xfs
mount : true
mntp : /var/lib/docker
manage_lvm : true
2022-05-22 21:12:36 +02:00
pvresize_to_max : true
### mgrote.restic
restic_folders_to_backup : "/ /var/lib/docker" # --one-file-system ist gesetzt, also werden weitere Dateisysteme nicht eingeschlossen, es sei denn sie werden hier explizit angegeben; https://restic.readthedocs.io/en/latest/040_backup.html#excluding-files
2021-12-28 11:25:29 +01:00
### mgrote.user
users :
- username : mg
password : "{{ lookup('keepass', 'mg_linux_password_hash', 'password') }}"
update_password : on_create
groups : ssh, sudo, docker
state : present
public_ssh_key : "{{ ssh_public_key_mg }}"
allow_sudo : true
allow_passwordless_sudo : true
2022-03-06 14:10:30 +01:00
- username : docker-user
password : "{{ lookup('keepass', 'docker-user_linux_password_hash', 'password') }}"
update_password : on_create
groups : ssh, sudo, docker
state : present
allow_sudo : true
allow_passwordless_sudo : true
uid : "5000"
2021-12-28 11:25:29 +01:00
- username : ansible-user
password : "{{ lookup('keepass', 'ansible_user_linux_password_hash', 'password') }}"
update_password : on_create
groups : ssh, sudo
state : present
2023-07-03 22:42:46 +02:00
public_ssh_key : ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJcBwOjanQV6sFWaTetqpl20SVe3aRzGjKbsp7hKkDCE mg@irantu
2021-12-28 11:25:29 +01:00
allow_sudo : true
allow_passwordless_sudo : true
2020-11-04 11:49:02 +01:00
### geerlingguy.docker
docker_users :
- mg
2022-03-06 14:10:30 +01:00
- docker-user
2021-09-13 19:26:31 +02:00
### geerlingguy.pip
pip_package : python3-pip
pip_install_packages :
- name : docker # für munin-plugin docker_
### mgrote.docker-compose-deploy
2022-03-06 14:10:30 +01:00
docker_compose_base_dir : /home/docker-user
2022-06-12 22:24:12 +02:00
### mgrote.munin-node
2022-03-06 14:10:30 +01:00
munin_node_bind_host : "0.0.0.0"
munin_node_bind_port : "4949"
munin_node_allowed_cidrs : [ 192.168 .2 .0 /24]
munin_node_plugins :
- name : systemd_status
src : https://git.mgrote.net/mg/mirror-munin-contrib/raw/branch/master/plugins/systemd/systemd_status
2022-06-12 22:24:12 +02:00
- name : systemd_mem
src : https://git.mgrote.net/mg/mirror-munin-contrib/raw/branch/master/plugins/systemd/systemd_mem
config : |
[ systemd_mem]
env.all_services true
2022-03-06 14:10:30 +01:00
- name : lvm_
src : https://git.mgrote.net/mg/mirror-munin-contrib/raw/branch/master/plugins/disk/lvm_
config : |
[ lvm_*]
user root
- name : fail2ban
src : https://git.mgrote.net/mg/munin-plugins/raw/branch/master/extern/fail2ban
config : |
[ fail2ban]
env.client /usr/bin/fail2ban-client
env.config_dir /etc/fail2ban
user root
- name : docker_containers
src : https://git.mgrote.net/mg/mirror-munin-contrib/raw/branch/master/plugins/docker/docker_
config : |
[ docker_*]
user root
env.DOCKER_HOST unix://run/docker.sock
- name : docker_cpu
src : https://git.mgrote.net/mg/mirror-munin-contrib/raw/branch/master/plugins/docker/docker_
- name : docker_memory
src : https://git.mgrote.net/mg/mirror-munin-contrib/raw/branch/master/plugins/docker/docker_
- name : docker_network
src : https://git.mgrote.net/mg/mirror-munin-contrib/raw/branch/master/plugins/docker/docker_
- name : docker_volumes
src : https://git.mgrote.net/mg/mirror-munin-contrib/raw/branch/master/plugins/docker/docker_
2023-06-23 16:04:19 +02:00
- name : docker_volumesize
src : https://git.mgrote.net/Mirror/munin-contrib/raw/branch/master/plugins/docker/docker_volumesize
2023-07-05 11:47:57 +02:00
- name : chrony
src : https://git.mgrote.net/Mirror/munin-contrib/raw/branch/master/plugins/chrony/chrony
2023-03-02 22:58:55 +01:00
### mgrote.apt_manage_packages
apt_packages_extra :
- bc # für munin plugins
- jq # für munin plugins