homeserver/group_vars/docker.yml

71 lines
2.1 KiB
YAML
Raw Normal View History

---
### oefenweb.ufw
ufw_rules:
- rule: allow
to_port: 22
protocol: tcp
comment: 'ssh'
2020-12-31 14:39:17 +01:00
from_ip: 192.168.2.0/24
2020-12-31 15:14:22 +01:00
# Weitere Regeln sind nicht notwendig da Docker iptables selber verwaltet.
# - rule: allow
# comment: 'alles erlauben'
### geerlingguy.docker
docker_users:
- mg
- root
- ansible-user
2021-02-01 08:20:01 +01:00
- git
2020-11-30 09:34:33 +01:00
### ryandaniels.create_users
users:
- username: mg
password: "{{ lookup('keepass', 'mg_linux_password_hash', 'password') }}"
2020-11-30 09:34:33 +01:00
update_password: on_create
ssh_key: "{{ lookup('keepass', 'mg_ssh_pubkey', 'password') }}"
use_sudo: yes
use_sudo_nopass: yes
user_state: present
groups: ssh, sudo, docker
servers:
- production
- test
- username: gitlab-user
password: "{{ lookup('keepass', 'gitlab_user_linux_password_hash', 'password') }}"
update_password: on_create
ssh_key: "{{ lookup('keepass', 'gitlab_user_ssh_pubkey', 'password') }}"
2020-11-30 09:34:33 +01:00
use_sudo: yes
use_sudo_nopass: yes
user_state: present
groups: ssh, sudo, docker
servers:
- production
- test
2021-02-07 13:16:51 +01:00
- username: ansible-user
password: "{{ lookup('keepass', 'ansible_user_linux_password_hash', 'password') }}"
update_password: on_create
ssh_key: "{{ lookup('keepass', 'ansible_user_ssh_pubkey', 'password') }}"
use_sudo: yes
use_sudo_nopass: yes
user_state: present
groups: ssh, sudo
servers:
- production
- test
2020-12-03 12:18:00 +01:00
### mgrote.restic
restic_folders_to_backup: /usr/local /etc /root /home /var/lib/docker
restic_cron_hours: "*"
2020-12-22 12:27:43 +01:00
restic_exclude: |
._*
desktop.ini
.Trash-*
**/**cache***/**
**/**Cache***/**
**/**AppData***/**
/var/lib/docker/volumes/***Musik***
/var/lib/docker/volumes/***musik***
2021-01-21 19:08:30 +01:00
/var/lib/docker/volumes/***musik***
/var/lib/docker/volumes/ocrmypdf-auto_scan_input/*
/var/lib/docker/volumes/ocrmypdf-auto_scan_output/*
2020-12-22 12:27:43 +01:00
# https://github.com/restic/restic/issues/1005
# https://forum.restic.net/t/exclude-syntax-confusion/1531/12