homeserver/group_vars/pve.yml

---
### mgrote_netplan
netplan_configure: false

### mgrote_user
users:
  - username: root
    password: "{{ lookup('viczem.keepass.keepass', 'root_linux_password_hash_proxmox', 'password') }}"
    update_password: always
    groups:
      - ssh
      - sudo
      - root
    state: present
    allow_sudo: true
    allow_passwordless_sudo: true
  - username: mg
    password: "{{ lookup('viczem.keepass.keepass', 'mg_linux_password_hash', 'password') }}"
    update_password: always
    groups:
      - ssh
      - sudo
    state: present
    public_ssh_key: "{{ ssh_public_key_mg }}"
    allow_sudo: true
    allow_passwordless_sudo: true
  - username: ansible-user
    password: "{{ lookup('viczem.keepass.keepass', 'ansible_user_linux_password_hash', 'password') }}"
    update_password: always
    groups:
      - ssh
      - sudo
    state: present
    public_ssh_key: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJcBwOjanQV6sFWaTetqpl20SVe3aRzGjKbsp7hKkDCE mg@irantu
    allow_sudo: true
    allow_passwordless_sudo: true

### mgrote_cv4pve_autosnap
cv4pve_api_user: root@pam!cv4pve-autosnap
cv4pve_api_token: "{{ lookup('viczem.keepass.keepass', 'cv4pve_api_token', 'password') }}"
cv4pve_vmid: all,-107
cv4pve_keep_snapshots: 5
cv4pve_version: v1.15.0

### mgrote_apt_manage_packages
apt_packages_extra:
  - ifupdown2
  - bmon
  - qemu-guest-agent
  - open-vm-tools
  - systemd-boot

### mgrote_munin_node
munin_node_plugins:
  - name: chrony
    src: https://git.mgrote.net/mirrors/munin-contrib/raw/branch/master/plugins/chrony/chrony
  - name: systemd_status
    src: https://git.mgrote.net/mirrors/munin-contrib/raw/branch/master/plugins/systemd/systemd_status
  - name: systemd_mem
    src: https://git.mgrote.net/mirrors/munin-contrib/raw/branch/master/plugins/systemd/systemd_mem
    config: |
      [systemd_mem]
      env.all_services true
  - name: fail2ban
    src: https://git.mgrote.net/mg/munin-plugins/raw/branch/master/extern/fail2ban
    config: |
      [fail2ban]
      env.client /usr/bin/fail2ban-client
      env.config_dir /etc/fail2ban
      user root
  - name: zfs_arcstats
    src: https://git.mgrote.net/mirrors/munin-contrib/raw/branch/master/plugins/zfs/zfs_arcstats
  - name: zfsonlinux_stats_
    src: https://git.mgrote.net/mirrors/munin-contrib/raw/branch/master/plugins/zfs/zfsonlinux_stats_
  - name: zpool_iostat
    src: https://git.mgrote.net/mirrors/munin-contrib/raw/branch/master/plugins/zfs/zpool_iostat
  - name: zfs_list
    src: https://git.mgrote.net/mirrors/munin-contrib/raw/branch/master/plugins/zfs/zfs_list
    config: |
      [zfs_list]
      env.ignore_datasets_pattern autodaily
  - name: zpool_capacity
    src: https://git.mgrote.net/mirrors/munin-contrib/raw/branch/master/plugins/zfs/zpool_capacity
  - name: kvm_mem
    src: https://git.mgrote.net/mirrors/munin-contrib/raw/branch/master/plugins/libvirt/kvm_mem
  - name: kvm_net
    src: https://git.mgrote.net/mirrors/munin-contrib/raw/branch/master/plugins/libvirt/kvm_net
  - name: kvm_io
    src: https://git.mgrote.net/mirrors/munin-contrib/raw/branch/master/plugins/libvirt/kvm_io
    config: |
      [kvm_io]
      user root
  - name: kvm_cpu
    src: https://git.mgrote.net/mirrors/munin-contrib/raw/branch/master/plugins/libvirt/kvm_cpu
  - name: proxmox_count
    src: https://git.mgrote.net/mirrors/munin-contrib/raw/branch/master/plugins/proxmox/proxmox_vm_count
    config: |
      [proxmox_count]
      user root
      group root
  - name: zfs_count
    src: https://git.mgrote.net/mirrors/munin-contrib/raw/branch/master/plugins/zfs/zfs_pool_dataset_count
  - name: ksm_
    src: https://git.mgrote.net/mirrors/munin-contrib/raw/branch/master/plugins/system/kernel_same_page_merging
munin_node_disabled_plugins:
  - meminfo # zu hohe last
  - hddtemp2 # ersetzt durch hddtemp_smartctl
  - ntp # verursacht zu viele dns ptr request
  - hddtempd # ersetzt durch hddtemp_smartctl
  - squid_cache # proxmox
  - squid_objectsize # proxmox
  - squid_requests # proxmox
  - squid_traffic # proxmox
  - lvm_
  - slab
  - timesync
  - lxc_guests

# Ansible Variablen
### sudo
sudo: false
...