---
### oefenweb.ufw
ufw_rules:
  - rule: allow
    to_port: 22
    protocol: tcp
    comment: 'ssh'
    from_ip: 0.0.0.0/0
  - rule: allow
    to_port: 80 #TODO passt?
    protocol: tcp
    comment: 'munin'

# munin-node plugins fur master aus iomage hier einbauen TODO
# restic ordner TODO

### geerlingguy.apache
apache_vhosts:
  # Additional optional properties: 'serveradmin, serveralias, extra_parameters'.
  - servername: "munin.mgrote.net"
    documentroot: "/var/cache/munin/www"

### mrlesmithjr.ansible-manage-lvm
lvm_groups:
  - vgname: vg_munin
    disks:
      - /dev/disk/by-id/scsi-0QEMU_QEMU_HARDDISK_drive-scsi1
    create: true
    lvnames:
      - lvname: lv_munin
        size: +100%FREE
        create: true
        filesystem: xfs
        mount: true
        mntp: /var/lib/munin
manage_lvm: true
pvresize_to_max: true

### mgrote_munin_node
munin_node_bind_host: "127.0.0.1"
munin_node_bind_port: "4949"
munin_node_allowed_cidrs: [127.0.0.1]

###  mgrote_munin_master
munin_hosts:
  - name: "{{ ansible_fqdn }}.mgrote.net"
    address: "127.0.0.1"
  - name: fileserver3.mgrote.net
    address: fileserver3.mgrote.net
  - name: pve5.mgrote.net
    address: pve5.mgrote.net
  - name: forgejo.mgrote.net
    address: forgejo.mgrote.net
  - name: docker10.mgrote.net
    address: docker10.mgrote.net
  - name: pbs.mgrote.net
    address: pbs.mgrote.net
  - name: blocky.mgrote.net
    address: blocky.mgrote.net
  - name: ldap.mgrote.net
    address: ldap.mgrote.net



# notfications config
# TODO
# cgi?
# rrdcache
# rolle wieder aus image ausabuen