---
### oefenweb.ufw
ufw_rules:
  - rule: allow
    to_port: 22
    protocol: tcp
    comment: 'ssh'
    from_ip: 0.0.0.0/0
  - rule: allow
    to_port: 80 #TODO passt?
    protocol: tcp
    comment: 'munin'

# munin-node plugins fur master aus iomage hier einbauen TODO
# restic ordner TODO

### mrlesmithjr.ansible-manage-lvm
lvm_groups:
  - vgname: vg_munin
    disks:
      - /dev/disk/by-id/scsi-0QEMU_QEMU_HARDDISK_drive-scsi1
    create: true
    lvnames:
      - lvname: lv_munin
        size: +100%FREE
        create: true
        filesystem: xfs
        mount: true
        mntp: /var/lib/munin
manage_lvm: true
pvresize_to_max: true

### mgrote_munin_node
munin_node_bind_host: "127.0.0.1" # testen
munin_node_bind_port: "4949"
munin_node_allowed_cidrs: [127.0.0.1] # testen

### munin-master
munin_dbdir: /var/lib/munin
munin_htmldir: /var/www/html
munin_logdir: /var/log/munin
munin_rundir: /var/run/munin
munin_includedir: /etc/munin/conf.d

munin_html_strategy: cron
munin_graph_strategy: cron
munin_max_processes: 12

munin_cron_job: present

munin_admin_user: munin
munin_admin_password: "{{ lookup('viczem.keepass.keepass', 'munin_admin_pass', 'password') }}"

munin_hosts:
  - name: "localhost"
    address: "127.0.0.1"
    extra: ["use_node_name yes"]


# notfications config

# cgi?