---
### oefenweb.ufw
ufw_rules:
  - rule: allow
    to_port: 22
    protocol: tcp
    comment: 'ssh'
    from_ip: 0.0.0.0/0
  - rule: allow
    to_port: 80
    protocol: tcp
    comment: 'munin'
  - rule: allow
    to_port: 9080
    protocol: tcp
    comment: 'promtail'
    from_ip: 192.168.2.0/24
### mgrote_restic
restic_folders_to_backup: "/usr/local /etc /root /home /var/lib/munin"

### geerlingguy.apache
apache_vhosts:
  # Additional optional properties: 'serveradmin, serveralias, extra_parameters'.
  - servername: "munin.mgrote.net"
    documentroot: "/var/cache/munin/www"

### mrlesmithjr.ansible-manage-lvm
lvm_groups:
  - vgname: vg_munin
    disks:
      - /dev/disk/by-id/scsi-0QEMU_QEMU_HARDDISK_drive-scsi1
    create: true
    lvnames:
      - lvname: lv_munin
        size: +100%FREE
        create: true
        filesystem: xfs
        mount: true
        mntp: /var/lib/munin
manage_lvm: true
pvresize_to_max: true

### mgrote_munin_node
munin_node_bind_host: "127.0.0.1"
munin_node_bind_port: "4949"
munin_node_allowed_cidrs: [127.0.0.1]

###  mgrote_munin_master
munin_mode: cgi # or cron
munin_mail_user: munin@mgrote.net
munin_mail_server: "{{ postfix_smtp_server }}"
munin_mail_port: "{{ 1025 }}"
munin_mail_tls: false
munin_enable_alerts: false
munin_alerts_to: info@mgrote.net

munin_hosts:
  - name: "{{ ansible_fqdn }}.mgrote.net"
    address: "127.0.0.1"
    extra: ["use_node_name yes"]
  - name: fileserver3.mgrote.net
    address: fileserver3.mgrote.net
    extra: ["use_node_name yes"]
  - name: pve5.mgrote.net
    address: pve5.mgrote.net
    extra: ["use_node_name yes"]
  - name: forgejo.mgrote.net
    address: forgejo.mgrote.net
    extra: ["use_node_name yes"]
  - name: docker10.mgrote.net
    address: docker10.mgrote.net
    extra: ["use_node_name yes"]
  - name: pbs.mgrote.net
    address: pbs.mgrote.net
    extra: ["use_node_name yes"]
  - name: blocky.mgrote.net
    address: blocky.mgrote.net
    extra: ["use_node_name yes"]
  - name: ldap.mgrote.net
    address: ldap.mgrote.net
    extra: ["use_node_name yes"]