---
  ### oefenweb.ufw
  ufw_rules:
    - rule: allow
      to_port: 22
      protocol: tcp
      comment: 'ssh'
      from_ip: 192.168.2.0/24
    - rule: allow
      to_port: 4949
      protocol: tcp
      comment: 'munin'
      from_ip: 192.168.2.144/24
    - rule: allow
      to_port: 9999
      from_ip: 192.168.2.0/24
      comment: 'acng'
  ### mgrote.acng
  acng_server_port: 9999
  acng_server_exthreshold: "60" #hebt Pakete 60 Tage auf
  acng_server_auth_user: acngadmin
  acng_server_auth_pass: "{{ lookup('keepass', 'acng_webinterface', 'password') }}"
  ### geerlingguy.munin-node
  munin_node_plugins:
    - name: chrony
    - name: systemd_status
    - name: lvm_
    - name: acng
  munin_node_install_plugins: # in eigenes Repo gesichert
    - remote_src: https://git.mgrote.net/mg/munin-plugins/raw/branch/master/chrony
    - remote_src: https://git.mgrote.net/mg/munin-plugins/raw/branch/master/lvm_
    - remote_src: https://git.mgrote.net/mg/munin-plugins/raw/branch/master/systemd_status
    - remote_src: https://git.mgrote.net/mg/munin-plugins/raw/branch/master/acng
  munin_node_config: {
  "acng": {
    "env.logfile /var/log/apt-cacher-ng/apt-cacher.log"
    }
  }