331 lines
10 KiB
YAML
331 lines
10 KiB
YAML
---
|
|
# rpool ist unverschlüsselt als Boot-Medium
|
|
# der Speicherort fur die VMs ist verschlüsselt
|
|
# zfs create -o encryption=aes-256-gcm -o keyformat=passphrase rpool/vm
|
|
# entschlüsseln nach Boot mit: sudo zfs mount -a -l
|
|
## HDD_DATA_RAIDZ
|
|
### sudo zpool create -o ashift=12 -o feature@encryption=enabled -O encryption=on -O keylocation=prompt -O keyformat=passphrase hdd_data_raidz mirror /dev/disk/by-id/ata-TOSHIBA_MG09ACA18TE_Z1B0A27KFJDH /dev/disk/by-id/ata-TOSHIBA_MG09ACA18TE_Z1B0A28LFJDH
|
|
|
|
# mgrote.zfs_manage_datasets
|
|
### mgrote.zfs_extra
|
|
# Variablen für mgrote.zfs_health/trim/scrub/zed/arc_mem/ sind zusammengefasst unter zfs_extra_*
|
|
zfs_datasets: # DatenPools werden hier nicht verwaltet
|
|
# rpool - System-Datasets
|
|
- dataset: rpool
|
|
state: present
|
|
compression: zstd
|
|
sync: disabled
|
|
xattr: sa
|
|
dnodesize: auto
|
|
atime: on
|
|
snapdir: hidden
|
|
reservation: 1G
|
|
refreservation: 10G
|
|
- dataset: rpool/ROOT
|
|
state: present
|
|
refreservation: 10G
|
|
- dataset: rpool/ROOT/pve-1
|
|
state: present
|
|
refreservation: 10G
|
|
# rpool - Data
|
|
- dataset: rpool/data
|
|
state: present
|
|
- dataset: rpool/data/acng
|
|
state: present
|
|
# rpool - VMs
|
|
- dataset: rpool/vm
|
|
state: present
|
|
- dataset: rpool/vm/zvol
|
|
state: present
|
|
- dataset: rpool/vm/lxc
|
|
state: present
|
|
- dataset: rpool/data
|
|
state: present
|
|
- dataset: rpool/data/k3s
|
|
state: present
|
|
# hdd_data_raidz
|
|
- dataset: hdd_data_raidz
|
|
state: present
|
|
compression: zstd
|
|
sync: disabled
|
|
xattr: sa
|
|
dnodesize: auto
|
|
atime: on
|
|
snapdir: hidden
|
|
reservation: 1G
|
|
- dataset: hdd_data_raidz/papa_backup
|
|
state: present
|
|
- dataset: hdd_data_raidz/pve_backup
|
|
state: present
|
|
recordsize: 1M
|
|
- dataset: hdd_data_raidz/videos
|
|
state: present
|
|
recordsize: 1M
|
|
- dataset: hdd_data_raidz/music
|
|
state: present
|
|
recordsize: 1M
|
|
- dataset: hdd_data_raidz/tmp
|
|
state: present
|
|
- dataset: hdd_data_raidz/archiv
|
|
state: present
|
|
- dataset: hdd_data_raidz/bilder
|
|
state: present
|
|
recordsize: 1M
|
|
- dataset: hdd_data_raidz/hm
|
|
state: present
|
|
- dataset: hdd_data_raidz/scans
|
|
state: present
|
|
- dataset: hdd_data_raidz/restic
|
|
state: present
|
|
- dataset: hdd_data_raidz/backup
|
|
state: present
|
|
- dataset: hdd_data_raidz/buecher
|
|
state: present
|
|
- dataset: hdd_data_raidz/programme
|
|
state: present
|
|
- dataset: hdd_data_raidz/vm
|
|
state: present
|
|
|
|
zfs_extra_arc_max_size: "8589934592" # 8GB in Bytes
|
|
zfs_extra_zfs_pools:
|
|
- name: "rpool"
|
|
systemd_timer_schedule: "*-01,04,07,10-01 23:00" # jeden ersten eines jeden Quartals
|
|
- name: "hdd_data_raidz"
|
|
systemd_timer_schedule: "*-01,04,07,10-01 23:00"
|
|
|
|
### mgrote.zfs_sanoid
|
|
sanoid_datasets:
|
|
### hdd_data_raidz
|
|
- path: 'hdd_data_raidz/videos'
|
|
template: '3tage'
|
|
recursive: 'yes'
|
|
snapshots: true
|
|
- path: 'hdd_data_raidz/music'
|
|
template: '14tage'
|
|
recursive: 'yes'
|
|
snapshots: true
|
|
- path: 'hdd_data_raidz/papa_backup'
|
|
template: '14tage'
|
|
recursive: 'yes'
|
|
snapshots: true
|
|
- path: 'hdd_data_raidz/tmp'
|
|
template: '3tage'
|
|
recursive: 'yes'
|
|
snapshots: true
|
|
- path: 'hdd_data_raidz/pve_backup'
|
|
template: '3tage'
|
|
recursive: 'yes'
|
|
snapshots: true
|
|
- path: 'hdd_data_raidz/archiv'
|
|
template: '14tage'
|
|
recursive: 'yes'
|
|
snapshots: true
|
|
- path: hdd_data_raidz/bilder
|
|
recursive: 'no'
|
|
snapshots: true
|
|
template: '14tage'
|
|
- path: hdd_data_raidz/hm
|
|
recursive: 'no'
|
|
snapshots: true
|
|
template: '14tage'
|
|
- path: hdd_data_raidz/scans
|
|
recursive: 'no'
|
|
snapshots: true
|
|
template: '3tage'
|
|
- path: hdd_data_raidz/backup
|
|
recursive: 'no'
|
|
snapshots: true
|
|
template: '31tage'
|
|
- path: hdd_data_raidz/restic
|
|
recursive: 'no'
|
|
snapshots: true
|
|
template: '3tage'
|
|
- path: hdd_data_raidz/programme
|
|
recursive: 'no'
|
|
snapshots: true
|
|
template: '14tage'
|
|
- path: hdd_data_raidz/buecher
|
|
recursive: 'no'
|
|
snapshots: true
|
|
template: '14tage'
|
|
- path: hdd_data_raidz/vm
|
|
recursive: 'no'
|
|
snapshots: true
|
|
template: '3tage'
|
|
### rpool
|
|
- path: rpool
|
|
recursive: 'no'
|
|
snapshots: true
|
|
template: 'pve3tage'
|
|
- path: rpool/ROOT
|
|
recursive: 'no'
|
|
snapshots: true
|
|
template: 'pve3tage'
|
|
- path: rpool/ROOT/pve-1
|
|
recursive: 'no'
|
|
snapshots: true
|
|
template: 'pve3tage'
|
|
- path: rpool/data/acng
|
|
recursive: 'no'
|
|
snapshots: true
|
|
template: '3tage'
|
|
- path: rpool/data/k3s
|
|
recursive: 'no'
|
|
snapshots: true
|
|
template: '14tage'
|
|
|
|
### mgrote.cv4pve-autosnap
|
|
cv4pve_api_user: root@pam!cv4pve-autosnap
|
|
cv4pve_api_token: "{{ lookup('keepass', 'cv4pve_api_token', 'password') }}"
|
|
cv4pve_vmid: all,-106,-112,-115
|
|
cv4pve_keep_snapshots: 5
|
|
cv4pve_dl_link: "https://github.com/Corsinvest/cv4pve-autosnap/releases/download/v1.14.7/cv4pve-autosnap-linux-x64.zip"
|
|
|
|
### mgrote.proxmox_lxc_profiles
|
|
lxc_apparmor_profiles:
|
|
- vmid: 112
|
|
apparmor_profile: unconfined
|
|
|
|
### mgrote.proxmox_bind_mounts
|
|
pve_bind_mounts:
|
|
### fileserver3
|
|
- vmid: 115
|
|
mp_nr: 0
|
|
mp_path_host: /hdd_data_raidz/videos
|
|
mp_path_guest: /shares_videos
|
|
- vmid: 115
|
|
mp_nr: 2
|
|
mp_path_host: /hdd_data_raidz/pve_backup
|
|
mp_path_guest: /shares_pve_backup
|
|
- vmid: 115
|
|
mp_nr: 3
|
|
mp_path_host: /hdd_data_raidz/papa_backup
|
|
mp_path_guest: /shares_papa_backup
|
|
- vmid: 115
|
|
mp_nr: 4
|
|
mp_path_host: /hdd_data_raidz/music
|
|
mp_path_guest: /shares_music
|
|
- vmid: 115
|
|
mp_nr: 5
|
|
mp_path_host: /hdd_data_raidz/tmp
|
|
mp_path_guest: /shares_tmp
|
|
- vmid: 115
|
|
mp_nr: 6
|
|
mp_path_host: /hdd_data_raidz/archiv
|
|
mp_path_guest: /shares_archiv
|
|
- vmid: 115
|
|
mp_nr: 7
|
|
mp_path_host: /hdd_data_raidz/bilder
|
|
mp_path_guest: /shares_bilder
|
|
- vmid: 115
|
|
mp_nr: 8
|
|
mp_path_host: /hdd_data_raidz/hm
|
|
mp_path_guest: /shares_hm
|
|
- vmid: 115
|
|
mp_nr: 9
|
|
mp_path_host: /hdd_data_raidz/scans
|
|
mp_path_guest: /shares_scans
|
|
- vmid: 115
|
|
mp_nr: 10
|
|
mp_path_host: /hdd_data_raidz/restic
|
|
mp_path_guest: /shares_restic
|
|
- vmid: 115
|
|
mp_nr: 12
|
|
mp_path_host: /hdd_data_raidz/backup
|
|
mp_path_guest: /shares_backup
|
|
- vmid: 115
|
|
mp_nr: 14
|
|
mp_path_host: /hdd_data_raidz/buecher
|
|
mp_path_guest: /shares_buecher
|
|
- vmid: 115
|
|
mp_nr: 15
|
|
mp_path_host: /hdd_data_raidz/programme
|
|
mp_path_guest: /shares_programme
|
|
- vmid: 115
|
|
mp_nr: 16
|
|
mp_path_host: /hdd_data_raidz/vm
|
|
mp_path_guest: /shares_vm
|
|
- vmid: 106
|
|
mp_nr: 1
|
|
mp_path_host: /rpool/data/acng
|
|
mp_path_guest: /var/cache/apt-cacher-ng
|
|
### k3s-nfs2
|
|
- vmid: 112
|
|
mp_nr: 1
|
|
mp_path_host: /rpool/data/k3s
|
|
mp_path_guest: /srv/nfs
|
|
|
|
### mgrote.munin-node
|
|
munin_node_plugins:
|
|
- name: timesync
|
|
src: https://git.mgrote.net/mg/mirror-munin-contrib/raw/branch/master/plugins/systemd/timesync_status
|
|
- name: systemd_status
|
|
src: https://git.mgrote.net/mg/mirror-munin-contrib/raw/branch/master/plugins/systemd/systemd_status
|
|
- name: systemd_mem
|
|
src: https://git.mgrote.net/mg/mirror-munin-contrib/raw/branch/master/plugins/systemd/systemd_mem
|
|
config: |
|
|
[systemd_mem]
|
|
env.all_services true
|
|
- name: lvm_
|
|
src: https://git.mgrote.net/mg/mirror-munin-contrib/raw/branch/master/plugins/disk/lvm_
|
|
config: |
|
|
[lvm_*]
|
|
user root
|
|
- name: fail2ban
|
|
src: https://git.mgrote.net/mg/munin-plugins/raw/branch/master/extern/fail2ban
|
|
config: |
|
|
[fail2ban]
|
|
env.client /usr/bin/fail2ban-client
|
|
env.config_dir /etc/fail2ban
|
|
user root
|
|
- name: zfs_arcstats
|
|
src: https://git.mgrote.net/mg/mirror-munin-contrib/raw/branch/master/plugins/zfs/zfs_arcstats
|
|
- name: zfsonlinux_stats_
|
|
src: https://git.mgrote.net/mg/mirror-munin-contrib/raw/branch/master/plugins/zfs/zfsonlinux_stats_
|
|
- name: zpool_iostat
|
|
src: https://git.mgrote.net/mg/mirror-munin-contrib/raw/branch/master/plugins/zfs/zpool_iostat
|
|
- name: zfs_list
|
|
src: https://git.mgrote.net/mg/mirror-munin-contrib/raw/branch/master/plugins/zfs/zfs_list
|
|
config: |
|
|
[zfs_list]
|
|
env.ignore_datasets_pattern autodaily
|
|
- name: zpool_capacity
|
|
src: https://git.mgrote.net/mg/mirror-munin-contrib/raw/branch/master/plugins/zfs/zpool_capacity
|
|
- name: kvm_mem
|
|
src: https://git.mgrote.net/mg/mirror-munin-contrib/raw/branch/master/plugins/libvirt/kvm_mem
|
|
- name: kvm_net
|
|
src: https://git.mgrote.net/mg/mirror-munin-contrib/raw/branch/master/plugins/libvirt/kvm_net
|
|
- name: kvm_io
|
|
src: https://git.mgrote.net/mg/mirror-munin-contrib/raw/branch/master/plugins/libvirt/kvm_io
|
|
config: |
|
|
[kvm_io]
|
|
user root
|
|
- name: kvm_cpu
|
|
src: https://git.mgrote.net/mg/mirror-munin-contrib/raw/branch/master/plugins/libvirt/kvm_cpu
|
|
- name: proxmox_count
|
|
src: https://git.mgrote.net/mg/mirror-munin-contrib/raw/branch/master/plugins/proxmox/proxmox_vm_count
|
|
config: |
|
|
[proxmox_count]
|
|
user root
|
|
group root
|
|
- name: zfs_count
|
|
src: https://git.mgrote.net/mg/mirror-munin-contrib/raw/branch/master/plugins/zfs/zfs_pool_dataset_count
|
|
- name: ksm_
|
|
src: https://git.mgrote.net/mg/mirror-munin-contrib/raw/branch/master/plugins/system/kernel_same_page_merging
|
|
- name: apcupsd_ww
|
|
src: https://git.mgrote.net/mg/mirror-munin-contrib/raw/branch/master/plugins/power/apcupsd_ww
|
|
- name: apcupsd_pwr
|
|
src: https://git.mgrote.net/mg/munin-plugins/raw/branch/master/extern/apcupsd_pwr
|
|
config: |
|
|
[apcupsd_pwr]
|
|
env.ups_model APC-BX950U-GR
|
|
- name: http_response
|
|
src: https://git.mgrote.net/mg/mirror-munin-contrib/raw/branch/master/plugins/http/http_response
|
|
config: |
|
|
[http_response]
|
|
env.sites https://pve5.grote.lan:8006
|
|
env.max_time 20
|
|
env.short_label true
|
|
env.follow_redirect true
|
|
munin_node_disabled_plugins:
|
|
- name: lvm_
|