mg
68d9bd0dbd
git stash doku vars aufgeteilt doku aufgeräumt no log doku vars passwort entfernt und neu gesetzt keepass: gitea_mg_https_password angelegt dependencies vars auskommentiert readme vars wip ordnernamen als var basisrolle steht basis musterrolle geklont Co-authored-by: Michael Grote <michael.grote@posteo.de> Reviewed-on: mg/ansible#155 Co-Authored-By: mg <mg@noreply.git.mgrote.net> Co-Committed-By: mg <mg@noreply.git.mgrote.net>
37 lines
1.1 KiB
YAML
37 lines
1.1 KiB
YAML
---
|
|
### geerlingguy.docker
|
|
docker_users:
|
|
- mg
|
|
### mgrote.restic
|
|
restic_folders_to_backup: /usr/local /etc /root /home /var/lib/docker
|
|
qssrestic_cron_hours: "*/4"
|
|
restic_exclude: |
|
|
._*
|
|
desktop.ini
|
|
.Trash-*
|
|
**/**cache***/**
|
|
**/**Cache***/**
|
|
**/**AppData***/**
|
|
/var/lib/docker/volumes/***Musik***
|
|
/var/lib/docker/volumes/***musik***
|
|
/var/lib/docker/volumes/docker-photoprism_pp_smb_bilder***/**
|
|
# https://github.com/restic/restic/issues/1005
|
|
# https://forum.restic.net/t/exclude-syntax-confusion/1531/12
|
|
### oefenweb.ufw
|
|
ufw_rules:
|
|
- rule: allow
|
|
to_port: 22
|
|
protocol: tcp
|
|
comment: 'ssh'
|
|
from_ip: 192.168.2.0/24
|
|
- rule: allow
|
|
to_port: 4949
|
|
protocol: tcp
|
|
comment: 'munin'
|
|
### geerlingguy.munin-node
|
|
munin_node_allowed_cidrs: [0.0.0.0/0] # weil der munin-server aus einem anderen subnet zugreift
|
|
munin_node_allowed_ips: # weil der munin-server aus einem anderen subnet zugreift
|
|
- '^127\.0\.0\.1$'
|
|
- '^::1$'
|
|
- ^0\.0\.0\.0$
|