mg
e2707856d8
Co-authored-by: Michael Grote <michael.grote@posteo.de> Reviewed-on: mg/ansible#232 Co-authored-by: mg <michael.grote@posteo.de> Co-committed-by: mg <michael.grote@posteo.de>
47 lines
1.2 KiB
YAML
47 lines
1.2 KiB
YAML
---
|
|
### oefenweb.ufw
|
|
ufw_rules:
|
|
- rule: allow
|
|
to_port: 22
|
|
protocol: tcp
|
|
comment: 'ssh'
|
|
from_ip: 192.168.2.0/24
|
|
- rule: allow
|
|
to_port: 4949
|
|
protocol: tcp
|
|
comment: 'munin'
|
|
from_ip: 192.168.2.144/24
|
|
- rule: allow
|
|
to_port: "{{ minio_port }}"
|
|
protocol: tcp
|
|
comment: 'minio'
|
|
from_ip: 192.168.2.0/24
|
|
- rule: allow
|
|
to_port: "{{ minio_console_port }}"
|
|
protocol: tcp
|
|
comment: 'minio-mgmt'
|
|
from_ip: 192.168.2.0/24
|
|
|
|
### mgrote.minio
|
|
minio_download_url: https://dl.min.io/server/minio/release/linux-amd64/minio
|
|
|
|
minio_bin_path: /usr/local/bin
|
|
minio_volumes_base_dir: /bm/s3/
|
|
minio_config_dir: /etc/minio
|
|
|
|
minio_fqdn: "" # leer, damit wird an alle ips gebunden
|
|
minio_port: 9001 # Port für Request
|
|
minio_console_port: 34081 # Port für Mgmt
|
|
|
|
minio_root_user: mg_minio_root
|
|
minio_root_password: "{{ lookup('keepass', 'minio_root_password', 'password') }}"
|
|
|
|
minio_user: minio-user
|
|
minio_group: minio-user
|
|
|
|
minio_server_url: "" # leer, wie "nicht gesetzt"
|
|
minio_browser_redirect_url: "" # leer, wie "nicht gesetzt"
|
|
|
|
# Aufruf:
|
|
# intern: minio1.grote.lan:9000
|
|
# extern: s3.mgrote.net
|