ansible/inventory/host_vars/DebianMain.yml

154 lines
6.1 KiB
YAML

_speedup_bitwarden_hetzner_record: "{{ bitwarden_records_urmel_services['Hetzner'] }}"
_speedup_bitwarden_hetzner_fields: "{{ dict(_speedup_bitwarden_hetzner_record.fields|map(attribute='name')|zip(_speedup_bitwarden_hetzner_record.fields|map(attribute='value'))) }}"
_speedup_noreply_mail_record: "{{ bitwarden_records_urmel_services['Noreply Mail'] }}"
_speedup_noreply_mail_fields: "{{ dict(_speedup_noreply_mail_record.fields|map(attribute='name')|zip(_speedup_noreply_mail_record.fields|map(attribute='value'))) }}"
_speedup_nextcloud_record: "{{ bitwarden_records_urmel_services['Nextcloud'] }}"
_speedup_nextcloud_fields: "{{ dict(_speedup_nextcloud_record.fields|map(attribute='name')|zip(_speedup_nextcloud_record.fields|map(attribute='value'))) }}"
_speedup_smb_provicer_record: "{{ bitwarden_records_urmel_services['SMB Provider'] }}"
_smb_credentials: "username={{ _speedup_smb_provicer_record.login.username }},password={{ _speedup_smb_provicer_record.login.password }},domain=WORKGROUP"
ddns_override:
domains:
- provider: "hetznercloud"
domain: "urmel.de"
ip_version: "ipv4"
token: "{{ _speedup_bitwarden_hetzner_fields.api_token }}"
- provider: "hetznercloud"
domain: "urmel.de"
ip_version: "ipv6"
token: "{{ _speedup_bitwarden_hetzner_fields.api_token }}"
- provider: "hetznercloud"
domain: "*.urmel.de"
ip_version: "ipv4"
token: "{{ _speedup_bitwarden_hetzner_fields.api_token }}"
- provider: "hetznercloud"
domain: "*.urmel.de"
ip_version: "ipv6"
token: "{{ _speedup_bitwarden_hetzner_fields.api_token }}"
traefik_override:
expose_additional_ports:
- 2022
include_external_services:
homeassistant:
url: 172.24.2.4
main_domain: "urmel.de"
http_port: "80"
https_port: "443"
duckdns_api_token: "{{ (bitwarden_records_urmel_services['DuckDns'].fields | selectattr('name', '==', 'token') | first).value }}"
hetzner_api_token: "{{ _speedup_bitwarden_hetzner_fields.api_token }}"
basic_auth_password: "{{ (bitwarden_records_urmel_services['Traefik'].fields | selectattr('name', '==', 'auth_string') | first).value }}"
authentik_override:
url: "auth.urmel.de"
db_password: "{{ (bitwarden_records_urmel_services['Authentik'].fields | selectattr('name', '==', 'db_password') | first).value }}"
secret: "{{ (bitwarden_records_urmel_services['Authentik'].fields | selectattr('name', '==', 'secret') | first).value }}"
mail:
host: "{{ _speedup_noreply_mail_fields.smtp_host }}"
user: "{{ _speedup_noreply_mail_fields.address }}"
password: "{{ _speedup_noreply_mail_fields.password }}"
radius:
enabled: false
nextcloud_override:
url: "nextcloud.urmel.de"
data_path: "/mnt/nextcloud"
db_password: "{{ _speedup_nextcloud_fields.db_password }}"
secret: "{{ _speedup_nextcloud_fields.secret }}"
secret_salt: "{{ _speedup_nextcloud_fields.salt }}"
networkmount:
host: "217.100.0.2"
host_path: "/mnt/Main/nextcloudData"
args: "rw,noatime,tcp"
mail:
host: "{{ _speedup_noreply_mail_fields.smtp_host }}"
address: "{{ _speedup_noreply_mail_fields.address }}"
password: "{{ _speedup_noreply_mail_fields.password }}"
oidc:
issuer: "https://auth.urmel.de/application/o/nextcloud/.well-known/openid-configuration"
client_id: "{{ _speedup_nextcloud_fields.oidc_client_id }}"
client_secret: "{{ _speedup_nextcloud_fields.oidc_client_secret }}"
collabora:
url: "collabora.urmel.de"
password: "{{ _speedup_nextcloud_fields.collabora_password }}"
drawio:
url: "drawio.urmel.de"
vaultwarden_override:
url: "vaultwarden.urmel.de"
admin_token: "{{ (bitwarden_records_urmel_services['Vaultwarden'].fields | selectattr('name', '==', 'admin_token') | first).value }}"
oidc:
issuer: ""
client_id: "{{ (bitwarden_records_urmel_services['Vaultwarden'].fields | selectattr('name', '==', 'oidc_client_id') | first).value }}"
client_secret: "{{ (bitwarden_records_urmel_services['Vaultwarden'].fields | selectattr('name', '==', 'oidc_client_secret') | first).value }}"
mail:
host: "{{ _speedup_noreply_mail_fields.smtp_host }}"
user: "{{ _speedup_noreply_mail_fields.address }}"
password: "{{ _speedup_noreply_mail_fields.password }}"
jellyfin_override:
url: "jellyfin.urmel.de"
data_path: "/mnt/jellyfin"
networkmount:
host: "217.100.0.2"
host_path: "/mnt/Main/jellyfinData"
args: "rw,noatime,tcp"
gitea_override:
version: "1.23.7"
url: "git.urmel.de"
db_password: "{{ (bitwarden_records_urmel_services['Gitea'].fields | selectattr('name', '==', 'db_password') | first).value }}"
data_path: "/mnt/gitea"
enable_ssh: true
networkmount:
host: "217.100.0.2"
host_path: "giteaData"
args: "{{ _smb_credentials }},uid=1000,gid=1000"
type: "cifs"
minio_override:
version: "1.0.1"
url: "s3.urmel.de"
admin_url: "rustfs.urmel.de"
user: "{{ bitwarden_records_urmel_services['Minio'].login.username }}"
password: "{{ bitwarden_records_urmel_services['Minio'].login.password }}"
data_path: "/mnt/rustfs"
networkmount:
host: "217.100.0.2"
host_path: "servicesData/s3"
args: "{{ _smb_credentials }},uid=10001,gid=10001"
type: "cifs"
splitpro_override:
url: "splitpro.urmel.de"
db_password: "{{ (bitwarden_records_urmel_services['Splitpro'].fields | selectattr('name', '==', 'db_password') | first).value }}"
nextauth_secret: "{{ (bitwarden_records_urmel_services['Splitpro'].fields | selectattr('name', '==', 'nextauth_secret') | first).value }}"
oidc:
client_id: "{{ (bitwarden_records_urmel_services['Splitpro'].fields | selectattr('name', '==', 'oidc_client_id') | first).value }}"
client_secret: "{{ (bitwarden_records_urmel_services['Splitpro'].fields | selectattr('name', '==', 'oidc_client_secret') | first).value }}"
issuer: "https://auth.urmel.de/application/o/split-pro/"
mail:
host: "{{ _speedup_noreply_mail_fields.smtp_host }}"
address: "{{ _speedup_noreply_mail_fields.address }}"
password: "{{ _speedup_noreply_mail_fields.password }}"
changedetection_override:
version: "latest"
url: "changedetection.urmel.de"
oidc:
forwardauth_url: "http://authentik-proxy:9000/outpost.goauthentik.io/auth/traefik"