ansible/inventory/host_vars/DebianMain.yml

118 lines
4.5 KiB
YAML

_speedup_bitwarden_hetzner_record: "{{ bitwarden_records_urmel_services['Hetzner'] }}"
_speedup_bitwarden_hetzner_fields: "{{ dict(_speedup_bitwarden_hetzner_record.fields|map(attribute='name')|zip(_speedup_bitwarden_hetzner_record.fields|map(attribute='value'))) }}"
_speedup_noreply_mail_record: "{{ bitwarden_records_urmel_services['Noreply Mail'] }}"
_speedup_noreply_mail_fields: "{{ dict(_speedup_noreply_mail_record.fields|map(attribute='name')|zip(_speedup_noreply_mail_record.fields|map(attribute='value'))) }}"
_speedup_nextcloud_record: "{{ bitwarden_records_urmel_services['Nextcloud'] }}"
_speedup_nextcloud_fields: "{{ dict(_speedup_nextcloud_record.fields|map(attribute='name')|zip(_speedup_nextcloud_record.fields|map(attribute='value'))) }}"
ddns_override:
domains:
- provider: "hetznercloud"
domain: "urmel.de"
ip_version: "ipv4"
token: "{{ _speedup_bitwarden_hetzner_fields.api_token }}"
- provider: "hetznercloud"
domain: "urmel.de"
ip_version: "ipv6"
token: "{{ _speedup_bitwarden_hetzner_fields.api_token }}"
- provider: "hetznercloud"
domain: "*.urmel.de"
ip_version: "ipv4"
token: "{{ _speedup_bitwarden_hetzner_fields.api_token }}"
- provider: "hetznercloud"
domain: "*.urmel.de"
ip_version: "ipv6"
token: "{{ _speedup_bitwarden_hetzner_fields.api_token }}"
traefik_override:
expose_additional_ports:
- 2022
include_external_services:
homeassistant:
url: 172.24.2.4
main_domain: "urmel.de"
http_port: "80"
https_port: "443"
duckdns_api_token: "{{ (bitwarden_records_urmel_services['DuckDns'].fields | selectattr('name', '==', 'token') | first).value }}"
hetzner_api_token: "{{ _speedup_bitwarden_hetzner_fields.api_token }}"
basic_auth_password: "{{ (bitwarden_records_urmel_services['Traefik'].fields | selectattr('name', '==', 'auth_string') | first).value }}"
authentik_override:
url: "auth.urmel.de"
db_password: "{{ (bitwarden_records_urmel_services['Authentik'].fields | selectattr('name', '==', 'db_password') | first).value }}"
secret: "{{ (bitwarden_records_urmel_services['Authentik'].fields | selectattr('name', '==', 'secret') | first).value }}"
mail:
host: "{{ _speedup_noreply_mail_fields.smtp_host }}"
user: "{{ _speedup_noreply_mail_fields.address }}"
password: "{{ _speedup_noreply_mail_fields.password }}"
radius:
enabled: false
nextcloud_override:
url: "nextcloud.urmel.de"
data_path: "/mnt/nextcloud"
db_password: "{{ _speedup_nextcloud_fields.db_password }}"
secret: "{{ _speedup_nextcloud_fields.secret }}"
secret_salt: "{{ _speedup_nextcloud_fields.salt }}"
networkmount:
host: "217.100.0.2"
host_path: "/mnt/Main/nextcloudData"
args: "rw,noatime,tcp"
mail:
host: "{{ _speedup_noreply_mail_fields.smtp_host }}"
address: "{{ _speedup_noreply_mail_fields.address }}"
password: "{{ _speedup_noreply_mail_fields.password }}"
oidc:
issuer: "https://auth.urmel.de/application/o/nextcloud/.well-known/openid-configuration"
client_id: "{{ _speedup_nextcloud_fields.oidc_client_id }}"
client_secret: "{{ _speedup_nextcloud_fields.oidc_client_secret }}"
collabora:
url: "collabora.urmel.de"
password: "{{ _speedup_nextcloud_fields.collabora_password }}"
drawio:
url: "drawio.urmel.de"
vaultwarden_override:
url: "vaultwarden.urmel.de"
admin_token: "{{ (bitwarden_records_urmel_services['Vaultwarden'].fields | selectattr('name', '==', 'admin_token') | first).value }}"
oidc:
issuer: ""
client_id: "{{ (bitwarden_records_urmel_services['Vaultwarden'].fields | selectattr('name', '==', 'oidc_client_id') | first).value }}"
client_secret: "{{ (bitwarden_records_urmel_services['Vaultwarden'].fields | selectattr('name', '==', 'oidc_client_secret') | first).value }}"
mail:
host: "{{ _speedup_noreply_mail_fields.smtp_host }}"
user: "{{ _speedup_noreply_mail_fields.address }}"
password: "{{ _speedup_noreply_mail_fields.password }}"
jellyfin_override:
url: "jellyfin.urmel.de"
data_path: "/mnt/jellyfin"
networkmount:
host: "217.100.0.2"
host_path: "/mnt/Main/jellyfinData"
args: "rw,noatime,tcp"
gitea_override:
version: "1.23.7"
url: "git.urmel.de"
db_password: "{{ (bitwarden_records_urmel_services['Gitea'].fields | selectattr('name', '==', 'db_password') | first).value }}"
data_path: "/mnt/gitea"
enable_ssh: true
networkmount:
host: "217.100.0.2"
host_path: "giteaData"
args: "username=smb-provider,password=byzxFp3AG2r6Tk6n3HG5lPWhLVIAUT1g,domain=WORKGROUP,uid=1000,gid=1000"
type: "cifs"