ansible/group_vars/all/vars.yml

---

TIMEZONE: "Europe/Berlin"

ansible_user: zocker

ansible_become: yes
ansible_become_pass: "{{ zocker_password }}"

zocker_authorized_keys_url: "https://git.banananet.work/zocker.keys"

update_scripts_directory: "/root/update"

backup_gpg_fingerprint: "73D09948B2392D688A45DC8393E1BD26F6B02FB7"
backups_to_keep: 1
backups_directory: "/backups"
backups_files_directory: "{{ backups_directory }}/files"
backups_mysql_database_directory: "{{ backups_directory }}/mysql_databases"
backup_scripts_directory: "/root/backup"
backup_files_scripts_directory: "{{ backup_scripts_directory }}/files"
backup_mysql_database_scripts_directory: "{{ backup_scripts_directory }}/mysql_databases"

global_local_user: "{{ lookup('env', 'USER') }}"

global_deployment_directory: "/ansible"
global_configuration_environment_directory: "{{ global_deployment_directory }}/configurations"
global_helper_directory: "{{ global_deployment_directory }}/helpers"
global_webservers_directory: "/var/webservers"
global_socket_directory: "/var/run"

global_credentials_directory: "credentials"
global_public_key_directory: "public_keys"
global_ssh_key_directory: "{{ global_public_key_directory }}/ssh"
global_ssh_host_key_directory: "{{ global_ssh_key_directory }}/hosts"

global_wireguard_private_directory: "{{ global_credentials_directory }}/wireguard"
global_wireguard_public_directory: "{{ global_public_key_directory }}/wireguard/keys"
global_wireguard_peers_directory: "{{ global_public_key_directory }}/wireguard/peers"

ssh_host_key_types:
  - ecdsa
  - ed25519
  - rsa

# (Backend) Port Mappings

backend_smtp_port: 12891
backend_imap_port: 12892

# Application configurations

global_ansible_facts_directory: "/etc/ansible/facts.d"

global_apparmor_profiles_directory: "/etc/apparmor.d"

global_apt_sources_directory: "/etc/apt/sources.list.d"

global_ip_discover_url: "https://keys.banananet.work/ping"
global_ip_discover_register_pass: "{{ lookup('password', 'credentials/ip_discover/register_pass chars=digits,ascii_letters length=256') }}"

global_interfaces_directory: "/etc/network/interfaces.d"

global_pamd: "/etc/pam.d"

global_ssh_configuration_directory: "/etc/ssh/"
global_ssh_configuration_environment_directory: "{{ global_configuration_environment_directory }}/ssh"
global_ssh_configuration_link_name: "config"
global_ssh_configuration_link: "{{ global_ssh_configuration_environment_directory }}/{{ global_ssh_configuration_link_name }}"

global_sudoers_directory: "/etc/sudoers.d"

global_wireguard_configuration_directory: "/etc/wireguard"
global_wireguard_configuration_environment_directory: "{{ global_configuration_environment_directory }}/wireguard"
global_wireguard_configuration_link_name: "wireguard"
global_wireguard_configuration_link: "{{ global_wireguard_configuration_environment_directory }}/{{ global_wireguard_configuration_link_name }}"
global_wireguard_port: 51820
global_wireguard_ipv4_subnet: 22
global_wireguard_ipv4_netmask: "{{ ('0.0.0.0/' + (global_wireguard_ipv4_subnet | string)) | ipaddr('netmask') }}"
global_wireguard_ipv4_range: "10.162.4.0/{{ global_wireguard_ipv4_subnet }}"
# TODO Wireguard IPv6 Support

global_systemd_configuration_directory: "/etc/systemd/system"

# Projects

# WG Minecraft
project_wg_minecraft_port: 25566

# Miscellaneous

## IP Blocklist

global_ip_blocklist: "{{ (lookup('file', 'misc/blocklists/ipv4.txt')).split('\n') }}"