You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
160 lines
4.4 KiB
YAML
160 lines
4.4 KiB
YAML
---
|
|
|
|
TIMEZONE: "Europe/Berlin"
|
|
|
|
ansible_user: zocker
|
|
|
|
ansible_become: yes
|
|
ansible_become_pass: "{{ zocker_password }}"
|
|
|
|
zocker_authorized_keys_url: "https://git.banananet.work/zocker.keys"
|
|
|
|
update_scripts_directory: "/root/update"
|
|
|
|
backup_gpg_fingerprint: "73D09948B2392D688A45DC8393E1BD26F6B02FB7"
|
|
backups_to_keep: 1
|
|
backups_directory: "/backups"
|
|
backups_files_directory: "{{ backups_directory }}/files"
|
|
backups_mysql_database_directory: "{{ backups_directory }}/mysql_databases"
|
|
backup_scripts_directory: "/root/backup"
|
|
backup_files_scripts_directory: "{{ backup_scripts_directory }}/files"
|
|
backup_mysql_database_scripts_directory: "{{ backup_scripts_directory }}/mysql_databases"
|
|
|
|
global_local_user: "{{ lookup('env', 'USER') }}"
|
|
|
|
global_deployment_directory: "/ansible"
|
|
global_configuration_environment_directory: "{{ global_deployment_directory }}/configurations"
|
|
global_helper_directory: "{{ global_deployment_directory }}/helpers"
|
|
global_webservers_directory: "/var/webservers"
|
|
global_socket_directory: "/var/run"
|
|
|
|
global_credentials_directory: "credentials"
|
|
global_public_key_directory: "public_keys"
|
|
global_ssh_key_directory: "{{ global_public_key_directory }}/ssh"
|
|
global_ssh_host_key_directory: "{{ global_ssh_key_directory }}/hosts"
|
|
|
|
global_wireguard_private_directory: "{{ global_credentials_directory }}/wireguard"
|
|
global_wireguard_public_directory: "{{ global_public_key_directory }}/wireguard/keys"
|
|
global_wireguard_peers_directory: "{{ global_public_key_directory }}/wireguard/peers"
|
|
|
|
ssh_host_key_types:
|
|
- ecdsa
|
|
- ed25519
|
|
- rsa
|
|
|
|
# (Backend) Port Mappings
|
|
|
|
backend_smtp_port: 12891
|
|
backend_imap_port: 12892
|
|
|
|
# Application configurations
|
|
|
|
global_ansible_facts_directory: "/etc/ansible/facts.d"
|
|
|
|
global_apparmor_profiles_directory: "/etc/apparmor.d"
|
|
|
|
global_apt_sources_directory: "/etc/apt/sources.list.d"
|
|
|
|
global_ip_discover_url: "https://keys.banananet.work/ping"
|
|
global_ip_discover_register_pass: "{{ lookup('password', 'credentials/ip_discover/register_pass chars=digits,ascii_letters length=256') }}"
|
|
|
|
global_interfaces_directory: "/etc/network/interfaces.d"
|
|
|
|
global_ssh_configuration_directory: "/etc/ssh/"
|
|
global_ssh_configuration_environment_directory: "{{ global_configuration_environment_directory }}/ssh"
|
|
global_ssh_configuration_link_name: "config"
|
|
global_ssh_configuration_link: "{{ global_ssh_configuration_environment_directory }}/{{ global_ssh_configuration_link_name }}"
|
|
|
|
global_sudoers_directory: "/etc/sudoers.d"
|
|
|
|
global_wireguard_configuration_directory: "/etc/wireguard"
|
|
global_wireguard_configuration_environment_directory: "{{ global_configuration_environment_directory }}/wireguard"
|
|
global_wireguard_configuration_link_name: "wireguard"
|
|
global_wireguard_configuration_link: "{{ global_wireguard_configuration_environment_directory }}/{{ global_wireguard_configuration_link_name }}"
|
|
global_wireguard_port: 51820
|
|
global_wireguard_ipv4_subnet: 22
|
|
global_wireguard_ipv4_netmask: "{{ ('0.0.0.0/' + (global_wireguard_ipv4_subnet | string)) | ipaddr('netmask') }}"
|
|
global_wireguard_ipv4_range: "10.162.4.0/{{ global_wireguard_ipv4_subnet }}"
|
|
# TODO Wireguard IPv6 Support
|
|
|
|
global_systemd_configuration_directory: "/etc/systemd/system"
|
|
|
|
# Projects
|
|
|
|
# WG Minecraft
|
|
project_wg_minecraft_port: 25566
|
|
|
|
# Miscellaneous
|
|
|
|
## IP Blocklist
|
|
|
|
global_ip_blocklist:
|
|
- 110.249.212.46
|
|
- 111.162.145.119
|
|
- 111.93.235.74
|
|
- 114.104.188.208
|
|
- 116.105.216.179
|
|
- 118.27.6.66
|
|
- 13.75.232.117
|
|
- 138.68.190.89
|
|
- 140.143.16.158
|
|
- 142.93.235.47
|
|
- 157.230.123.253
|
|
- 163.172.135.42
|
|
- 163.172.174.5
|
|
- 164.68.112.178
|
|
- 167.71.57.61
|
|
- 167.86.81.151
|
|
- 167.86.81.223
|
|
- 178.62.247.89
|
|
- 185.202.1.164
|
|
- 185.202.1.240
|
|
- 185.202.2.57
|
|
- 185.247.118.171
|
|
- 188.226.156.171
|
|
- 190.249.138.78
|
|
- 192.241.244.143
|
|
- 193.29.15.107
|
|
- 193.57.40.38
|
|
- 194.180.224.249
|
|
- 198.199.95.19
|
|
- 202.70.66.228
|
|
- 212.47.246.0
|
|
- 2.134.147.126
|
|
- 220.200.161.148
|
|
- 222.186.19.221
|
|
- 27.66.24.65
|
|
- 27.78.14.83
|
|
- 37.139.19.95
|
|
- 37.139.8.105
|
|
- 41.234.66.22
|
|
- 42.113.145.3
|
|
- 45.136.108.20
|
|
- 45.136.108.84
|
|
- 45.227.255.119
|
|
- 45.33.70.146
|
|
- 5.189.140.225
|
|
- 54.37.65.76
|
|
- 54.38.185.226
|
|
- 62.171.147.114
|
|
- 69.148.241.18
|
|
- 69.164.198.223
|
|
- 79.183.19.228
|
|
- 80.82.65.234
|
|
- 83.97.20.36
|
|
- 86.36.20.20
|
|
- 91.229.23.92
|
|
- 92.63.194.104
|
|
- 92.63.194.105
|
|
- 92.63.194.106
|
|
- 92.63.194.107
|
|
- 92.63.194.108
|
|
- 92.63.194.11
|
|
- 92.63.194.22
|
|
- 92.63.194.25
|
|
- 92.63.194.32
|
|
- 92.63.194.59
|
|
- 92.63.194.7
|
|
- 92.63.194.90
|
|
- 94.53.199.250
|