Move inventory to separate directory

This commit is contained in:
Alexander Dietrich 2020-03-23 21:17:56 +01:00
parent bbb7c76eef
commit 075b5bd008
13 changed files with 9 additions and 41 deletions

2
inventory/group_vars/all Normal file
View file

@ -0,0 +1,2 @@
ansible_python_interpreter: /usr/bin/python3
basics_autoupdate_mail: backend@hamburg.freifunk.net

View file

@ -0,0 +1,3 @@
---
prefix4: 10.112.0.0/18
prefix6: 2a03:2267::/64

1
inventory/group_vars/vms Normal file
View file

@ -0,0 +1 @@
basics_microcode_updates: False

View file

@ -0,0 +1 @@
ansible_python_interpreter: /usr/bin/python2

View file

@ -0,0 +1,9 @@
basics_ssh_match_blocks:
- match: User certsync
options:
- AuthorizedKeysFile /home/certsync/authorized_keys
- ChrootDirectory /home/certsync/root
- ForceCommand internal-sftp
nginx_resolver: 192.76.134.90 212.12.50.158
updates_tls_crt: /etc/letsencrypt/live/updates.hamburg.freifunk.net/fullchain.pem
updates_tls_key: /etc/letsencrypt/live/updates.hamburg.freifunk.net/privkey.pem

11
inventory/host_vars/srv02 Normal file
View file

@ -0,0 +1,11 @@
basics_autoupdate_origins:
- o=Node Source,n=${distro_codename}
- o=Prosody,n=${distro_codename}
- o=TorProject,n=${distro_codename}
hopglass_frontend_tls_crt: /etc/letsencrypt/live/hopglass.hamburg.freifunk.net/fullchain.pem
hopglass_frontend_tls_key: /etc/letsencrypt/live/hopglass.hamburg.freifunk.net/privkey.pem
media_tls_crt: /etc/letsencrypt/live/media.hamburg.freifunk.net/fullchain.pem
media_tls_key: /etc/letsencrypt/live/media.hamburg.freifunk.net/privkey.pem
meta_tls_crt: /etc/letsencrypt/live/hamburg.freifunk.net/fullchain.pem
meta_tls_key: /etc/letsencrypt/live/hamburg.freifunk.net/privkey.pem
nginx_resolver: 127.0.0.1

View file

@ -0,0 +1,9 @@
certsync_host: srv01.hamburg.freifunk.net
nginx_resolver: 80.252.105.162 80.252.105.194
nginx_tls_versions: TLSv1.2
updates_group: www-data
updates_letsencrypt: srv01
updates_owner: ffupdates
updates_root: /var/www/updates
updates_tls_crt: /etc/ssl/certsync/updates.hamburg.freifunk.net.crt
updates_tls_key: /etc/ssl/certsync/updates.hamburg.freifunk.net.key

View file

@ -0,0 +1,2 @@
letsencrypt_webroot: /var/www/mail
nginx_resolver: 80.252.105.162 80.252.105.194

30
inventory/hosts Normal file
View file

@ -0,0 +1,30 @@
[ffhh]
srv01 ansible_host=srv01.hamburg.freifunk.net
#srv02 ansible_host=srv02.hamburg.freifunk.net
srv03 ansible_host=srv03.hamburg.freifunk.net
[certbot]
srv01
#srv02
[certsync]
srv03
[media]
#srv02
[meta]
#srv02
[nginx]
#gw03-new ansible_host=gw03-new.hamburg.freifunk.net
[updates]
srv01
srv03
[vms]
#gw03-new
srv01
#srv02
srv03