feat(repo): IaaS baseline
This commit is contained in:
@@ -1,15 +1,14 @@
|
||||
---
|
||||
# Global vars
|
||||
ansible_ssh_private_key_file: "/etc/secrets/{{ hostvars['console']['node']['uid'] }}/id_console"
|
||||
timezone: "Asia/Seoul"
|
||||
ansible_ssh_private_key_file: "/etc/secrets/{{ hostvars['console']['node']['uid'] }}/id_console"
|
||||
|
||||
# CA
|
||||
root_cert_filename: "ilnmors_root_ca.crt"
|
||||
intermediate_cert_filename: "ilnmors_intermediate_ca.crt"
|
||||
intermediate_key_filename: "ilnmors_intermediate_ca.key"
|
||||
|
||||
|
||||
# local SAN and SSH SAN should be updated manually on host_vars
|
||||
# Domains
|
||||
domain:
|
||||
public: "ilnmors.com"
|
||||
internal: "ilnmors.internal"
|
||||
@@ -67,7 +66,7 @@ services:
|
||||
grafana:
|
||||
domain: "grafana"
|
||||
ports:
|
||||
http: "3000" # Infra server: Internal ports
|
||||
http: "3000"
|
||||
subuid: "100471"
|
||||
caddy:
|
||||
ports:
|
||||
@@ -98,7 +97,7 @@ services:
|
||||
public: "gitea"
|
||||
internal: "gitea.app"
|
||||
ports:
|
||||
http: "3000" # App server: Public ports
|
||||
http: "3001"
|
||||
subuid: "100999"
|
||||
immich:
|
||||
domain:
|
||||
@@ -118,16 +117,6 @@ services:
|
||||
http: "8001"
|
||||
redis: "6380"
|
||||
subuid: "100999"
|
||||
manticore:
|
||||
subuid: "100998"
|
||||
affine:
|
||||
domain:
|
||||
public: "affine"
|
||||
internal: "affine.app"
|
||||
ports:
|
||||
http: "3010"
|
||||
redis: "6381"
|
||||
manticore: "9308"
|
||||
nextcloud:
|
||||
domain:
|
||||
public: "nextcloud"
|
||||
@@ -148,7 +137,7 @@ services:
|
||||
public: "sure"
|
||||
internal: "sure.app"
|
||||
ports:
|
||||
http: "3001"
|
||||
http: "3002"
|
||||
redis: "6383"
|
||||
subuid: "100999"
|
||||
outline:
|
||||
@@ -156,7 +145,7 @@ services:
|
||||
public: "outline"
|
||||
internal: "outline.app"
|
||||
ports:
|
||||
http: "3002"
|
||||
http: "3004"
|
||||
redis: "6384"
|
||||
subuid: "101000"
|
||||
memos:
|
||||
@@ -164,43 +153,49 @@ services:
|
||||
public: "memos"
|
||||
internal: "memos.app"
|
||||
ports:
|
||||
http: "3004"
|
||||
http: "3005"
|
||||
subuid: "110000"
|
||||
mealie:
|
||||
domain:
|
||||
public: "mealie"
|
||||
internal: "mealie.app"
|
||||
ports:
|
||||
http: "9001"
|
||||
subuid: "100910"
|
||||
|
||||
version:
|
||||
packages:
|
||||
sops: "3.12.1"
|
||||
sops: "3.13.1"
|
||||
step: "0.30.2"
|
||||
kopia: "0.22.3"
|
||||
kopia: "0.23.0"
|
||||
blocky: "0.29.0"
|
||||
alloy: "1.16.1"
|
||||
containers:
|
||||
# common
|
||||
caddy: "2.11.2"
|
||||
caddy: "2.11.4"
|
||||
# infra
|
||||
step: "0.30.2"
|
||||
ldap: "v0.6.3"
|
||||
x509-exporter: "4.1.0"
|
||||
prometheus: "v3.11.3"
|
||||
prometheus: "v3.12.0"
|
||||
loki: "3.7.1"
|
||||
grafana: "13.0.1"
|
||||
## Postgresql
|
||||
postgresql: "18.3"
|
||||
postgresql: "18.4"
|
||||
# For immich - https://github.com/immich-app/base-images/blob/main/postgres/versions.yaml
|
||||
# pgvector: "v0.8.1"
|
||||
vectorchord: "1.1.1"
|
||||
# Auth
|
||||
authelia: "4.39.19"
|
||||
authelia: "4.39.20"
|
||||
# App
|
||||
vaultwarden: "1.36.0"
|
||||
gitea: "1.26.1"
|
||||
redis: "8.6.3"
|
||||
redis: "8.8.0"
|
||||
immich: "v2.7.5"
|
||||
paperless: "2.20.15"
|
||||
manticore: "25.0.0"
|
||||
affine: "0.26.3"
|
||||
nextcloud: "33.0.3"
|
||||
collabora: "25.04.9.4.1"
|
||||
sure: "0.7.0-hotfix.2"
|
||||
outline: "1.7.1"
|
||||
memos: "0.28.0"
|
||||
nextcloud: "33.0.5"
|
||||
collabora: "25.04.10.3.1"
|
||||
sure: "0.7.1"
|
||||
outline: "1.8.1"
|
||||
memos: "0.29.1"
|
||||
mealie: "v3.19.2"
|
||||
|
||||
@@ -1,7 +1,33 @@
|
||||
---
|
||||
node:
|
||||
name: "vmm"
|
||||
group: "svadmins"
|
||||
uid: 2000
|
||||
home_path: "/home/vmm"
|
||||
ssh_san: "vmm,vmm_init,vmm.ilnmors.internal,init.vmm.ilnmors.internal"
|
||||
local_san: "localhost vmm.ilnmors.internal"
|
||||
libvirt_path: "/var/lib/libvirt"
|
||||
ssh_san: "{{ node['name'] }},{{ node['name'] }}_init,{{ node['name'] }}.{{ domain['internal'] }},init.{{ node['name'] }}.{{ domain['internal'] }}"
|
||||
local_san: "localhost {{ node['name'] }}.{{ domain['internal'] }}"
|
||||
|
||||
hardware:
|
||||
mac:
|
||||
nic0: "c8:ff:bf:07:02:34"
|
||||
nic1: "c8:ff:bf:07:02:33"
|
||||
sfpp0: "c8:ff:bf:07:02:31"
|
||||
sfpp1: "c8:ff:bf:07:02:32"
|
||||
igpu:
|
||||
id: "8086:4628"
|
||||
address: "0000:00:02.0"
|
||||
domain: "0x0000"
|
||||
bus: "0x00"
|
||||
slot: "0x02"
|
||||
function: "0x0"
|
||||
hdd:
|
||||
data:
|
||||
hdd0: "WMC6N0E617S8"
|
||||
hdd1: "P6HVTL0W"
|
||||
hdd2: "P2GH354H"
|
||||
hdd3: "P6GJKSMP"
|
||||
btrfs:
|
||||
label: "DATA"
|
||||
level: "raid10"
|
||||
mount_point: "{{ node['libvirt_path'] }}/data"
|
||||
|
||||
Reference in New Issue
Block a user