162 lines
3.5 KiB
YAML
162 lines
3.5 KiB
YAML
---
|
|
# Node Factors
|
|
node:
|
|
name: "fw"
|
|
group: "svadmins"
|
|
uid: 2001
|
|
home_path: "/home/fw"
|
|
ssh_san: "{{ node['name'] }},{{ node['name'] }}.{{ domain['internal'] }}"
|
|
local_san: "localhost {{ node['name'] }}.{{ domain['internal'] }}"
|
|
|
|
# VM Factors
|
|
vm:
|
|
name: "fw"
|
|
cpu: 4
|
|
cpu_pin: |
|
|
<vcpupin vcpu='0' cpuset='0'/>
|
|
<vcpupin vcpu='1' cpuset='1'/>
|
|
<vcpupin vcpu='2' cpuset='4'/>
|
|
<vcpupin vcpu='3' cpuset='5'/>
|
|
<emulatorpin cpuset='4-5'/>
|
|
shares: 2048
|
|
memory: 4
|
|
storage: 64
|
|
wan_mac: "0a:49:6e:4d:00:00"
|
|
lan_mac: "0a:49:6e:4d:00:01"
|
|
wan_net: "wan-net"
|
|
lan_net: "lan-net"
|
|
lan_group: "vlan-trunk"
|
|
|
|
# Network Factors
|
|
network:
|
|
dns_serial: "{{ now().strftime('%Y%m%d') }}00"
|
|
subnet:
|
|
ipv4:
|
|
client: "192.168.1.0/24"
|
|
server: "192.168.10.0/24"
|
|
user: "192.168.20.0/24"
|
|
wg: "192.168.99.0/24"
|
|
lla: "169.254.0.0/16"
|
|
ipv6:
|
|
client: "fd00:1::/64"
|
|
server: "fd00:10::/64"
|
|
wg: "fd00:99::/64"
|
|
lla: "fe80::/10"
|
|
podman:
|
|
ipv4:
|
|
lla: "169.254.1.2"
|
|
reverse_zone:
|
|
ipv4:
|
|
client: "1.168.192.in-addr.arpa"
|
|
server: "10.168.192.in-addr.arpa"
|
|
ipv6:
|
|
client: "0.0.0.0.0.0.0.0.1.0.0.0.0.0.d.f.ip6.arpa"
|
|
server: "0.0.0.0.0.0.0.0.0.1.0.0.0.0.d.f.ip6.arpa"
|
|
fw:
|
|
ipv4:
|
|
client: "192.168.1.1"
|
|
server: "192.168.10.1"
|
|
user: "192.168.20.1"
|
|
wg: "192.168.99.1"
|
|
reverse: "1"
|
|
ipv6:
|
|
client: "fd00:1::1"
|
|
server: "fd00:10::1"
|
|
wg: "fd00:99::1"
|
|
reverse: "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0"
|
|
alias:
|
|
- "ntp"
|
|
- "crowdsec"
|
|
blocky:
|
|
ipv4:
|
|
server: "192.168.10.2"
|
|
reverse: "2"
|
|
ipv6:
|
|
server: "fd00:10::2"
|
|
reverse: "2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0"
|
|
bind:
|
|
ipv4:
|
|
server: "192.168.10.3"
|
|
reverse: "3"
|
|
ipv6:
|
|
server: "fd00:10::3"
|
|
reverse: "3.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0"
|
|
console:
|
|
ipv4:
|
|
client: "192.168.1.20"
|
|
wg: "192.168.99.20"
|
|
reverse: "20"
|
|
ipv6:
|
|
client: "fd00:1::20"
|
|
wg: "fd00:99::20"
|
|
reverse: "0.2.0.0.0.0.0.0.0.0.0.0.0.0.0.0"
|
|
vmm:
|
|
ipv4:
|
|
client: "192.168.1.10"
|
|
server: "192.168.10.10"
|
|
reverse: "10"
|
|
ipv6:
|
|
client: "fd00:1::10"
|
|
server: "fd00:10::10"
|
|
reverse: "0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0"
|
|
alias:
|
|
- "init.vmm"
|
|
bk:
|
|
ipv4:
|
|
server: "192.168.10.9"
|
|
reverse: "9"
|
|
ipv6:
|
|
server: "fd00:10::9"
|
|
reverse: "9.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0"
|
|
alias:
|
|
- "kopia"
|
|
infra:
|
|
ipv4:
|
|
server: "192.168.10.11"
|
|
reverse: "11"
|
|
ipv6:
|
|
server: "fd00:10::11"
|
|
reverse: "1.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0"
|
|
alias:
|
|
- "rustfs"
|
|
- "ca"
|
|
- "postgresql"
|
|
- "mariadb"
|
|
- "ldap"
|
|
- "maddy"
|
|
- "prometheus"
|
|
- "loki"
|
|
- "grafana"
|
|
auth:
|
|
ipv4:
|
|
server: "192.168.10.12"
|
|
reverse: "12"
|
|
ipv6:
|
|
server: "fd00:10::12"
|
|
reverse: "2.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0"
|
|
alias:
|
|
- "authelia"
|
|
app:
|
|
ipv4:
|
|
server: "192.168.10.13"
|
|
reverse: "13"
|
|
ipv6:
|
|
server: "fd00:10::13"
|
|
reverse: "3.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0"
|
|
alias:
|
|
- "*.app"
|
|
switch:
|
|
ipv4:
|
|
client: "192.168.1.2"
|
|
reverse: "2"
|
|
printer:
|
|
ipv4:
|
|
client: "192.168.1.101"
|
|
reverse: "101"
|
|
|
|
# Suricata Factors
|
|
# suricata_home_net: '[10.0.0.0/8,172.16.0.0/12,192.168.0.0/16]'
|
|
suricata:
|
|
home_net: '[10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,fd00::/8,fe80::/8]'
|
|
interfaces: ["wan", "client", "server", "user"]
|