il/ilnmors-homelab
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
99536c53555a02185366e5805a0eee10806a58bc
ilnmors-homelab/ansible/inventory/group_vars/all.yaml
T
il 99536c5355 2026-SEP-09
2026-09-09 23:13:28 +09:00

462 lines
10 KiB
YAML
Raw Blame History

---
# Global vars
timezone: "Asia/Seoul"
ansible_ssh_private_key_file: "/etc/secrets/{{ hostvars['console']['node']['uid'] }}/id_console"
# CA
root_cert_filename: "ilnmors_root_ca.crt"
intermediate_cert_filename: "ilnmors_intermediate_ca.crt"
intermediate_key_filename: "ilnmors_intermediate_ca.key"
# Domains
domain:
public: "ilnmors.com"
internal: "ilnmors.internal"
dc: "dc=ilnmors,dc=internal"
org: "ilnmors"
services:
# common
wireguard:
domain:
public: "vpn"
ports:
udp: "11290"
crowdsec:
domain:
internal: "crowdsec"
ports:
https: "8080"
sub:
machines:
- "fw"
- "vmm"
- "bk"
- "infra"
- "auth"
- "app"
bouncers:
- "fw"
- "caddy"
dependency:
cert: true
kopia:
domain:
internal: "kopia"
ports:
https: "51515"
uid: "951"
dependency:
cert: true
caddy:
ports:
http: "2080"
https: "2443"
# fw
bind:
domain:
internal: "bind"
ports:
dns: "53"
blocky:
domain:
internal: "blocky"
ports:
https: "443"
dns: "53"
dot: "853"
dependency:
cert: true
# infra
postgresql:
domain:
internal: "postgresql"
ports:
tcp: "5432" # postgresql db connection port
subuid: "100998"
dependency:
cert: true
mariadb:
domain:
internal: "mariadb"
ports:
tcp: "3306" # mariadb db connection port
subuid: "100998"
dependency:
cert: true
ldap:
domain:
internal: "ldap"
ports:
http: "17170"
ldaps: "6360"
subuid: "100999"
dependency:
cert: true
web: "infra-internal"
db: "postgresql"
maddy:
domain:
internal: "maddy"
ports:
smtp: "2587"
imaps: "2993"
dependency:
cert: true
db: "postgresql"
ca:
domain:
internal: "ca"
ports:
https: "9000"
subuid: "100999"
x509-exporter:
ports:
http: "9793"
subuid: "165533"
prometheus:
domain:
internal: "prometheus"
ports:
https: "9090"
subuid: "165533"
dependency:
cert: true
web: "infra-internal"
loki:
domain:
internal: "loki"
ports:
https: "3100"
subuid: "110000"
dependency:
cert: true
grafana:
domain:
internal: "grafana"
ports:
http: "3000" # infra
subuid: "100471"
dependency:
web: "infra-internal"
db: "postgresql"
# auth
authelia:
domain:
public: "authelia"
ports:
http: "9091"
dependency:
web: "auth-public"
db: "postgresql"
# app
redis:
subuid: "100998"
homepage:
domain:
public: "@"
internal: "homepage.app"
ports:
http: "3000" # app
dependency:
web: "app-public"
openwebui:
domain:
public: "openwebui"
internal: "openwebui.app"
ports:
http: "8002"
dependency:
web: "app-public"
db: "postgresql"
llama:
ports:
http: "10000"
dependency:
models:
default: |
n-gpu-layers = all
kv-unified = true
cache-prompt = true
cache-type-k = q8_0
cache-type-v = q8_0
flash-attn = auto
reasoning = off
jinja = true
lazy-mode = off
Nemotron3.5-Lightning-30B-A3B: |
model = /models/Nemotron3.5-Lightning-30B-A3B/Nemotron-3.5-Lightning-30B-A3B-Heretic-Uncensored-Q4_K_M-GGUF.gguf
c = 65536
parallel = 2
load-on-startup = true
# version: mradermacher/LFM2-24B-A2B-heretic-ara-GGUF
# LFM2-24B-A2B: |
# model = /models/LFM2-24B-A2B/LFM2-24B-A2B-heretic-ara.Q4_K_M.gguf
# c = 65536
# parallel = 2
# load-on-startup = true
# # version: SC117/LFM2.5-VL-3B-Uncensored-GGUF
# LFM2-VL-3B: |
# model = /models/LFM2-VL-3B/LFM2.5-VL-3B-Uncensored-Q4_K_M.gguf
# mmproj = /models/LFM2-VL-3B/mmproj-LFM2.5-VL-3B-BF16.gguf
# c = 65536
# parallel = 1
# load-on-startup = true
# version: HauhauCS/Qwen3.6-35B-A3B-Uncensored-HauhauCS-Aggressive-Q4_K_M
# Qwen3.6: |
# model = /models/Qwen3.6-35B-A3B/Qwen3.6-35B-A3B-Q4_K_M.gguf
# mmproj = /models/Qwen3.6-35B-A3B/mmproj-Qwen3.6-35B-BF16.gguf
# c = 65536
# parallel = 2
# load-on-startup = true
# image-min-tokens = 1024
# # version: HauhauCS/Qwen3.5-2B-Uncensored-HauhauCS-Aggressiv-Q8_0
# Qwen3.5-image: |
# model = /models/Qwen3.5-2B/Qwen3.5-2B-Q8_0.gguf
# c = 32768
# parallel = 1
# load-on-startup = true
# version: LiquidAI/LFM2.5-2.6B-GGUF
# LFM2.5: |
# model = /models/LFM2.5-2.6B/LFM2.5-2.6B-Q8_0.gguf
# c = 32768
# parallel = 2
# load-on-startup = true
stablediffusion:
ports:
http: "10001"
dependency:
models:
active: "zImage"
zImage: |
--diffusion-model /models/zImage/moodyRealMix_zitV7Global-Q8_0.gguf \
--llm /models/zImage/Qwen3-4B-Instruct-2507-Q4_K_M.gguf \
--vae /models/zImage/ae.safetensors \
--backend gpu \
--cfg-scale 1.0 \
--steps 9 \
--vae-tiling \
--vae-tile-size 32x32 \
--vae-tile-overlap 0.5
snappymail:
domain:
public: "webmail"
internal: "webmail.app"
ports:
http: "8888"
subuid: "100081"
dependency:
web: "app-public"
vaultwarden:
domain:
public: "vault"
internal: "vault.app"
ports:
http: "8000"
dependency:
web: "app-public"
db: "postgresql"
linkding:
domain:
public: "linkding"
internal: "linkding.app"
ports:
http: "9090"
subuid: "100032"
dependency:
web: "app-public"
db: "postgresql"
gitea:
domain:
public: "gitea"
internal: "gitea.app"
ports:
http: "3001"
subuid: "100999"
dependency:
web: "app-public"
db: "postgresql"
mastodon:
domain:
public: "mastodon"
internal: "mastodon.app"
ports:
http: "3002"
api: "4000"
redis: "6379"
subuid: "100990"
route:
api: "/api/v1/streaming*"
dependency:
web: "app-public"
db: "postgresql"
groupoffice:
domain:
public: "groupoffice"
internal: "groupoffice.app"
ports:
http: "8005"
subuid: "100032"
route:
dav: true
dependency:
web: "app-public"
db: "mariadb"
kaneo:
domain:
public: "kaneo"
internal: "kaneo.app"
ports:
http: "8006"
subuid: "101000"
dependency:
web: "app-public"
db: "postgresql"
nextcloud:
domain:
public: "nextcloud"
internal: "nextcloud.app"
ports:
http: "8001"
redis: "6380"
subuid: "100032"
dependency:
web: "app-public"
db: "postgresql"
collabora:
domain:
public: "collabora"
internal: "collabora.app"
ports:
http: "9980"
subuid: "101000"
dependency:
web: "app-public"
immich:
domain:
public: "immich"
internal: "immich.app"
ports:
http: "2283"
redis: "6381"
dependency:
web: "app-public"
db: "postgresql"
immich-ml:
ports:
http: "3003"
outline:
domain:
public: "outline"
internal: "outline.app"
ports:
http: "3004"
redis: "6382"
subuid: "101000"
dependency:
web: "app-public"
db: "postgresql"
bookstack:
domain:
public: "bookstack"
internal: "bookstack.app"
ports:
http: "8004"
subuid: "100032"
dependency:
web: "app-public"
db: "mariadb"
sure:
domain:
public: "sure"
internal: "sure.app"
ports:
http: "3006"
redis: "6383"
subuid: "100999"
dependency:
web: "app-public"
db: "postgresql"
papra:
domain:
public: "papra"
internal: "papra.app"
ports:
http: "1221"
subuid: "100998"
dependency:
web: "app-public"
tandoor:
domain:
public: "tandoor"
internal: "tandoor.app"
ports:
http: "8003"
dependency:
web: "app-public"
db: "postgresql"
homebox:
domain:
public: "homebox"
internal: "homebox.app"
ports:
http: "7745"
dependency:
web: "app-public"
db: "postgresql"
version:
packages:
sops: "3.13.2"
step: "0.30.2"
kopia: "0.23.1"
blocky: "0.33.0"
alloy: "1.17.1"
containers:
# common
caddy: "2.11.4"
# infra
ca: "0.30.2"
## Postgresql
postgresql: "18.6"
## Mariadb
mariadb: "12.3.3"
### For immich - https://github.com/immich-app/base-images/blob/main/postgres/versions.yaml
vectorchord: "1.1.1"
## lldap
ldap: "v0.6.3"
## maddy
maddy: "0.9.5"
x509-exporter: "4.1.0"
prometheus: "v3.14.0"
loki: "3.7.7"
grafana: "13.2.1"
# Auth
authelia: "4.39.20"
# App
vaultwarden: "1.37.2"
gitea: "1.27.3"
redis: "8.10.1"
immich: "v3.1.0"
nextcloud: "34.0.3"
collabora: "26.04.3.2.1"
sure: "0.7.4"
outline: "1.10.0"
homebox: "0.26.2"
homepage: "v2.0.0"
snappymail: "v2.38.2"
mastodon: "v4.6.7"
papra: "26.6.1-rootless"
tandoor: "2.6.13"
bookstack: "26.5.4"
linkding: "1.46.2"
openwebui: "v0.11.3"
# https://github.com/ggml-org/llama.cpp/pkgs/container/llama.cpp/versions
llama: "server-vulkan-b10830"
# https://github.com/leejet/stable-diffusion.cpp/pkgs/container/stable-diffusion.cpp
# master-sycl@sha256:f27ebe3fea7dcb5978241425d3a115ba6736cfc33c42e75233f22f7411449e9c has problem in it, it cannot get vRAM from UMA properly
# Pin due to a SYCL/UMA false-OOM regression in newer stable-diffusion.cpp ModelManager memory accounting.
stablediffusion: "master-sycl@sha256:67ccb5d11bf55578f7938daeb7c9fee1d0dd1344c089c090b9065714d7960fd5"
groupoffice: "26.0.43"
kaneo: "2.23.2"
Reference in New Issue View Git Blame Copy Permalink