389 lines
7.1 KiB
YAML
389 lines
7.1 KiB
YAML
---
|
|
# Global vars
|
|
timezone: "Asia/Seoul"
|
|
ansible_ssh_private_key_file: "/etc/secrets/{{ hostvars['console']['node']['uid'] }}/id_console"
|
|
|
|
# CA
|
|
root_cert_filename: "ilnmors_root_ca.crt"
|
|
intermediate_cert_filename: "ilnmors_intermediate_ca.crt"
|
|
intermediate_key_filename: "ilnmors_intermediate_ca.key"
|
|
|
|
# Domains
|
|
domain:
|
|
public: "ilnmors.com"
|
|
internal: "ilnmors.internal"
|
|
dc: "dc=ilnmors,dc=internal"
|
|
org: "ilnmors"
|
|
|
|
services:
|
|
# common
|
|
wireguard:
|
|
domain:
|
|
public: "vpn"
|
|
ports:
|
|
udp: "11290"
|
|
crowdsec:
|
|
domain:
|
|
internal: "crowdsec"
|
|
ports:
|
|
https: "8080"
|
|
sub:
|
|
machines:
|
|
- "fw"
|
|
- "vmm"
|
|
- "bk"
|
|
- "infra"
|
|
- "auth"
|
|
- "app"
|
|
bouncers:
|
|
- "fw"
|
|
- "caddy"
|
|
dependency:
|
|
cert: true
|
|
kopia:
|
|
domain:
|
|
internal: "kopia"
|
|
ports:
|
|
https: "51515"
|
|
uid: "951"
|
|
dependency:
|
|
cert: true
|
|
caddy:
|
|
ports:
|
|
http: "2080"
|
|
https: "2443"
|
|
# fw
|
|
bind:
|
|
domain:
|
|
internal: "bind"
|
|
ports:
|
|
dns: "53"
|
|
blocky:
|
|
domain:
|
|
internal: "blocky"
|
|
ports:
|
|
https: "443"
|
|
dns: "53"
|
|
dot: "853"
|
|
dependency:
|
|
cert: true
|
|
# infra
|
|
postgresql:
|
|
domain:
|
|
internal: "postgresql"
|
|
ports:
|
|
tcp: "5432" # postgresql db connection port
|
|
subuid: "100998"
|
|
dependency:
|
|
cert: true
|
|
mariadb:
|
|
domain:
|
|
internal: "mariadb"
|
|
ports:
|
|
tcp: "3306" # mariadb db connection port
|
|
subuid: "100998"
|
|
dependency:
|
|
cert: true
|
|
ldap:
|
|
domain:
|
|
internal: "ldap"
|
|
ports:
|
|
http: "17170"
|
|
ldaps: "6360"
|
|
subuid: "100999"
|
|
dependency:
|
|
cert: true
|
|
web: "infra-internal"
|
|
db: "postgresql"
|
|
maddy:
|
|
domain:
|
|
internal: "maddy"
|
|
ports:
|
|
smtp: "2587"
|
|
imaps: "2993"
|
|
dependency:
|
|
cert: true
|
|
db: "postgresql"
|
|
ca:
|
|
domain:
|
|
internal: "ca"
|
|
ports:
|
|
https: "9000"
|
|
subuid: "100999"
|
|
x509-exporter:
|
|
ports:
|
|
http: "9793"
|
|
subuid: "165533"
|
|
prometheus:
|
|
domain:
|
|
internal: "prometheus"
|
|
ports:
|
|
https: "9090"
|
|
subuid: "165533"
|
|
dependency:
|
|
cert: true
|
|
web: "infra-internal"
|
|
loki:
|
|
domain:
|
|
internal: "loki"
|
|
ports:
|
|
https: "3100"
|
|
subuid: "110000"
|
|
dependency:
|
|
cert: true
|
|
grafana:
|
|
domain:
|
|
internal: "grafana"
|
|
ports:
|
|
http: "3000" # infra
|
|
subuid: "100471"
|
|
dependency:
|
|
web: "infra-internal"
|
|
db: "postgresql"
|
|
# auth
|
|
authelia:
|
|
domain:
|
|
public: "authelia"
|
|
ports:
|
|
http: "9091"
|
|
dependency:
|
|
web: "auth-public"
|
|
db: "postgresql"
|
|
# app
|
|
redis:
|
|
subuid: "100998"
|
|
homepage:
|
|
domain:
|
|
public: "@"
|
|
internal: "homepage.app"
|
|
ports:
|
|
http: "3000" # app
|
|
dependency:
|
|
web: "app-public"
|
|
snappymail:
|
|
domain:
|
|
public: "webmail"
|
|
internal: "webmail.app"
|
|
ports:
|
|
http: "8888"
|
|
subuid: "100081"
|
|
dependency:
|
|
web: "app-public"
|
|
vaultwarden:
|
|
domain:
|
|
public: "vault"
|
|
internal: "vault.app"
|
|
ports:
|
|
http: "8000"
|
|
dependency:
|
|
web: "app-public"
|
|
db: "postgresql"
|
|
linkwarden:
|
|
domain:
|
|
public: "link"
|
|
internal: "link.app"
|
|
ports:
|
|
http: "3005"
|
|
dependency:
|
|
web: "app-public"
|
|
db: "postgresql"
|
|
gitea:
|
|
domain:
|
|
public: "gitea"
|
|
internal: "gitea.app"
|
|
ports:
|
|
http: "3001"
|
|
subuid: "100999"
|
|
dependency:
|
|
web: "app-public"
|
|
db: "postgresql"
|
|
mastodon:
|
|
domain:
|
|
public: "mastodon"
|
|
internal: "mastodon.app"
|
|
ports:
|
|
http: "3002"
|
|
api: "4000"
|
|
redis: "6379"
|
|
subuid: "100990"
|
|
route:
|
|
api: "/api/v1/streaming*"
|
|
dependency:
|
|
web: "app-public"
|
|
db: "postgresql"
|
|
nextcloud:
|
|
domain:
|
|
public: "nextcloud"
|
|
internal: "nextcloud.app"
|
|
ports:
|
|
http: "8001"
|
|
redis: "6380"
|
|
subuid: "100032"
|
|
dependency:
|
|
web: "app-public"
|
|
db: "postgresql"
|
|
collabora:
|
|
domain:
|
|
public: "collabora"
|
|
internal: "collabora.app"
|
|
ports:
|
|
http: "9980"
|
|
subuid: "101000"
|
|
dependency:
|
|
web: "app-public"
|
|
immich:
|
|
domain:
|
|
public: "immich"
|
|
internal: "immich.app"
|
|
ports:
|
|
http: "2283"
|
|
redis: "6381"
|
|
dependency:
|
|
web: "app-public"
|
|
db: "postgresql"
|
|
immich-ml:
|
|
ports:
|
|
http: "3003"
|
|
booklogr:
|
|
domain:
|
|
public: "booklogr"
|
|
internal: "booklogr.app"
|
|
ports:
|
|
http: "5150"
|
|
api: "5000"
|
|
route:
|
|
api: "/v1 /v1/*"
|
|
deny: "/v1/login /v1/login/* /v1/register /v1/register/*"
|
|
dependency:
|
|
web: "app-public"
|
|
db: "postgresql"
|
|
outline:
|
|
domain:
|
|
public: "outline"
|
|
internal: "outline.app"
|
|
ports:
|
|
http: "3004"
|
|
redis: "6382"
|
|
subuid: "101000"
|
|
dependency:
|
|
web: "app-public"
|
|
db: "postgresql"
|
|
bookstack:
|
|
domain:
|
|
public: "bookstack"
|
|
internal: "bookstack.app"
|
|
ports:
|
|
http: "8004"
|
|
subuid: "100032"
|
|
dependency:
|
|
web: "app-public"
|
|
db: "mariadb"
|
|
sure:
|
|
domain:
|
|
public: "sure"
|
|
internal: "sure.app"
|
|
ports:
|
|
http: "3006"
|
|
redis: "6383"
|
|
subuid: "100999"
|
|
dependency:
|
|
web: "app-public"
|
|
db: "postgresql"
|
|
papra:
|
|
domain:
|
|
public: "papra"
|
|
internal: "papra.app"
|
|
ports:
|
|
http: "1221"
|
|
subuid: "100998"
|
|
dependency:
|
|
web: "app-public"
|
|
mealie:
|
|
domain:
|
|
public: "mealie"
|
|
internal: "mealie.app"
|
|
ports:
|
|
http: "9000"
|
|
subuid: "100910"
|
|
dependency:
|
|
web: "app-public"
|
|
db: "postgresql"
|
|
tandoor:
|
|
domain:
|
|
public: "tandoor"
|
|
internal: "tandoor.app"
|
|
ports:
|
|
http: "8003"
|
|
dependency:
|
|
web: "app-public"
|
|
db: "postgresql"
|
|
homebox:
|
|
domain:
|
|
public: "homebox"
|
|
internal: "homebox.app"
|
|
ports:
|
|
http: "7745"
|
|
dependency:
|
|
web: "app-public"
|
|
db: "postgresql"
|
|
romm:
|
|
domain:
|
|
public: "romm"
|
|
internal: "romm.app"
|
|
ports:
|
|
http: "8002"
|
|
redis: "6384"
|
|
subuid: "100999"
|
|
dependency:
|
|
web: "app-public"
|
|
db: "postgresql"
|
|
|
|
version:
|
|
packages:
|
|
sops: "3.13.2"
|
|
step: "0.30.2"
|
|
kopia: "0.23.1"
|
|
blocky: "0.33.0"
|
|
alloy: "1.17.1"
|
|
containers:
|
|
# common
|
|
caddy: "2.11.4"
|
|
# infra
|
|
ca: "0.30.2"
|
|
## Postgresql
|
|
postgresql: "18.4"
|
|
## Mariadb
|
|
mariadb: "12.3.2"
|
|
### For immich - https://github.com/immich-app/base-images/blob/main/postgres/versions.yaml
|
|
vectorchord: "1.1.1"
|
|
## lldap
|
|
ldap: "v0.6.3"
|
|
## maddy
|
|
maddy: "0.9.5"
|
|
x509-exporter: "4.1.0"
|
|
prometheus: "v3.13.2"
|
|
loki: "3.7.4"
|
|
grafana: "13.1.1"
|
|
# Auth
|
|
authelia: "4.39.20"
|
|
# App
|
|
vaultwarden: "1.37.1"
|
|
gitea: "1.27.2"
|
|
redis: "8.10.0"
|
|
immich: "v3.1.0"
|
|
nextcloud: "34.0.3"
|
|
collabora: "26.04.3.1.1"
|
|
sure: "0.7.3"
|
|
outline: "1.9.2"
|
|
mealie: "v3.22.0"
|
|
homebox: "0.26.2"
|
|
homepage: "v2.0.0"
|
|
snappymail: "v2.38.2"
|
|
mastodon: "v4.6.6"
|
|
booklogr: "v1.11.1"
|
|
papra: "26.6.1-rootless"
|
|
romm: "5.1.0"
|
|
tandoor: "2.6.13"
|
|
bookstack: "26.5.3"
|
|
linkwarden: "v2.16.1"
|