ansible-infra/roles/common/defaults/main.yml

99 lines
2.2 KiB
YAML

---
# defaults file for common
node_exporter_path: /
node_exporter_port: 9100
node_exporter_public_port: "9180"
node_exporter_password: password
nginx_config_dir: /etc/nginx/conf.d
nginx_ssl_dir: /etc/nginx/ssl
nginx_dhparam_size: 2048
users:
- name: ppbe
- name: coco
groups: []
user_default_groups:
- sudo
openssh_port: "22"
backup_owner: backup-sync
backup_group: "{{ backup_owner }}"
backup_chroot_dir: /mnt/backup
storage_box_enabled: no
storage_box_host: "{{ storage_box_username.split('-') | first }}.your-storagebox.de"
storage_box_port: 23
storage_box_path: /home/backup
storage_box_mount:
path: "{{ backup_chroot_dir }}"
owner: "{{ backup_owner }}"
group: "{{ backup_group }}"
options: "{{ storage_box_default_mount_options }}"
storage_box_username: u123456-sub1
storage_box_password: somesecret
borg_encryption_mode: keyfile
borg_repository: |-
{%- if storage_box_enabled -%}
{{ storage_box_host }}:{{ storage_box_path }}/borg
{%- else -%}
{{ backup_chroot_dir }}/borg
{%- endif -%}
borgmatic_config_dir: /etc/borgmatic
borgmatic_config:
location:
source_directories:
- /
repositories:
- "{{ borg_repository }}"
exclude_patterns:
- /dev
- /home/*/.cache
- /home/*/.gvfs
- /lib*
- /media
- /mnt
- /proc
- /tmp
- /run
- /swap*
- /sys
- /usr/src/linux-headers*
- /var/backups
- /var/cache/apt/archives
- /var/lib
- /var/log
- /var/run
- /var/snap
exclude_caches: true
storage:
umask: "{{ borg_umask }}"
encryption_passphrase: "{{ vault_borg_passphrase }}"
compression: zlib,7
retention:
keep_daily: 7
keep_weekly: 4
keep_monthly: 6
borgmatic_cron_hour: "3"
borgmatic_cron_minute: "0"
borgmatic_check_cron_weekday: "0"
borgmatic_check_cron_hour: "2"
borgmatic_check_cron_minute: "0"
smtp_accounts:
example:
host: mail.example.com
port: 587
from: no-reply@example.com
username: ahoy@example.com
password: secret
smtp_default_account: example
smtp_default_recipient: contact@example.com
smtp_aliases_path: /etc/aliases
postfix_sasl_secrets_path: /etc/postfix/sasl/passwd
postfix_senders_map_path: /etc/postfix/senders