Обновить group_vars/all.yml

This commit is contained in:
zailon 2026-05-14 14:40:54 +05:00
parent 6d16f9edbd
commit 75b53a302c

View File

@ -1,446 +1,458 @@
--- ---
# ============================================================================= # =============================================================================
# ОБЩИЕ НАСТРОЙКИ (GLOBAL) # ОБЩИЕ НАСТРОЙКИ (GLOBAL)
# ============================================================================= # =============================================================================
timezone: Asia/Yekaterinburg timezone: Asia/Yekaterinburg
system_locale: ru_RU.UTF-8 system_locale: ru_RU.UTF-8
x11_display_host: "192.168.1.101" x11_display_host: "192.168.1.101"
admin_user: zailon admin_user: zailon
# Включить мониторинг Docker для Node Exporter # Включить мониторинг Docker для Node Exporter
enable_docker_monitoring: true enable_docker_monitoring: true
# Базовые пакеты для всех серверов # Базовые пакеты для всех серверов
base_packages: base_packages:
- curl - curl
- wget - wget
- gnupg - gnupg
- ca-certificates - ca-certificates
- software-properties-common - software-properties-common
- tree - tree
- htop - htop
- nano - nano
- git - git
- apt-transport-https - apt-transport-https
- net-tools - net-tools
- dnsutils - dnsutils
- iputils-ping - iputils-ping
- traceroute - traceroute
- sudo - sudo
- mc - mc
- iftop - iftop
- pv - pv
- jq - jq
- unzip - unzip
- python3-requests - python3-requests
- python3-passlib - python3-passlib
# Пользовательские директории # Пользовательские директории
custom_directories: custom_directories:
- /opt/scripts - /opt/scripts
- /etc/apt/keyrings - /etc/apt/keyrings
# SSH ключи (публичные части) # SSH ключи (публичные части)
ssh_public_keys: ssh_public_keys:
- "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID8/+/WFFYDu4ljy1j9+bWp6MiXZ9a0iodoPHq+nEpIr ansible@Olimp" - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID8/+/WFFYDu4ljy1j9+bWp6MiXZ9a0iodoPHq+nEpIr ansible@Olimp"
- "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCbvnGZxQEGYuScClONbkbfVn2+Uo1kYYztXqMf9ku1lHkw+7IZa00LOMwv7QGBRvrtBcw+TWqaMst5FZ3R6oWcQc+nkBEYoRXe4f3AuuFAl9C9F6sEYM8fX6mAHIlWQhFyVslazZtVTQwnfRV0rnbtCduCu9liywM3fShFqBVwq7Y4nBjG648Zq+VfCHpbBE9XkZaMDyeOXdtppmLetywnBS33mbXMDgH09PMlRz097xfZLkpFdSi8WtDOtKSBiEHtZ+H0EZ42Cda2xMnqlgVtPxWGUirvv6CvDyTmuMzrjALZoSKhl3iD6Szd1YOJcAw6bv9gbJKxPkZchrB65ZXT ZailonOlimp" - "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCbvnGZxQEGYuScClONbkbfVn2+Uo1kYYztXqMf9ku1lHkw+7IZa00LOMwv7QGBRvrtBcw+TWqaMst5FZ3R6oWcQc+nkBEYoRXe4f3AuuFAl9C9F6sEYM8fX6mAHIlWQhFyVslazZtVTQwnfRV0rnbtCduCu9liywM3fShFqBVwq7Y4nBjG648Zq+VfCHpbBE9XkZaMDyeOXdtppmLetywnBS33mbXMDgH09PMlRz097xfZLkpFdSi8WtDOtKSBiEHtZ+H0EZ42Cda2xMnqlgVtPxWGUirvv6CvDyTmuMzrjALZoSKhl3iD6Szd1YOJcAw6bv9gbJKxPkZchrB65ZXT ZailonOlimp"
- "ssh-rsa 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 ansible@olimp" - "ssh-rsa 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 ansible@olimp"
# Пакеты для удаления # Пакеты для удаления
cleanup_packages: cleanup_packages:
- gparted - gparted
# ============================================================================= # =============================================================================
# DOCKER SETTINGS (LXC-safe versions) # DOCKER SETTINGS (LXC-safe versions)
# ============================================================================= # =============================================================================
# Безопасные версии пакетов Docker для LXC # Безопасные версии пакетов Docker для LXC
docker_ce_version: "5:28.2.2-1~ubuntu.{{ ansible_distribution_version }}~{{ ansible_distribution_release }}" docker_ce_version: "5:28.2.2-1~ubuntu.{{ ansible_distribution_version }}~{{ ansible_distribution_release }}"
docker_ce_cli_version: "5:28.2.2-1~ubuntu.{{ ansible_distribution_version }}~{{ ansible_distribution_release }}" docker_ce_cli_version: "5:28.2.2-1~ubuntu.{{ ansible_distribution_version }}~{{ ansible_distribution_release }}"
containerd_io_version: "1.7.28-1~ubuntu.{{ ansible_distribution_version }}~{{ ansible_distribution_release }}" containerd_io_version: "1.7.28-1~ubuntu.{{ ansible_distribution_version }}~{{ ansible_distribution_release }}"
runc_safe_version: "1.1.12-0ubuntu3" runc_safe_version: "1.1.12-0ubuntu3"
# Список пакетов для фиксации # Список пакетов для фиксации
docker_pinned_packages: docker_pinned_packages:
- "docker-ce={{ docker_ce_version }}" - "docker-ce={{ docker_ce_version }}"
- "docker-ce-cli={{ docker_ce_cli_version }}" - "docker-ce-cli={{ docker_ce_cli_version }}"
- "containerd.io={{ containerd_io_version }}" - "containerd.io={{ containerd_io_version }}"
- "runc={{ runc_safe_version }}" - "runc={{ runc_safe_version }}"
# Включить фиксацию версий в LXC # Включить фиксацию версий в LXC
lxc_docker_pin_enabled: true lxc_docker_pin_enabled: true
# Пакеты для исключения из upgrade в LXC (через APT pinning) # Пакеты для исключения из upgrade в LXC (через APT pinning)
docker_exclude_packages_lxc: docker_exclude_packages_lxc:
- containerd.io - containerd.io
- runc - runc
- docker-ce - docker-ce
- docker-ce-cli - docker-ce-cli
# ============================================================================= # =============================================================================
# СЕТЕВЫЕ НАСТРОЙКИ # СЕТЕВЫЕ НАСТРОЙКИ
# ============================================================================= # =============================================================================
server_ips: server_ips:
olimp: "192.168.1.200" olimp: "192.168.1.200"
gateway: "192.168.1.201" gateway: "192.168.1.201"
data: "192.168.1.202" data: "192.168.1.202"
media: "192.168.1.203" media: "192.168.1.203"
photo: "192.168.1.204" photo: "192.168.1.204"
nextcloud: "192.168.1.205" nextcloud: "192.168.1.205"
talk: "192.168.1.206" talk: "192.168.1.206"
games: "192.168.1.207" games: "192.168.1.207"
manage: "192.168.1.208" manage: "192.168.1.208"
git: "192.168.1.209" git: "192.168.1.209"
ansible: "192.168.1.210" ansible: "192.168.1.210"
torrent: "192.168.1.211" torrent: "192.168.1.211"
# ============================================================================= # =============================================================================
# МОНИТОРИНГ (VictoriaMetrics, Grafana, Loki) # МОНИТОРИНГ (VictoriaMetrics, Grafana, Loki)
# ============================================================================= # =============================================================================
monitoring_ports: monitoring_ports:
node_exporter: 9100 node_exporter: 9100
proxmox_exporter: 9223 proxmox_exporter: 9223
vmagent: 8429 vmagent: 8429
victoriametrics: 8428 victoriametrics: 8428
loki: 3100 loki: 3100
promtail: 9080 promtail: 9080
monitoring_groups: monitoring_groups:
node_exporter_servers: node_exporter_servers:
- "{{ server_ips.olimp }}" - "{{ server_ips.olimp }}"
- "{{ server_ips.gateway }}" - "{{ server_ips.gateway }}"
- "{{ server_ips.data }}" - "{{ server_ips.data }}"
- "{{ server_ips.media }}" - "{{ server_ips.media }}"
- "{{ server_ips.photo }}" - "{{ server_ips.photo }}"
- "{{ server_ips.talk }}" - "{{ server_ips.talk }}"
- "{{ server_ips.games }}" - "{{ server_ips.games }}"
- "{{ server_ips.manage }}" - "{{ server_ips.manage }}"
- "{{ server_ips.git }}" - "{{ server_ips.git }}"
- "{{ server_ips.ansible }}" - "{{ server_ips.ansible }}"
- "{{ server_ips.torrent }}" - "{{ server_ips.torrent }}"
proxmox_servers: proxmox_servers:
- "{{ server_ips.olimp }}" - "{{ server_ips.olimp }}"
promtail_servers: promtail_servers:
- "{{ server_ips.gateway }}" - "{{ server_ips.gateway }}"
- "{{ server_ips.data }}" - "{{ server_ips.data }}"
- "{{ server_ips.media }}" - "{{ server_ips.media }}"
- "{{ server_ips.photo }}" - "{{ server_ips.photo }}"
- "{{ server_ips.talk }}" - "{{ server_ips.talk }}"
- "{{ server_ips.games }}" - "{{ server_ips.games }}"
- "{{ server_ips.manage }}" - "{{ server_ips.manage }}"
- "{{ server_ips.git }}" - "{{ server_ips.git }}"
- "{{ server_ips.ansible }}" - "{{ server_ips.ansible }}"
- "{{ server_ips.torrent }}" - "{{ server_ips.torrent }}"
pve_exporter_user: "pve_exporter@pve" pve_exporter_user: "pve_exporter@pve"
pve_exporter_token_name: "grafana" pve_exporter_token_name: "grafana"
pve_exporter_token_value: "{{ vault_pve_exporter_token }}" pve_exporter_token_value: "{{ vault_pve_exporter_token }}"
victoriametrics_retention_months: 2 victoriametrics_retention_months: 2
victoriametrics_version: v1.101.0 victoriametrics_version: v1.101.0
grafana_version: 11.2.0 grafana_version: 11.2.0
grafana_admin_user: admin grafana_admin_user: admin
grafana_admin_password: "{{ vault_grafana_admin_password }}" grafana_admin_password: "{{ vault_grafana_admin_password }}"
grafana_root_url: https://mon.zailon.ru grafana_root_url: https://mon.zailon.ru
loki_version: "2.9.2" loki_version: "2.9.2"
loki_retention_days: 30 loki_retention_days: 30
cadvisor_enabled: true cadvisor_enabled: true
cadvisor_base_dir: "/opt/cadvisor" cadvisor_base_dir: "/opt/cadvisor"
cadvisor_port: 8080 cadvisor_port: 8080
# ============================================================================= # =============================================================================
# СЕРВИСЫ: GATEWAY (192.168.1.201) # СЕРВИСЫ: GATEWAY (192.168.1.201)
# ============================================================================= # =============================================================================
npm_base_dir: "/opt/npm" npm_base_dir: "/opt/npm"
npm_data_dir: "/opt/npm/data" npm_data_dir: "/opt/npm/data"
npm_letsencrypt_dir: "/opt/npm/letsencrypt" npm_letsencrypt_dir: "/opt/npm/letsencrypt"
heimdall_base_dir: "/opt/heimdall" heimdall_base_dir: "/opt/heimdall"
heimdall_config_dir: "/opt/heimdall/config" heimdall_config_dir: "/opt/heimdall/config"
heimdall_port: "45131" heimdall_port: "45131"
dashy_base_dir: "/opt/dashy" dashy_base_dir: "/opt/dashy"
dashy_config_dir: "{{ dashy_base_dir }}/config" dashy_config_dir: "{{ dashy_base_dir }}/config"
dashy_port: "45132" dashy_port: "45132"
dashy_domain: "start.zailon.ru" dashy_domain: "start.zailon.ru"
# ============================================================================= # =============================================================================
# СЕРВИСЫ: DATA (192.168.1.202) # СЕРВИСЫ: DATA (192.168.1.202)
# ============================================================================= # =============================================================================
bitwarden_base_dir: "/mnt/bitwarden" bitwarden_base_dir: "/mnt/bitwarden"
bitwarden_data_dir: "{{ bitwarden_base_dir }}/vw-data" bitwarden_data_dir: "{{ bitwarden_base_dir }}/vw-data"
bitwarden_port: "45131" bitwarden_port: "45131"
bitwarden_admin_token: "{{ vault_bitwarden_admin_token }}" bitwarden_admin_token: "{{ vault_bitwarden_admin_token }}"
bitwarden_websocket_enabled: true bitwarden_websocket_enabled: true
bitwarden_signups_allowed: false bitwarden_signups_allowed: false
bitwarden_smtp_host: "smtp.mail.ru" bitwarden_smtp_host: "smtp.mail.ru"
bitwarden_smtp_port: "465" bitwarden_smtp_port: "465"
bitwarden_smtp_ssl: true bitwarden_smtp_ssl: true
bitwarden_smtp_username: "zailon@bk.ru" bitwarden_smtp_username: "zailon@bk.ru"
bitwarden_smtp_password: "{{ vault_bitwarden_smtp_password }}" bitwarden_smtp_password: "{{ vault_bitwarden_smtp_password }}"
bitwarden_smtp_from: "zailon@bk.ru" bitwarden_smtp_from: "zailon@bk.ru"
bitwarden_domain: "https://bw.zailon.ru" bitwarden_domain: "https://bw.zailon.ru"
mealie_base_dir: "/mnt/mealie" mealie_base_dir: "/mnt/mealie"
mealie_data_dir: "/mnt/mealie/data" mealie_data_dir: "/mnt/mealie/data"
mealie_port: "45132" mealie_port: "45132"
mealie_db_type: "sqlite" mealie_db_type: "sqlite"
mealie_db_password: "{{ vault_mealie_db_password }}" mealie_db_password: "{{ vault_mealie_db_password }}"
bookstack_base_dir: "/mnt/bookstack" bookstack_base_dir: "/mnt/bookstack"
bookstack_config_dir: "/mnt/bookstack/config" bookstack_config_dir: "/mnt/bookstack/config"
bookstack_uploads_dir: "/mnt/bookstack/uploads" bookstack_uploads_dir: "/mnt/bookstack/uploads"
bookstack_db_dir: "/mnt/bookstack/db" bookstack_db_dir: "/mnt/bookstack/db"
bookstack_port: "45133" bookstack_port: "45133"
# ============================================================================= # =============================================================================
# СЕРВИСЫ: MEDIA (192.168.1.203) # СЕРВИСЫ: MEDIA (192.168.1.203)
# ============================================================================= # =============================================================================
service_config_base: "/mnt/service" service_config_base: "/mnt/service"
jellyfin_base_dir: "{{ service_config_base }}/jellyfin" jellyfin_base_dir: "{{ service_config_base }}/jellyfin"
jellyfin_config_dir: "{{ jellyfin_base_dir }}/config" jellyfin_config_dir: "{{ jellyfin_base_dir }}/config"
jellyfin_cache_dir: "{{ jellyfin_base_dir }}/cache" jellyfin_cache_dir: "{{ jellyfin_base_dir }}/cache"
jellyfin_logs_dir: "{{ jellyfin_base_dir }}/logs" jellyfin_logs_dir: "{{ jellyfin_base_dir }}/logs"
jellyfin_media_path: "/mnt/video" jellyfin_media_path: "/mnt/video"
jellyfin_port: "45131" jellyfin_port: "45131"
jellyfin_hw_acceleration: true jellyfin_hw_acceleration: true
audiobookshelf_base_dir: "{{ service_config_base }}/audiobookshelf" audiobookshelf_base_dir: "{{ service_config_base }}/audiobookshelf"
audiobookshelf_config_dir: "{{ audiobookshelf_base_dir }}/config" audiobookshelf_config_dir: "{{ audiobookshelf_base_dir }}/config"
audiobookshelf_db_dir: "{{ audiobookshelf_base_dir }}/db" audiobookshelf_db_dir: "{{ audiobookshelf_base_dir }}/db"
audiobookshelf_port: "45132" audiobookshelf_port: "45132"
calibre_base_dir: "{{ service_config_base }}/calibre" calibre_base_dir: "{{ service_config_base }}/calibre"
calibre_library_dir: "/mnt/books/calibre" calibre_library_dir: "/mnt/books/calibre"
calibre_config_dir: "{{ calibre_base_dir }}/config" calibre_config_dir: "{{ calibre_base_dir }}/config"
calibre_web_port: "45133" calibre_web_port: "45133"
calibre_web_db_path: "{{ calibre_config_dir }}/app.db" calibre_web_db_path: "{{ calibre_config_dir }}/app.db"
calibre_web_enable_uploading: true calibre_web_enable_uploading: true
calibre_web_enable_conversion: true calibre_web_enable_conversion: true
calibre_web_enable_registration: false calibre_web_enable_registration: false
calibre_web_enable_webdav: true calibre_web_enable_webdav: true
calibre_web_enable_opds: true calibre_web_enable_opds: true
ampache_base_dir: "{{ service_config_base }}/ampache" ampache_base_dir: "{{ service_config_base }}/ampache"
ampache_config_dir: "{{ ampache_base_dir }}/config" ampache_config_dir: "{{ ampache_base_dir }}/config"
ampache_logs_dir: "{{ ampache_base_dir }}/logs" ampache_logs_dir: "{{ ampache_base_dir }}/logs"
ampache_mysql_dir: "{{ ampache_base_dir }}/mysql" ampache_mysql_dir: "{{ ampache_base_dir }}/mysql"
ampache_port: "45134" ampache_port: "45134"
flibusta_base_dir: "/mnt/service/flibusta" flibusta_base_dir: "/mnt/service/flibusta"
flibusta_source_archives_dir: "/mnt/books/flibusta" flibusta_source_archives_dir: "/mnt/books/flibusta"
flibusta_web_port: "45137" flibusta_web_port: "45137"
flibusta_db_port: "45138" flibusta_db_port: "45138"
flibusta_db_user: "flibusta" flibusta_db_user: "flibusta"
flibusta_db_password: "{{ vault_flibusta_db_password }}" flibusta_db_password: "{{ vault_flibusta_db_password }}"
flibusta_db_name: "flibusta" flibusta_db_name: "flibusta"
# ============================================================================= navidrome_base_dir: "{{ service_config_base }}/navidrome"
# СЕРВИСЫ: PHOTO (192.168.1.204) navidrome_data_dir: "{{ navidrome_base_dir }}/data"
# ============================================================================= navidrome_plugins_dir: "{{ navidrome_base_dir }}/plugins"
immich_base_dir: "/mnt/immich" navidrome_port: "45136"
immich_port: "45131" navidrome_default_language: "ru"
immich_db_username: "postgres" navidrome_music_folder: "/mnt/audio"
immich_db_password: "{{ vault_immich_db_password }}" navidrome_log_level: "info"
immich_db_name: "immich" navidrome_plugins_enabled: true
immich_version: "release" navidrome_plugins_autoreload: false
navidrome_plugins_log_level: "info"
# ============================================================================= navidrome_plugins_cache_size: "200MB"
# СЕРВИСЫ: TALK (192.168.1.206)
# ============================================================================= # =============================================================================
mumble_base_dir: "/mnt/mumble" # СЕРВИСЫ: PHOTO (192.168.1.204)
mumble_data_dir: "{{ mumble_base_dir }}/data" # =============================================================================
mumble_port: "45131" immich_base_dir: "/mnt/immich"
mumble_ice_port: "6502" immich_port: "45131"
mumble_max_users: "100" immich_db_username: "postgres"
mumble_server_password: "{{ vault_mumble_server_password }}" immich_db_password: "{{ vault_immich_db_password }}"
mumble_superuser_password: "{{ vault_mumble_superuser_password }}" immich_db_name: "immich"
immich_version: "release"
matrix_base_dir: "/mnt/matrix"
matrix_data_dir: "{{ matrix_base_dir }}/data" # =============================================================================
matrix_config_dir: "{{ matrix_base_dir }}/config" # СЕРВИСЫ: TALK (192.168.1.206)
matrix_media_dir: "{{ matrix_base_dir }}/media" # =============================================================================
matrix_postgres_dir: "{{ matrix_base_dir }}/postgres" mumble_base_dir: "/mnt/mumble"
matrix_port: "45132" mumble_data_dir: "{{ mumble_base_dir }}/data"
matrix_domain: "matrix.zailon.ru" mumble_port: "45131"
matrix_server_name: "{{ matrix_domain }}" mumble_ice_port: "6502"
matrix_registration_enabled: false mumble_max_users: "100"
matrix_report_stats: "no" mumble_server_password: "{{ vault_mumble_server_password }}"
matrix_postgres_user: "synapse" mumble_superuser_password: "{{ vault_mumble_superuser_password }}"
matrix_postgres_password: "{{ vault_matrix_postgres_password }}"
matrix_postgres_db: "synapse" matrix_base_dir: "/mnt/matrix"
matrix_synapse_secret: "{{ vault_matrix_synapse_secret }}" matrix_data_dir: "{{ matrix_base_dir }}/data"
matrix_macaroon_secret: "{{ vault_matrix_macaroon_secret }}" matrix_config_dir: "{{ matrix_base_dir }}/config"
matrix_form_secret: "{{ vault_matrix_form_secret }}" matrix_media_dir: "{{ matrix_base_dir }}/media"
matrix_postgres_dir: "{{ matrix_base_dir }}/postgres"
snikket_base_dir: "/mnt/snikket" matrix_port: "45132"
snikket_data_dir: "{{ snikket_base_dir }}/snikket_data" matrix_domain: "matrix.zailon.ru"
snikket_nginx_custom_dir: "{{ snikket_base_dir }}/nginx-custom" matrix_server_name: "{{ matrix_domain }}"
snikket_backup_dir: "/backup/snikket" matrix_registration_enabled: false
snikket_domain: "chat.zailon.ru" matrix_report_stats: "no"
snikket_admin_email: "zailon@bk.ru" matrix_postgres_user: "synapse"
snikket_external_ip: "188.73.191.202" matrix_postgres_password: "{{ vault_matrix_postgres_password }}"
snikket_http_port: 8080 matrix_postgres_db: "synapse"
snikket_https_port: 8443 matrix_synapse_secret: "{{ vault_matrix_synapse_secret }}"
snikket_xmpp_port: 5222 matrix_macaroon_secret: "{{ vault_matrix_macaroon_secret }}"
snikket_component_port: 5349 matrix_form_secret: "{{ vault_matrix_form_secret }}"
snikket_turn_port: 3478
snikket_turn_tls_port: 5349 snikket_base_dir: "/mnt/snikket"
snikket_rtp_min_port: 50000 snikket_data_dir: "{{ snikket_base_dir }}/snikket_data"
snikket_rtp_max_port: 50100 snikket_nginx_custom_dir: "{{ snikket_base_dir }}/nginx-custom"
snikket_enable_acme: false snikket_backup_dir: "/backup/snikket"
snikket_disable_tls: true snikket_domain: "chat.zailon.ru"
snikket_trusted_proxy: "*" snikket_admin_email: "zailon@bk.ru"
snikket_max_file_size: "500M" snikket_external_ip: "188.73.191.202"
snikket_image_tag: "dev" snikket_http_port: 8080
snikket_create_initial_invite: false snikket_https_port: 8443
snikket_backup_enabled: true snikket_xmpp_port: 5222
snikket_backup_retention_days: 30 snikket_component_port: 5349
snikket_admin_password: "{{ vault_snikket_admin_password }}" snikket_turn_port: 3478
snikket_invite_token: "{{ vault_snikket_invite_token }}" snikket_turn_tls_port: 5349
snikket_rtp_min_port: 50000
teamspeak_base_dir: "/mnt/teamspeak" snikket_rtp_max_port: 50100
teamspeak_data_dir: "{{ teamspeak_base_dir }}/data" snikket_enable_acme: false
teamspeak_logs_dir: "{{ teamspeak_base_dir }}/logs" snikket_disable_tls: true
teamspeak_query_port: "10011" snikket_trusted_proxy: "*"
teamspeak_voice_port: "9987" snikket_max_file_size: "500M"
teamspeak_file_port: "30033" snikket_image_tag: "dev"
snikket_create_initial_invite: false
# ============================================================================= snikket_backup_enabled: true
# СЕРВИСЫ: GAMES (192.168.1.207) snikket_backup_retention_days: 30
# ============================================================================= snikket_admin_password: "{{ vault_snikket_admin_password }}"
minecraft_base_dir: "/mnt/minecraft" snikket_invite_token: "{{ vault_snikket_invite_token }}"
minecraft_data_dir: "{{ minecraft_base_dir }}/data"
minecraft_port: "25565" teamspeak_base_dir: "/mnt/teamspeak"
minecraft_memory: "4G" teamspeak_data_dir: "{{ teamspeak_base_dir }}/data"
minecraft_version: "1.21.1" teamspeak_logs_dir: "{{ teamspeak_base_dir }}/logs"
minecraft_neoforge_version: "21.1.0" teamspeak_query_port: "10011"
minecraft_type: "NEOFORGE" teamspeak_voice_port: "9987"
minecraft_eula: "true" teamspeak_file_port: "30033"
minecraft_motd: "Minecraft @ zailon.ru"
minecraft_online_mode: "true" # =============================================================================
minecraft_mods: # СЕРВИСЫ: GAMES (192.168.1.207)
- "https://mediafilez.forgecdn.net/files/7178/775/create-1.21.1-6.0.8.jar" # =============================================================================
minecraft_base_dir: "/mnt/minecraft"
# ============================================================================= minecraft_data_dir: "{{ minecraft_base_dir }}/data"
# СЕРВИСЫ: MANAGE (192.168.1.208) minecraft_port: "25565"
# ============================================================================= minecraft_memory: "4G"
meshcentral_base_dir: "/opt/meshcentral" minecraft_version: "1.21.1"
meshcentral_data_dir: "/mnt/mesh/meshcentral-data" minecraft_neoforge_version: "21.1.0"
meshcentral_files_dir: "/mnt/mesh/meshcentral-files" minecraft_type: "NEOFORGE"
meshcentral_backup_dir: "/mnt/mesh/meshcentral-backup" minecraft_eula: "true"
meshcentral_port: "45131" minecraft_motd: "Minecraft @ zailon.ru"
minecraft_online_mode: "true"
grafana_base_dir: /mnt/grafana minecraft_mods:
grafana_data_dir: "{{ grafana_base_dir }}/data" - "https://mediafilez.forgecdn.net/files/7178/775/create-1.21.1-6.0.8.jar"
grafana_config_dir: "{{ grafana_base_dir }}/config"
grafana_vm_data_dir: "{{ grafana_base_dir }}/victoriametrics" # =============================================================================
grafana_vmagent_tmp_dir: "{{ grafana_base_dir }}/vmagent/tmp" # СЕРВИСЫ: MANAGE (192.168.1.208)
grafana_vmagent_config: "{{ grafana_base_dir }}/vmagent/vmagent.yaml" # =============================================================================
grafana_port: 45132 meshcentral_base_dir: "/opt/meshcentral"
meshcentral_data_dir: "/mnt/mesh/meshcentral-data"
loki_base_dir: "/mnt/loki" meshcentral_files_dir: "/mnt/mesh/meshcentral-files"
loki_config_dir: "{{ loki_base_dir }}/config" meshcentral_backup_dir: "/mnt/mesh/meshcentral-backup"
loki_data_dir: "{{ loki_base_dir }}/data" meshcentral_port: "45131"
loki_server_host: "{{ server_ips.manage }}"
loki_server_port: "{{ monitoring_ports.loki }}" grafana_base_dir: /mnt/grafana
grafana_data_dir: "{{ grafana_base_dir }}/data"
promtail_config_dir: "/etc/promtail" grafana_config_dir: "{{ grafana_base_dir }}/config"
promtail_data_dir: "/var/lib/promtail" grafana_vm_data_dir: "{{ grafana_base_dir }}/victoriametrics"
grafana_vmagent_tmp_dir: "{{ grafana_base_dir }}/vmagent/tmp"
# ============================================================================= grafana_vmagent_config: "{{ grafana_base_dir }}/vmagent/vmagent.yaml"
# СЕРВИСЫ: GIT (192.168.1.209) grafana_port: 45132
# =============================================================================
gitlab_base_dir: "/mnt/git" loki_base_dir: "/mnt/loki"
gitlab_config_dir: "{{ gitlab_base_dir }}/config" loki_config_dir: "{{ loki_base_dir }}/config"
gitlab_logs_dir: "{{ gitlab_base_dir }}/logs" loki_data_dir: "{{ loki_base_dir }}/data"
gitlab_data_dir: "{{ gitlab_base_dir }}/data" loki_server_host: "{{ server_ips.manage }}"
gitlab_backup_dir: "{{ gitlab_base_dir }}/backup" loki_server_port: "{{ monitoring_ports.loki }}"
gitlab_http_port: "45130"
gitlab_ssh_port: "2222" promtail_config_dir: "/etc/promtail"
gitlab_version: "17.5.5-ce.0" promtail_data_dir: "/var/lib/promtail"
gitlab_hostname: "git.zailon.ru"
gitlab_external_url: "https://git.zailon.ru" # =============================================================================
gitlab_root_password: "{{ vault_gitlab_root_password }}" # СЕРВИСЫ: GIT (192.168.1.209)
# =============================================================================
# ============================================================================= gitlab_base_dir: "/mnt/git"
# СЕРВИСЫ: TORRENT (192.168.1.211) gitlab_config_dir: "{{ gitlab_base_dir }}/config"
# ============================================================================= gitlab_logs_dir: "{{ gitlab_base_dir }}/logs"
qbittorrent_base_dir: "/mnt/service/qbittorrent" gitlab_data_dir: "{{ gitlab_base_dir }}/data"
qbittorrent_config_dir: "{{ qbittorrent_base_dir }}/appdata" gitlab_backup_dir: "{{ gitlab_base_dir }}/backup"
qbittorrent_downloads_dir: "{{ qbittorrent_base_dir }}/downloads" gitlab_http_port: "45130"
qbittorrent_puid: 1000 gitlab_ssh_port: "2222"
qbittorrent_pgid: 1003 gitlab_version: "17.5.5-ce.0"
qbittorrent_port_webui: 8080 gitlab_hostname: "git.zailon.ru"
qbittorrent_port_torrent: 6881 gitlab_external_url: "https://git.zailon.ru"
qbittorrent_smb_credentials_dir: "/etc/smb-creds" gitlab_root_password: "{{ vault_gitlab_root_password }}"
qbittorrent_smb_creds: # =============================================================================
olimp: # СЕРВИСЫ: TORRENT (192.168.1.211)
username: "Olimp" # =============================================================================
password: "{{ vault_smb_olimp_password }}" qbittorrent_base_dir: "/mnt/service/qbittorrent"
file: "olimp" qbittorrent_config_dir: "{{ qbittorrent_base_dir }}/appdata"
qb: qbittorrent_downloads_dir: "{{ qbittorrent_base_dir }}/downloads"
username: "qb" qbittorrent_puid: 1000
password: "{{ vault_samba_password_qb }}" qbittorrent_pgid: 1003
file: "qb" qbittorrent_port_webui: 8080
qbittorrent_port_torrent: 6881
qbittorrent_shares: qbittorrent_smb_credentials_dir: "/etc/smb-creds"
- name: downloads
src: "//192.168.1.101/Downloads" qbittorrent_smb_creds:
dest: "/mnt/downloads" olimp:
credential: "olimp" username: "Olimp"
opts: "rw,uid={{ qbittorrent_puid }},gid={{ qbittorrent_pgid }},file_mode=0644,dir_mode=0755,vers=3.0,credentials=/etc/smb-creds/{{ qbittorrent_smb_creds.olimp.file }}" password: "{{ vault_smb_olimp_password }}"
- name: abook file: "olimp"
src: "//192.168.1.203/Abook" qb:
dest: "/mnt/abook" username: "qb"
opts: "rw,uid={{ qbittorrent_puid }},gid={{ qbittorrent_pgid }},file_mode=0644,dir_mode=0755,vers=3.0,credentials=/etc/smb-creds/{{ qbittorrent_smb_creds.qb.file }}" password: "{{ vault_samba_password_qb }}"
- name: music file: "qb"
src: "//192.168.1.203/Music"
dest: "/mnt/audio" qbittorrent_shares:
opts: "rw,uid={{ qbittorrent_puid }},gid={{ qbittorrent_pgid }},file_mode=0644,dir_mode=0755,vers=3.0,credentials=/etc/smb-creds/{{ qbittorrent_smb_creds.qb.file }}" - name: downloads
- name: books src: "//192.168.1.101/Downloads"
src: "//192.168.1.203/Books" dest: "/mnt/downloads"
dest: "/mnt/books" credential: "olimp"
opts: "rw,uid={{ qbittorrent_puid }},gid={{ qbittorrent_pgid }},file_mode=0644,dir_mode=0755,vers=3.0,credentials=/etc/smb-creds/{{ qbittorrent_smb_creds.qb.file }}" opts: "rw,uid={{ qbittorrent_puid }},gid={{ qbittorrent_pgid }},file_mode=0644,dir_mode=0755,vers=3.0,credentials=/etc/smb-creds/{{ qbittorrent_smb_creds.olimp.file }}"
- name: films - name: abook
src: "//192.168.1.203/Films" src: "//192.168.1.203/Abook"
dest: "/mnt/video/films" dest: "/mnt/abook"
opts: "rw,uid={{ qbittorrent_puid }},gid={{ qbittorrent_pgid }},file_mode=0644,dir_mode=0755,vers=3.0,credentials=/etc/smb-creds/{{ qbittorrent_smb_creds.qb.file }}" opts: "rw,uid={{ qbittorrent_puid }},gid={{ qbittorrent_pgid }},file_mode=0644,dir_mode=0755,vers=3.0,credentials=/etc/smb-creds/{{ qbittorrent_smb_creds.qb.file }}"
- name: mult - name: music
src: "//192.168.1.203/Mult" src: "//192.168.1.203/Music"
dest: "/mnt/video/mult" dest: "/mnt/audio"
opts: "rw,uid={{ qbittorrent_puid }},gid={{ qbittorrent_pgid }},file_mode=0644,dir_mode=0755,vers=3.0,credentials=/etc/smb-creds/{{ qbittorrent_smb_creds.qb.file }}" opts: "rw,uid={{ qbittorrent_puid }},gid={{ qbittorrent_pgid }},file_mode=0644,dir_mode=0755,vers=3.0,credentials=/etc/smb-creds/{{ qbittorrent_smb_creds.qb.file }}"
- name: anime - name: books
src: "//192.168.1.203/Anime" src: "//192.168.1.203/Books"
dest: "/mnt/video/anime" dest: "/mnt/books"
opts: "rw,uid={{ qbittorrent_puid }},gid={{ qbittorrent_pgid }},file_mode=0644,dir_mode=0755,vers=3.0,credentials=/etc/smb-creds/{{ qbittorrent_smb_creds.qb.file }}" opts: "rw,uid={{ qbittorrent_puid }},gid={{ qbittorrent_pgid }},file_mode=0644,dir_mode=0755,vers=3.0,credentials=/etc/smb-creds/{{ qbittorrent_smb_creds.qb.file }}"
- name: serial - name: films
src: "//192.168.1.203/Serial" src: "//192.168.1.203/Films"
dest: "/mnt/video/serial" dest: "/mnt/video/films"
opts: "rw,uid={{ qbittorrent_puid }},gid={{ qbittorrent_pgid }},file_mode=0644,dir_mode=0755,vers=3.0,credentials=/etc/smb-creds/{{ qbittorrent_smb_creds.qb.file }}" opts: "rw,uid={{ qbittorrent_puid }},gid={{ qbittorrent_pgid }},file_mode=0644,dir_mode=0755,vers=3.0,credentials=/etc/smb-creds/{{ qbittorrent_smb_creds.qb.file }}"
- name: mserials - name: mult
src: "//192.168.1.203/Mserials" src: "//192.168.1.203/Mult"
dest: "/mnt/video/mserials" dest: "/mnt/video/mult"
opts: "rw,uid={{ qbittorrent_puid }},gid={{ qbittorrent_pgid }},file_mode=0644,dir_mode=0755,vers=3.0,credentials=/etc/smb-creds/{{ qbittorrent_smb_creds.qb.file }}" opts: "rw,uid={{ qbittorrent_puid }},gid={{ qbittorrent_pgid }},file_mode=0644,dir_mode=0755,vers=3.0,credentials=/etc/smb-creds/{{ qbittorrent_smb_creds.qb.file }}"
- name: doc - name: anime
src: "//192.168.1.203/Doc" src: "//192.168.1.203/Anime"
dest: "/mnt/video/doc" dest: "/mnt/video/anime"
opts: "rw,uid={{ qbittorrent_puid }},gid={{ qbittorrent_pgid }},file_mode=0644,dir_mode=0755,vers=3.0,credentials=/etc/smb-creds/{{ qbittorrent_smb_creds.qb.file }}" opts: "rw,uid={{ qbittorrent_puid }},gid={{ qbittorrent_pgid }},file_mode=0644,dir_mode=0755,vers=3.0,credentials=/etc/smb-creds/{{ qbittorrent_smb_creds.qb.file }}"
- name: ztube - name: serial
src: "//192.168.1.203/Ztube" src: "//192.168.1.203/Serial"
dest: "/mnt/video/ztube" dest: "/mnt/video/serial"
opts: "rw,uid={{ qbittorrent_puid }},gid={{ qbittorrent_pgid }},file_mode=0644,dir_mode=0755,vers=3.0,credentials=/etc/smb-creds/{{ qbittorrent_smb_creds.qb.file }}" opts: "rw,uid={{ qbittorrent_puid }},gid={{ qbittorrent_pgid }},file_mode=0644,dir_mode=0755,vers=3.0,credentials=/etc/smb-creds/{{ qbittorrent_smb_creds.qb.file }}"
- name: show - name: mserials
src: "//192.168.1.203/Show" src: "//192.168.1.203/Mserials"
dest: "/mnt/video/show" dest: "/mnt/video/mserials"
opts: "rw,uid={{ qbittorrent_puid }},gid={{ qbittorrent_pgid }},file_mode=0644,dir_mode=0755,vers=3.0,credentials=/etc/smb-creds/{{ qbittorrent_smb_creds.qb.file }}" opts: "rw,uid={{ qbittorrent_puid }},gid={{ qbittorrent_pgid }},file_mode=0644,dir_mode=0755,vers=3.0,credentials=/etc/smb-creds/{{ qbittorrent_smb_creds.qb.file }}"
- name: games - name: doc
src: "//192.168.1.207/Games" src: "//192.168.1.203/Doc"
dest: "/mnt/games" dest: "/mnt/video/doc"
opts: "rw,uid={{ qbittorrent_puid }},gid={{ qbittorrent_pgid }},file_mode=0644,dir_mode=0755,vers=3.0,credentials=/etc/smb-creds/{{ qbittorrent_smb_creds.qb.file }}" opts: "rw,uid={{ qbittorrent_puid }},gid={{ qbittorrent_pgid }},file_mode=0644,dir_mode=0755,vers=3.0,credentials=/etc/smb-creds/{{ qbittorrent_smb_creds.qb.file }}"
- name: ztube
torrserver_base_dir: "/mnt/service/torrserver" src: "//192.168.1.203/Ztube"
torrserver_config_dir: "{{ torrserver_base_dir }}/config" dest: "/mnt/video/ztube"
torrserver_torrents_dir: "{{ torrserver_base_dir }}/torrents" opts: "rw,uid={{ qbittorrent_puid }},gid={{ qbittorrent_pgid }},file_mode=0644,dir_mode=0755,vers=3.0,credentials=/etc/smb-creds/{{ qbittorrent_smb_creds.qb.file }}"
- name: show
src: "//192.168.1.203/Show"
dest: "/mnt/video/show"
opts: "rw,uid={{ qbittorrent_puid }},gid={{ qbittorrent_pgid }},file_mode=0644,dir_mode=0755,vers=3.0,credentials=/etc/smb-creds/{{ qbittorrent_smb_creds.qb.file }}"
- name: games
src: "//192.168.1.207/Games"
dest: "/mnt/games"
opts: "rw,uid={{ qbittorrent_puid }},gid={{ qbittorrent_pgid }},file_mode=0644,dir_mode=0755,vers=3.0,credentials=/etc/smb-creds/{{ qbittorrent_smb_creds.qb.file }}"
torrserver_base_dir: "/mnt/service/torrserver"
torrserver_config_dir: "{{ torrserver_base_dir }}/config"
torrserver_torrents_dir: "{{ torrserver_base_dir }}/torrents"
torrserver_port: "45132" torrserver_port: "45132"