summaryrefslogtreecommitdiff
path: root/inventory/group_vars/chaos-at-home-sensors/vars.yml
blob: c725c05351041ce4b796a7211c75320a25becac8 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
---
sensornode_network_wired: no

install_playbook: openwrt

openwrt_variant: openwrt
openwrt_release: 19.07.8
openwrt_arch: ramips
openwrt_target: mt76x8
openwrt_profile: omega2p
openwrt_output_image_suffixes:
  - "{{ openwrt_profile }}-squashfs-sysupgrade.bin"

openwrt_packages_remove:
  - ppp
  - ppp-mod-pppoe
  - firewall
  - dnsmasq
  - odhcpd-ipv6only
openwrt_packages_add:
  - kmod-i2c-mt7628
  - kmod-iio-bmp280-i2c
  - kmod-usb-storage
  - kmod-usb-storage-extras
  - kmod-fs-vfat
  - kmod-fs-exfat
  - kmod-fs-ext4
  - haveged
  - htop
  - ip
  - less
  - nano
  - tcpdump-mini
  - iperf
  - iperf3
  - mtr
  - iptraf-ng
  - usbutils
  - i2c-tools
  - prometheus-node-exporter-lua
  - prometheus-node-exporter-lua-netstat
  - prometheus-node-exporter-lua-openwrt
  - prometheus-node-exporter-lua-wifi


openwrt_mixin:
  /etc/dropbear/authorized_keys:
    content: "{{ ssh_keys_root | join('\n') }}\n"

  /etc/htoprc:
    file: "{{ global_files_dir }}/common/htoprc"


openwrt_uci:
  system:
    - name: system
      options:
        hostname: '{{ host_name }}'
        timezone: 'CET-1CEST,M3.5.0,M10.5.0/3'
        ttylogin: '0'
        log_size: '64'
        urandom_seed: '0'

    - name: timeserver 'ntp'
      options:
        enabled: '1'
        enable_server: '0'
        server:
          - '0.lede.pool.ntp.org'
          - '1.lede.pool.ntp.org'
          - '2.lede.pool.ntp.org'
          - '3.lede.pool.ntp.org'

  dropbear:
    - name: dropbear
      options:
        PasswordAuth: 'off'
        RootPasswordAuth: 'off'
        Port: '{{ ansible_port }}'

  network:
    - name: globals 'globals'
      options:
        ula_prefix: "fc{{ '%02x:%04x:%04x' | format((255 | random(seed=inventory_hostname + '0')), (65535 | random(seed=inventory_hostname + '1')), (65535 | random(seed=inventory_hostname + '2'))) }}::/48"

    - name: interface 'loopback'
      options:
        ifname: lo
        proto: static
        ipaddr: 127.0.0.1
        netmask: 255.0.0.0

    - name: interface 'iot'
      options:
        ifname: "{{ sensornode_network_wired | ternary('eth0', 'wlan0') }}"
        proto: static
        ipaddr: "{{ network_zones.iot.prefix | ipaddr(network_zones.iot.offsets[inventory_hostname]) | ipaddr('address') }}"
        netmask: "{{ network_zones.iot.prefix | ipaddr('netmask') }}"

    - name: interface 'unused'
      options:
        ifname: "{{ sensornode_network_wired | ternary('wlan0', 'eth0') }}"
        proto: none

  wireless:
    - name: wifi-device 'radio0'
      options:
        type: 'mac80211'
        hwmode: '11g'
        country: AT
        path: "platform/10300000.wmac"
        htmode: 'HT20'
        disabled: "{{ sensornode_network_wired | ternary('1', '0') }}"

    - name: wifi-iface
      options:
        device: 'radio0'
        network: 'iot'
        mode: 'sta'
        ssid: '{{ network_zones.iot.wifi.ssid }}'
        encryption: 'psk2'
        key: '{{ network_zones.iot.wifi.key }}'