path: root/inventory/host_vars/ch-equinox-t450s.yml

---
ubuntu_autoinstall_locale: de_AT
ubuntu_autoinstall_keyboard_layout: de
ubuntu_autoinstall_keyboard_variant: nodeadkeys
ubuntu_autoinstall_timezone: Europe/Vienna

ubuntu_autoinstall_desktop: xubuntu
ubuntu_autoinstall_manual_partitioning: yes
###
# mark disk as bootable (EFI System Partition gets created)
# edit ESP -> size 128M
# add new GPT Part, 1G, ext4, /boot
# add new GPT Part, rest of disk, unformatted -> create new LVM: name t450s, enable crypto
# add new LV, root, 70G, ext4, /
# add new LV, storage, 380G, unformatted


install:
  efi: yes
  kernel_cmdline:
  - quiet
  - splash

install_dhcp: yes
network:
  domain: "{{ host_domain }}"
  primary:
    name: enx00e04d6a076e


base_modules_blacklist: "{{ base_modules_blacklist_none }}"

sshd_password_auth: yes
ssh_keys_root_extra:
  - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBjZEFZLrl2KIqYl/GU8Vkp7mlhAbFbjwf4Ht9zQRmI8 ZFS Backup syncoid@epimetheus

zsh_banner: equinox

admin_users_host:
  - equinox

apt_repo_components:
  - main
  - restricted
  - universe
  - multiverse

spreadspace_apt_repo_components:
  - main
  - container

zfs_arc_size:
  min: 512M
  max: 2G

zfs_pools:
  storage:
    mountpoint: /srv/storage
    create_vdevs: /dev/mapper/t450s-storage
    properties:
      ashift: 12
      autotrim: "on"

zfs_sanoid_modules:
  storage:
    use_template: production
    recursive: yes
    process_children_only: yes


ws_base_home_zfs:
  pool: storage
  name: home
  properties:
    xattr: sa
    compression: lz4
    quota: 320G

ws_base_extra_packages:
  - aisleriot
  - atftp
  - asciidoc
  - autoconf
  - automake
  - avr-libc
  - avrdude
  - binfmt-support
  - binutils-avr
  - binwalk
  - bison
  - build-essential
  - cargo
  - ccache
  - cheese
  - clang
  - clinfo
  - cmake
  - cpu-x
  - cura
  - ddrescueview
  - debhelper
  - debmake
  - dia
  - dh-lua
  - dh-make
  - dh-python
  - devscripts
  - dfu-programmer
  - docker.io
  - docker-buildx
  - dos2unix
  - doxygen
  - easytag
  - elpa-debian-el
  - elpa-go-mode
  - elpa-lua-mode
  - elpa-php-mode
  - elpa-rust-mode
  - elpa-web-mode
  - elpa-yaml-mode
  - emacs
  - esptool
  - etherwake
  - filezilla
  - flac
  - fldigi
  - flex
  - freerdp2-x11
  - fzf
  - gcc-avr
  - gddrescue
  - gdebi
  - gerbv
  - ghex
  - gir1.2-spiceclientgtk-3.0
  - git
  - git-lfs
  - git-remote-gcrypt
  - gitk
  - gnome-games
  - gnome-mahjongg
  - gpredict
  - gpsd-clients
  - gputils
  - graphviz
  - gstreamer1.0-vaapi
  - guvcview
  - gvncviewer
  - i7z
  - iw
  - horst
  - inkscape
  - ipcalc
  - iperf
  - iperf3
  - iputils-arping
  - ipython3
  - jq
  - kdenlive
  - keepassx
  - kpartx
  - libdbd-mysql-perl
  - libgpgme11
  - libncurses5
  - libusb-dev
  - libusb-1.0-0-dev
  - libvirt-clients
  - libvirt-daemon-system
  - libxcb-composite0
  - libxcb-cursor0
  - libxcb-damage0
  - lmodern
  - make
  - manpages-dev
  - mbr
  - meld
  - meson
  - mingw-w64
  - mosh
  - msmtp-mta
  - mumble
  - nfs-common
  - nmap
  - ntpdate
  - nyx
  - openocd
  - openscad
  - ovmf
  - pandoc
  - parcimonie
  - patchutils
  - pdftk-java
  - pidgin-plugin-pack
  - pigz
  - pinentry-curses
  - pitivi
  - playonlinux
  - pm-utils
  - powertop
  - ppa-purge
  - pristine-tar
  - privoxy
  - pulseview
  - pv
  - pwgen
  - python3-autopep8
  - python3-impacket
  - python3-netaddr
  - python3-pandas
  - python3-passlib
  - python3-pip
  - python3-plotly
  - python3-pyside2.qtwebchannel
  - python3-pyside2.qtwebengine
  - python3-pyside2.qtwebenginewidgets
  - python3-ruamel.yaml
  - python3-sphinx
  - python3-sphinx-rtd-theme
  - python3-toml
  - python3-xopen
  - qemu
  - qemu-kvm
  - qemu-system-gui
  - qemu-user-static
  - qemu-utils
  - quilt
  - ragel
  - rdesktop
  - rhythmbox
  - rhythmbox-plugins
  - rkhunter
  - rtmpdump
  - rustc
  - s-tui
  - scala-mode-el
  - scons
  - sdcc
  - signify-openbsd
  - signing-party
  - sigrok-cli
  - skopeo
  - socat
  - spice-client-gtk
  - sqlite3
  - sshfs
  - stlink-tools
  - stm32flash
  - stress
  - stun-client
  - subversion
  - swaks
  - syslinux
  - syslinux-common
  - syslinux-efi
  - texlive
  - texlive-lang-german
  - texlive-latex-extra
  - tlp
  - torbrowser-launcher
  - totem
  - unrar
  - vainfo
  - valgrind
  - virtualbox
  - virtualbox-dkms
  #- virtualbox-ext-pack
  - virtualbox-qt
  - virt-manager
  - vorbis-tools
  - wakeonlan
  - wavemon
  - whois
  - wine
  - wine32
  - wine64
  - winetricks
  - wireshark
  - x264
  - xclip
  - xdg-desktop-portal-gtk
  - xfce4-goodies
  - xorriso
  - xul-ext-lightning
  - yamllint
  - yasm
  # needs apt-repo/spreadspace
  - go
  - info-beamer
  #- helm         ## TODO: not yet in repo for jammy
  - k9s
  - kubeletctl
  - grype
  # needs apt-repo/ansible
  - ansible
  # needs apt-repo/tor-project
  - tor
  - tor-geoipdb
  # needs apt-repo/kubernetes
  - kubectl
  # needs apt-repo/element
  - element-desktop

kubernetes_version: "1.30"


ws_minet_wired_interface_name: enp0s25
ws_minet_wired_interface_module: e1000e

ws_minet_wireless_interface_name: wlp3s0
ws_minet_wireless_interface_module: iwlwifi

ws_minet_wpa_connections:
  ccc2015Wireless:
    description: CCCamp 2015 WIRELESS
    ssid: Camp2015
  ccc2019Wireless:
    description: CCCamp 2019 WIRELESS
    ssid: Camp2019
  elevateWireless:
    description: elevate Staff Wireless
    ssid: elevate Staff
  elevateWirelessPublic:
    description: elevate Public Wireless
    ssid: elevate Public
  homeWireless:
    description: chaos@home Wireless
    ssid: chaos at home
  tetherWireless:
    description: tethering via equinox-fp4 Wireless
    ssid: equinox-fp4
  mgitWireless:
    description: mgIT Wireless
    ssid: mgIT
  rhdreiWireless:
    description: helsinki 3G Wireless
    ssid: rhdrei
  jrguestWireless:
    description: Joanneum-Research Guest Wireless
    ssid: JR_GUEST

ws_minet_openwifi_connections:
  cbasePublic:
    description: c-base Public Wireless
    ssid: c-base-public
  cityaccessWireless:
    description: City Access Wireless
    ssid: Cityaccess
  confineUpcWireless:
    description: confine@UPC Wireless
    ssid: XSF-UPC
  elevateForumWireless:
    description: elevate Forum Wireless
    ssid: Cityaccess Forum Open
  escWireless:
    description: esc medienkunstlabor Wireless
    ssid: esc
  etissWireless:
    description: etiss Wireless
    ssid: OWL
  0xfflinzWireless:
    description: 0xFF Linz Wireless
    ssid: linz.funkfeuer.at
  geekend16Wireless:
    description: geekend 2016 Wireless
    ssid: irgendwas mit easterhegg oder so
  iaikWireless:
    description: IAIK Wireless
    ssid: tsunami
  linuxtage10:
    description: Linuxtage Wireless
    ssid: linuxtage
  linzWireless:
    description: Hotspot Linz Wireless
    ssid: Hotspot Linz
  metalabWireless:
    description: metalab Wireless
    ssid: metalab
  oebbcdWireless:
    description: öBB CD Wireless
    ssid: CDWiFi
  oebbstWireless:
    description: öBB Station Wireless
    ssid: OEBB-station
  oebbWireless:
    description: öBB Wireless
    ssid: OEBB
  orfWireless:
    description: ORF Wireless
    ssid: ORF_PUBLIC
  servusWireless:
    description: servus.at Wireless
    ssid: servus.at
  summit2010:
    description: Wireless Summit 2010
    ssid: Summit2010
  vieWireless:
    description: Vienna International Airport Wireless
    ssid: WirelessViennaAirport

ws_minet_wpa_supplicant_conf: "{{ lookup('unvault', ([global_files_dir, 'chaos-at-home', 'wpa_supplicant.conf.vault'] | path_join | realpath)) }}"


ws_flatpak_apps:
  - name: org.tenacityaudio.Tenacity
    shortcuts:
    - name: tenacity
  - name: org.audacityteam.Audacity
    shortcuts:
    - name: audacity
  - name: org.pipewire.Helvum
    shortcuts:
    - name: helvum
  - name: org.localsend.localsend_app
    shortcuts:
    - name: localsend
  - name: com.st.STM32CubeIDE
  - name: org.freecadweb.FreeCAD
    shortcuts:
    - name: freecad
    - name: freecadcmd
      command: FreeCADCmd
  - name: org.kicad.KiCad
    shortcuts:
    - name: kicad