blob: f06ecb8539966353ec1884c2c43b021d560c4f93 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
|
---
install_interface: enp1s0
install:
efi: true
disks:
primary: software-raid
raid:
level: 1
members:
- /dev/disk/by-id/nvme-Samsung_SSD_970_PRO_512GB_S5JYNC0N310329Z
- /dev/disk/by-id/nvme-Samsung_SSD_970_PRO_512GB_S5JYNC0N310327Y
system_lvm:
size: 25G
network:
nameservers:
- 9.9.9.9
domain: "{{ host_domain }}"
primary: &_network_primary_
name: br-lan
address: "{{ network_zones.lan.prefix | ipaddr(network_zones.lan.offsets[inventory_hostname]) | ipaddr('address/prefix') }}"
gateway: "{{ network_zones.lan.gateway }}"
interfaces:
- *_network_primary_
bonds:
- name: bond0
mode: 802.3ad
slaves:
- enp35s0
- enp36s0
options:
miimon: 100
vlans:
bond0: "{{ __vmhost_bridge_interface_zones__['bond0'] | map('extract', network_zones) | map(attribute='vlan') | list }}"
apt_repo_components:
- main
- contrib
- non-free ## for microcode updates
installer_lvm:
vg: "{{ host_name }}"
lv: installer
size: 10G
fs: ext4
cryptdisk_volumes:
crypto-nvme0:
passphrase: "{{ vault_cryptdisk_volumes['crypto-nvme0'].passphrase }}"
device: /dev/disk/by-id/nvme-Samsung_SSD_970_PRO_512GB_S5JYNC0N310329Z-part4
crypto-nvme1:
passphrase: "{{ vault_cryptdisk_volumes['crypto-nvme1'].passphrase }}"
device: /dev/disk/by-id/nvme-Samsung_SSD_970_PRO_512GB_S5JYNC0N310327Y-part4
crypto-sata0:
passphrase: "{{ vault_cryptdisk_volumes['crypto-sata0'].passphrase }}"
device: /dev/disk/by-id/ata-WDC_WD102KRYZ-01A5AB0_VCG6HGTN
crypto-sata1:
passphrase: "{{ vault_cryptdisk_volumes['crypto-sata1'].passphrase }}"
device: /dev/disk/by-id/ata-WDC_WD102KRYZ-01A5AB0_VCG6GT2N
crypto-sata2:
passphrase: "{{ vault_cryptdisk_volumes['crypto-sata2'].passphrase }}"
device: /dev/disk/by-id/ata-WDC_WD102KRYZ-01A5AB0_VCG6A2UN
zfs_arc_size:
min: "{{ 2 * 1024 * 1024 * 1024 }}"
max: "{{ 24 * 1024 * 1024 * 1024 }}"
zfs_zpools:
nvme:
mountpoint: /srv/nvme
create_vdevs: mirror /dev/mapper/crypto-nvme0 /dev/mapper/crypto-nvme1
storage:
mountpoint: /srv/storage
create_vdevs: mirror /dev/mapper/crypto-sata0 /dev/mapper/crypto-sata1 /dev/mapper/crypto-sata2
zfs_sanoid_modules:
nvme/vm:
use_template: production
recursive: yes
process_children_only: yes
storage:
use_template: production
recursive: yes
process_children_only: yes
fileserver_zfs_default_pool: storage
fileserver_zfs_filesystems:
archiv:
properties:
quota: 1T
buffer:
properties:
quota: 50G
home:
properties:
quota: 500G
export: no
movies:
properties:
quota: 1T
music:
properties:
quota: 500G
series:
properties:
quota: 4T
fileserver_nfs_root: /srv/_nfs4_root_
fileserver_nfs_default_options:
- rw
- sync
- root_squash
- no_subtree_check
fileserver_nfs_default_destinations:
- dest: "{{ network_zones.lan.prefix }}"
|