blob: fa441514bef86d3f90ced8f32d594ffb7f243a77 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
|
---
install:
cloud:
credentials: "{{ vault_hroot_robot_account }}"
server_name: "{{ host_name }}"
disks:
primary: software-raid
raid:
level: 1
members:
- /dev/nvme0n1
- /dev/nvme1n1
system_lvm:
size: 15G
volumes:
- name: root
size: 3584M
filesystem: ext4
mountpoint: /
- name: var
size: 1280M
filesystem: ext4
mountpoint: /var
- name: var+log
size: 768M
filesystem: ext4
mountpoint: /var/log
mount_options:
- noatime
- nodev
- noexec
network: {}
apt_repo_components:
- main
- contrib ## for zfs
- non-free ## for microcode updates
zfs_arc_size:
min: 2GB
max: 16GB
zfs_pools:
storage:
mountpoint: /srv/storage
create_vdevs: mirror /dev/nvme0n1p3 /dev/nvme1n1p3
zfs_sanoid_modules:
storage/nextcloud:
use_template: production
recursive: yes
process_children_only: yes
storage/etherpad-lite:
use_template: production
recursive: yes
process_children_only: yes
storage/keycloak:
use_template: production
recursive: yes
process_children_only: yes
storage/onlyoffice:
use_template: production
recursive: yes
process_children_only: yes
docker_storage:
type: zfs
pool: storage
name: docker
properties:
quota: 40G
kubelet_storage:
type: zfs
pool: storage
name: kubelet
properties:
quota: 20G
kubernetes_version: 1.22.2
kubernetes_cri_tools_pkg_version: 1.21.0~2
kubernetes_container_runtime: docker
kubernetes_standalone_max_pods: 100
kubernetes_standalone_pod_cidr: 192.168.255.0/24
kubernetes_standalone_cni_variant: with-portmap
kubernetes_standalone_local_services_tcp:
- 25
postfix_simple_mynetworks:
- "127.0.0.0/8"
- "[::ffff:127.0.0.0]/104"
- "[::1]/128"
- "{{ kubernetes_standalone_pod_cidr }}"
postfix_simple_inet_protocols:
- "ipv4"
acmetool_directory_server: "{{ acmetool_directory_server_le_live_v2 }}"
|
