blob: feac026c91443c70d1fd3250037914d20c59358c (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
|
---
system_lvm_volume_size_root: 3G
install:
vm:
memory: 16G
numcpus: 8
autostart: True
disks:
primary: /dev/sda
scsi:
sda:
type: zfs
name: root
size: 15g
sdb:
type: zfs
name: data
size: 800g
properties:
compression: off
interfaces:
- bridge: br-public
name: primary0
network:
nameservers: "{{ vm_host.network.dns }}"
domain: "{{ host_domain }}"
systemd_link:
interfaces: "{{ install.interfaces }}"
primary: &_network_primary_
name: primary0
address: "{{ vm_host.network.bridges.public.prefix | ansible.utils.ipaddr(vm_host.network.bridges.public.offsets[inventory_hostname]) }}"
gateway: "{{ vm_host.network.bridges.public.prefix | ansible.utils.ipaddr(vm_host.network.bridges.public.offsets[vm_host.name]) | ansible.utils.ipaddr('address') }}"
template: overlay
overlay: "{{ (vm_host.network.bridges.public.overlays.default.prefix | ansible.utils.ipaddr(vm_host.network.bridges.public.overlays.default.offsets[inventory_hostname])).split('/')[0] }}"
interfaces:
- *_network_primary_
external_ip: "{{ network.primary.overlay }}"
apt_repo_components:
- main
- contrib ## for zfs
spreadspace_apt_repo_components:
- main
- container
zfs_arc_size:
min: 2GB
max: 8GB
zfs_pools:
storage:
mountpoint: /srv/storage
create_vdevs: /dev/sdb
zfs_sanoid_modules:
storage/nextcloud:
use_template: production
recursive: yes
process_children_only: yes
storage/onlyoffice:
use_template: production
recursive: yes
process_children_only: yes
docker_storage:
type: zfs
pool: storage
name: docker
properties:
quota: 15G
kubelet_storage:
type: zfs
pool: storage
name: kubelet
properties:
quota: 15G
kubernetes_version: 1.23.2
kubernetes_container_runtime: docker
kubernetes_standalone_max_pods: 15
kubernetes_standalone_pod_cidr: 192.168.255.0/24
kubernetes_standalone_cni_variant: with-portmap
kubernetes_standalone_local_services_tcp:
- 25
postfix_base_mynetworks:
- "127.0.0.0/8"
- "[::ffff:127.0.0.0]/104"
- "[::1]/128"
- "{{ kubernetes_standalone_pod_cidr }}"
acme_directory_server: "{{ acme_directory_server_le_live_v2 }}"
nginx_server_names_hash_bucket_size: 64
nextcloud_zfs:
pool: storage
name: nextcloud
properties:
compression: lz4
nextcloud_instances:
team.tomwaitz.eu:
# new: true
version: 24.0.7
port: 8100
hostnames:
- team.tomwaitz.eu
zfs_properties:
quota: 700G
database:
type: mariadb
version: 10.5.13
password: "{{ vault_nextcloud_database_passwords['team.tomwaitz.eu'] }}"
custom_image:
dockerfile: |
RUN set -x \
&& sed 's/main$/main contrib non-free/' -i /etc/apt/sources.list \
&& apt-get update -q \
&& apt-get install -y -q unrar \
&& rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
collabora_code_base_path: /srv/storage/collabora/code
collabora_code_instances:
o.tomwaitz.eu:
version: 6.4.10.2
port: 8200
hostname: o.tomwaitz.eu
admin:
username: admin
password: "{{ vault_collabora_code_admin_passwords['o.tomwaitz.eu'] }}"
backend_storages:
- team.tomwaitz.eu
custom_image:
dockerfile: |
USER root
RUN set -x \
&& echo ttf-mscorefonts-installer msttcorefonts/accepted-mscorefonts-eula select true | debconf-set-selections \
&& apt-get update -q \
&& apt-get install -y -q ttf-mscorefonts-installer \
&& rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
USER lool
onlyoffice_zfs:
pool: storage
name: onlyoffice
properties:
compression: lz4
quota: 10G
onlyoffice_instances:
oo.tomwaitz.eu:
version: 6.4.2.6
port: 8600
hostname: oo.tomwaitz.eu
jwt_secret: "{{ vault_onlyoffice_jwt_secrets['oo.tomwaitz.eu'] }}"
database:
version: 9.5.25
password: "{{ vault_onlyoffice_database_passwords['oo.tomwaitz.eu'] }}"
amqp:
version: 3.9.11
password: "{{ vault_onlyoffice_amqp_passwords['oo.tomwaitz.eu'] }}"
|
