101 lines
2.7 KiB
YAML
101 lines
2.7 KiB
YAML
#
|
|
#
|
|
# Automated webserver installation with plesk for captica Webservers
|
|
#
|
|
# Project: playbooks
|
|
# Author: Marc Böhm <marc.boehm@captica.de>
|
|
# License: MIT License (see LICENSE.md)
|
|
#
|
|
# Copyright (c) captica GmbH est. 2021
|
|
#
|
|
- hosts: "leh01"
|
|
vars:
|
|
hostname: leh01
|
|
tools_install_users:
|
|
- root
|
|
- ansible
|
|
ssh_pubkeys_root:
|
|
- "../files/ssh/root.pub"
|
|
ssh_pubkeys_ansible:
|
|
- "../files/ssh/id_ed25519_ansible.pub"
|
|
bitwarden_version: 2025.7.0
|
|
bitwarden_url: https://vault.captica.de
|
|
bitwarden_domain: vault.lehmannhause.de
|
|
bitwarden_admins: tobias.lehmann@captica.de
|
|
bitwarden_reply_to_mail: no-reply@vault.lehmannhaus.de
|
|
bitwarden_smtp_host: captica.de
|
|
bitwarden_smtp_port: 465
|
|
rclone_version: "1.65.0"
|
|
rclone_configs:
|
|
- name: strato-lehmann
|
|
entries:
|
|
type: s3
|
|
provider: Other
|
|
env_auth: false
|
|
access_key_id: "{{ rclone_hidrive_access_key_id }}"
|
|
secret_access_key: "{{ rclone_hidrive_access_key_secret }}"
|
|
region: eu-central-1
|
|
endpoint: https://s3.hidrive.strato.com
|
|
#https://my.hidrive.com/
|
|
acl: private
|
|
- name: backup-lehmann
|
|
entries:
|
|
type: crypt
|
|
remote: strato-lehmann:backup-leh01
|
|
filename_encryption: standard
|
|
directory_name_encryption: true
|
|
password: "{{ rclone_backup_password }}"
|
|
password2: "{{ rclone_backup_password2 }}"
|
|
rclone_sync_cronjobs:
|
|
- name: backup-nextcloud
|
|
source: /datapool/docker-nextcloud/nextcloud
|
|
target: backup-lehmann:nextcloud
|
|
cron:
|
|
minute: '0'
|
|
hour: '6'
|
|
day: '*/5'
|
|
disabled: false
|
|
- name: backup-frigate-nvr
|
|
source: /rpool/vmpool/frigate-nvr
|
|
target: backup-lehmann:frigate-nvr
|
|
cron:
|
|
minute: '0'
|
|
hour: '2'
|
|
day: '*/5'
|
|
disabled: false
|
|
- name: backup-gitea
|
|
source: /datapool/subvol-107-disk-0
|
|
target: backup-lehmann:gitea
|
|
cron:
|
|
minute: '30'
|
|
hour: '2'
|
|
day: '*/5'
|
|
disabled: false
|
|
- name: backup-nginx-proxy-manager
|
|
source: /datapool/docker-nginx-proxy-manager
|
|
target: backup-lehmann:nginx-proxy-manager
|
|
cron:
|
|
minute: '30'
|
|
hour: '5'
|
|
day: '*/5'
|
|
disabled: false
|
|
- name: backup-harvester-data
|
|
source: /datapool/subvol-1035-disk-1
|
|
target: backup-lehmann:harvester-data
|
|
cron:
|
|
minute: '45'
|
|
hour: '5'
|
|
day: '*/5'
|
|
disabled: false
|
|
roles:
|
|
- linux-base-install
|
|
- zsh
|
|
- vim
|
|
- fzf
|
|
- linux-docker
|
|
- rclone
|
|
- plesk
|
|
- nextcloud-hpb
|
|
- wireguard
|
|
- bitwarden
|