dodger/inventory.example.yml at main · stefanDeveloper/dodger · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
all:
  children:
    dodger:
      hosts:
        media:
          ansible_host: media.example
          ansible_port: 22
          ansible_user: stefan
          default_ufw_allowed_tcp_rules:
            - port: "8096"
              from_ip: "192.168.2.45"
              to_ip: "192.168.2.163"
              comment: "Allow hypervisor reverse proxy to Jellyfin"
        hypervisor:
          ansible_host: example
          ansible_port: 22
          ansible_user: stefan
          default_ufw_allowed_tcp_rules:
            - port: "22"
              from_ip: "192.168.2.0/24"
              to_ip: "192.168.2.45"
              comment: "Allow LAN SSH to hypervisor"
          default_ufw_allowed_tcp_ports:
            - "80"
            - "443"

          domain: "example.de"

          nextcloud_domain: "nextcloud.example.de"
          jellyfin_domain: "jellyfin.example.de"
          nextcloud_admin_password:
          nextcloud_postgres_password:
          nextcloud_redis_password:

          domains:
            - name: nextcloud.example.de
              template: nextcloud.conf
              modsec_config: |
                SecRuleEngine     On
                SecRequestBodyLimit 4294967296  # 4GB
            - name: jellyfin.example.de
              template: jellyfin.conf
              proxy_pass: http://172.18.0.11:8096
              allowed_networks:
                - 192.168.2.0/24
              modsec_config: |
                SecRuleEngine     On

          netcup_dynamic_dns_enabled: true
          netcup_dynamic_dns_customer_number:
          netcup_dynamic_dns_api_key:
          netcup_dynamic_dns_api_password:
          netcup_dynamic_dns_domainlist: "example.de: @, nextcloud"

          crowdsec_lapi_port: 8090
          crowdsec_install_firewall_bouncer: true
          crowdsec_fw_bouncer_apikey:
          crowdsec:
            version: latest
            collections: crowdsecurity/traefik crowdsecurity/nextcloud crowdsecurity/nginx
            acquis:
              - traefik.yml
              - nginx.yml
            log_mounts:
              - /var/log/nginx:/logs/nginx:ro
              - /var/log/traefik/:/logs/traefik:ro
              - /var/log/syslog:/var/log/syslog:ro
              - /var/log/auth.log:/var/log/auth.log:ro

# code: language=ansible