mirror of
https://github.com/DO1JLR/ansible_playbook_servers.git
synced 2024-09-14 19:53:56 +02:00
121 lines
3 KiB
YAML
121 lines
3 KiB
YAML
---
|
|
users:
|
|
l3d:
|
|
- l3d@pinkie.l3d.yt
|
|
- l3d@mobile.l3d.yt
|
|
- l3d@backup.l3d.yt
|
|
- l3d@derpy.l3d.yt
|
|
- l3d@backup-rsa.l3d.yt
|
|
- l3d@business.wingcon.com
|
|
weechat:
|
|
- l3d@pinkie.l3d.yt
|
|
- l3d@mobile.l3d.yt
|
|
- l3d@backup.l3d.yt
|
|
- l3d@derpy.l3d.yt
|
|
- l3d@backup-rsa.l3d.yt
|
|
- l3d@business.wingcon.com
|
|
mailwebuser:
|
|
- l3d@pinkie.l3d.yt
|
|
- l3d@mobile.l3d.yt
|
|
- l3d@backup.l3d.yt
|
|
- l3d@derpy.l3d.yt
|
|
- l3d@backup-rsa.l3d.yt
|
|
- l3d@business.wingcon.com
|
|
|
|
accounts:
|
|
- l3d
|
|
- mailwebuser
|
|
- weechat
|
|
|
|
# mail domains
|
|
additional_dns_maildomains: 'mail.l3d.space imap.l3d.space smtp.l3d.space'
|
|
|
|
# mailserver
|
|
mailserver_domain: "{{ _mailserver_domain }}"
|
|
postfix__inet_interfaces: "127.0.0.1, ::1, {{ hostvars[ inventory_hostname ].ansible_default_ipv4.address }}, {{ hostvars[ inventory_hostname ].ansible_default_ipv6.address }}"
|
|
|
|
# mail mysql access
|
|
mailserver__mysql_password: "{{ _mailserver__mysql_password }}"
|
|
mailserver__mysql_user: "{{ _mailserver__mysql_user }}"
|
|
mailserver__mysql_database: "{{ _mailserver__mysql_database }}"
|
|
mailserver__ssl_cert: "{{ _mailserver__ssl_cert }}"
|
|
mailserver__ssl_key: "{{ _mailserver__ssl_key }}"
|
|
postfix__db_user: "{{ _mailserver__mysql_user }}"
|
|
postfix__db_password: "{{ _mailserver__mysql_password }}"
|
|
postfix__db_name: "{{ _mailserver__mysql_database }}"
|
|
|
|
acme_domain_unwant_list: []
|
|
# - name: 'example.com'
|
|
|
|
nginx_sites:
|
|
- name: 'mail.l3d.space'
|
|
webroot:
|
|
user: 'mailwebuser'
|
|
- name: "{{ mailserver_domain }}"
|
|
- name: 'node-exporter.mail01.l3d.space'
|
|
- name: 'nginx-exporter.mail01.l3d.space'
|
|
|
|
# letsencrypt
|
|
acme_notification_email: "{{ _acme_notification_email }}"
|
|
|
|
# acmetool config
|
|
acme_reload_services:
|
|
- 'nginx'
|
|
|
|
acme_restart_services:
|
|
- 'rspamd'
|
|
- 'dovecot'
|
|
- 'unbound'
|
|
- 'redis-server'
|
|
|
|
# firewall
|
|
fail2ban_destemail: "{{ _fail2ban_destemail }}"
|
|
firewall_allowed_tcp_ports:
|
|
- "22"
|
|
- "25"
|
|
- "80"
|
|
- "143"
|
|
- "443"
|
|
- "465"
|
|
- "587"
|
|
- "993"
|
|
- "4190"
|
|
- "42023"
|
|
|
|
# mysql
|
|
mysql_bind_address: "{{ _mysql_bind_address }}"
|
|
mysql_root_password: "{{ _mysql_root_password }}"
|
|
|
|
# weechat
|
|
weechat__install: true
|
|
weechat__autostart: true
|
|
weechat__user: 'weechat'
|
|
weechat__home_directory: '/home/weechat'
|
|
weechat__install_plugins: true
|
|
weechat__use_custom_config: true
|
|
weechat__custom_private_repo: 'gitea@git.l3d.ch:l3d/weechat-config.git'
|
|
weechat__custom_gen_ssh_key_pair: true
|
|
weechat__custom_version: 'main'
|
|
|
|
# postfix
|
|
postfix__myhostname: "{{ mailserver_domain }}"
|
|
postfix__tls_cert: "{{ mailserver__ssl_cert }}"
|
|
postfix__tls_key: "{{ mailserver__ssl_key }}"
|
|
|
|
# fail2ban
|
|
fail2ban_jail_configuration:
|
|
- option: 'enabled'
|
|
value: 'true'
|
|
section: 'postfix'
|
|
- option: 'mode'
|
|
value: 'extra'
|
|
section: 'postfix'
|
|
- option: 'enabled'
|
|
value: 'true'
|
|
section: 'dovecot'
|
|
|
|
nginx__infrastructure_domain__enabled: false
|
|
|
|
# l3d.nginx_exporter
|
|
nginx_exporter_listen_address: '127.0.0.1:9113'
|
|
nginx_exporter_scrape_uri: 'https://node-exporter.mail01.l3d.space/nginx_status'
|