vps/env.yml

152 lines
3.6 KiB
YAML
Raw Normal View History

2024-02-17 19:01:04 +01:00
domain: viyurz.fr
timezone: "Europe/Paris"
host_uid: 1000
project_dir: "{{ ansible_env['HOME'] }}/docker-projects/{{ role_name }}"
2024-03-30 11:32:39 +01:00
docker_host: "unix:///run/user/{{ host_uid }}/docker.sock"
2024-02-17 19:01:04 +01:00
# UID shift for mapping between host & containers
uid_shift: 99999
# cifs_credentials is undefined when we run the backup playbook
# as a cronjob, so set empty default value to prevent errors,
# which is fine because we don't use it.
cifs_host: "{{ cifs_credentials['username'] | default('') }}.your-storagebox.de"
2024-02-17 19:01:04 +01:00
cifs_mounts:
backups:
src: "//{{ cifs_host }}/backup/backups"
path: /mnt/storagebox/backups
uid: 0
gid: "{{ host_uid }}"
file_mode: 640
dir_mode: 750
2024-07-26 15:55:33 +02:00
fireshare:
src: "//{{ cifs_host }}/backup/fireshare"
path: /mnt/storagebox/fireshare
uid: "{{ users['fireshare'] + uid_shift }}"
gid: "{{ users['fireshare'] + uid_shift }}"
file_mode: 644
dir_mode: 755
2024-02-17 19:01:04 +01:00
storagebox:
src: "//{{ cifs_host }}/backup"
path: /mnt/storagebox
uid: 0
gid: 0
file_mode: 640
dir_mode: 751
syncthing:
src: "//{{ cifs_host }}/backup/syncthing"
path: /mnt/storagebox/syncthing
uid: "{{ users['syncthing'] + uid_shift }}"
gid: "{{ users['syncthing'] + uid_shift }}"
file_mode: 640
dir_mode: 750
projects:
- coturn
2024-09-07 10:16:47 +02:00
- diun
2024-02-17 19:01:04 +01:00
- etebase
2024-07-26 15:55:33 +02:00
- fireshare
2024-02-17 19:01:04 +01:00
- hedgedoc
- homepage
2024-07-06 10:29:57 +02:00
- keycloak
2024-03-16 13:49:47 +01:00
- mailserver
2024-03-29 20:56:28 +01:00
- postgres
2024-02-17 19:01:04 +01:00
- searxng
2024-04-20 12:48:37 +02:00
- stump
2024-02-17 19:01:04 +01:00
- synapse
- syncthing
2024-03-08 16:35:07 +01:00
- uptime-kuma
2024-02-17 19:01:04 +01:00
- vaultwarden
projects_to_backup:
2024-07-06 10:29:57 +02:00
- keycloak
borg_repodir: "{{ cifs_mounts['backups']['path'] }}/borg"
borg_passphrase_file: /etc/borg-passphrase.txt
borg_prune_options: |
--keep-within=1d
--keep-daily=7
--keep-weekly=4
--keep-monthly=12
--keep-yearly=10
2024-02-17 19:01:04 +01:00
# Ports exposed to host
ports:
coturn_listening: 3478
coturn_tls_listening: 5349
coturn_relay_min: 49152
coturn_relay_max: 49172
etebase: 3735
2024-07-26 15:55:33 +02:00
fireshare: 8085
2024-02-17 19:01:04 +01:00
hedgedoc: 8086
2024-07-02 16:25:11 +02:00
homepage: 8686
2024-07-06 10:29:57 +02:00
keycloak: 8444
2024-03-16 13:49:47 +01:00
mailserver_smtp: 1025
mailserver_smtps: 1465
mailserver_imaps: 1993
mailserver_https: 1443
2024-03-29 20:56:28 +01:00
postgres: 5432
2024-02-17 19:01:04 +01:00
searxng: 8083
2024-04-20 12:48:37 +02:00
stump: 10801
2024-02-17 19:01:04 +01:00
synapse: 8008
syncthing_discosrv: 8443
# Public port, forwarded to 22067 by nftables
syncthing_relaysrv: 143
2024-02-17 19:01:04 +01:00
syncthing_webui: 8384
syncthing_tcp: 18880
2024-02-17 19:01:04 +01:00
syncthing_udp: 22000
2024-03-08 16:35:07 +01:00
uptime_kuma: 3001
2024-02-17 19:01:04 +01:00
vaultwarden: 8081
# UID in containers
users:
coturn: 666
etebase: 373
2024-07-26 15:55:33 +02:00
fireshare: 1007
2024-02-17 19:01:04 +01:00
hedgedoc: 1004
2024-02-25 19:15:58 +01:00
homepage: 8686
2024-07-06 10:29:57 +02:00
keycloak: 1000
mailserver: 8
2024-03-29 20:56:28 +01:00
postgres: 70
2024-02-17 19:01:04 +01:00
searxng: 977
2024-08-07 12:49:57 +02:00
searxng_valkey: 999
2024-04-20 12:48:37 +02:00
stump: 1005
2024-02-17 19:01:04 +01:00
synapse: 991
syncthing: 1001
syncthing_discosrv: 1002
syncthing_relaysrv: 1003
2024-03-08 16:35:07 +01:00
uptime_kuma: 1006
2024-07-06 10:29:57 +02:00
vaultwarden: 1010
2024-02-17 19:01:04 +01:00
volumes:
coturn_tls_certificate_file: "/etc/letsencrypt/live/turn.{{ domain }}/fullchain.pem"
coturn_tls_certificate_key_file: "/etc/letsencrypt/live/turn.{{ domain }}/privkey.pem"
etebase_datadir: /mnt/etebasedata
2024-07-26 15:55:33 +02:00
fireshare_datadir: /mnt/firesharedata
fireshare_processeddir: /mnt/storagebox/fireshare/processed
fireshare_videosdir: /mnt/storagebox/fireshare/videos
hedgedoc_uploadsdir: /mnt/hedgedocuploads
mailserver_datadir: /mnt/mailserver
2024-03-16 13:49:47 +01:00
mailserver_tls_certificate_file: "/etc/letsencrypt/live/mail.{{ domain }}/fullchain.pem"
mailserver_tls_certificate_key_file: "/etc/letsencrypt/live/mail.{{ domain }}/privkey.pem"
2024-03-29 20:56:28 +01:00
postgres_datadir: /mnt/postgresdata
2024-04-20 12:48:37 +02:00
stump_configdir: /mnt/stump/config
stump_datadir: /mnt/stump/data
2024-02-17 19:01:04 +01:00
synapse_datadir: /mnt/synapsedata
syncthing_datadir: "{{ cifs_mounts['syncthing']['path'] }}"
2024-03-08 16:35:07 +01:00
uptime_kuma_datadir: /mnt/uptimekumadata
2024-02-17 19:01:04 +01:00
vaultwarden_datadir: /mnt/vwdata
# Service-specific variables
synapse:
max_upload_size: 50M