165 lines
4.3 KiB
YAML
165 lines
4.3 KiB
YAML
---
|
|
#######
|
|
# APT #
|
|
#######
|
|
|
|
apt_packages:
|
|
- name: openssh-server
|
|
- name: proxychains
|
|
|
|
apt_repositories_sources:
|
|
- deb http://mirrors.online.net/ubuntu focal main restricted
|
|
- deb http://mirrors.online.net/ubuntu focal-updates main restricted
|
|
- deb http://mirrors.online.net/ubuntu focal universe
|
|
- deb http://mirrors.online.net/ubuntu focal-updates universe
|
|
- deb http://mirrors.online.net/ubuntu focal multiverse
|
|
- deb http://mirrors.online.net/ubuntu focal-updates multiverse
|
|
- deb http://mirrors.online.net/ubuntu focal-backports main restricted universe multiverse
|
|
- deb http://security.ubuntu.com/ubuntu focal-security main restricted
|
|
- deb http://security.ubuntu.com/ubuntu focal-security universe
|
|
- deb http://security.ubuntu.com/ubuntu focal-security multiverse
|
|
|
|
############
|
|
# ALERTING #
|
|
############
|
|
|
|
alerts_cron:
|
|
- name: storage
|
|
weekday: 0
|
|
minute: 0
|
|
hour: 15
|
|
user: root
|
|
job: "/usr/local/scripts/alerts.sh storage >/dev/null 2>&1"
|
|
cron_file: alerts
|
|
- name: load
|
|
weekday: "*"
|
|
minute: "*/5"
|
|
hour: "*"
|
|
user: root
|
|
job: "/usr/local/scripts/alerts.sh load >/dev/null 2>&1"
|
|
cron_file: alerts
|
|
- name: cpu
|
|
weekday: "*"
|
|
minute: "*/5"
|
|
hour: "*"
|
|
user: root
|
|
job: "/usr/local/scripts/alerts.sh cpu >/dev/null 2>&1"
|
|
cron_file: alerts
|
|
- name: ping
|
|
weekday: "*"
|
|
minute: "*"
|
|
hour: 12
|
|
user: root
|
|
job: "/usr/local/scripts/alerts.sh ping >/dev/null 2>&1"
|
|
cron_file: alerts
|
|
- name: ssl
|
|
weekday: "*"
|
|
minute: 0
|
|
hour: 15
|
|
user: root
|
|
job: "/usr/local/scripts/alerts.sh ssl >/dev/null 2>&1"
|
|
cron_file: alerts
|
|
- name: storage
|
|
weekday: 0
|
|
minute: 0
|
|
hour: 15
|
|
user: root
|
|
job: "/usr/local/scripts/alerts.sh storage >/dev/null 2>&1"
|
|
cron_file: alerts
|
|
- name: backup_git
|
|
weekday: "*"
|
|
minute: 0
|
|
hour: 18
|
|
user: root
|
|
job: "/usr/local/scripts/alerts.sh backup_git >/dev/null 2>&1"
|
|
cron_file: alerts
|
|
- name: backup_vault
|
|
weekday: "*"
|
|
minute: 0
|
|
hour: 20
|
|
user: root
|
|
job: "/usr/local/scripts/alerts.sh backup_vault >/dev/null 2>&1"
|
|
cron_file: alerts
|
|
|
|
alerts_storage: scaleway
|
|
alerts_load: scaleway
|
|
alerts_ping: ovh
|
|
alerts_health: scaleway
|
|
alerts_backup_gitea: scaleway
|
|
alerts_backup_vault: scaleway
|
|
alerts_cpu: scaleway
|
|
alerts_ssl: scaleway
|
|
|
|
##############
|
|
# LOG ROTATE #
|
|
##############
|
|
|
|
logrotate_scripts:
|
|
- name: backup
|
|
paths:
|
|
- /opt/dockerapps/backup/*.zip
|
|
- /opt/dockerapps/appdata/vaultwarden/backup/*.tar.xz.gpg
|
|
options:
|
|
- daily
|
|
- rotate 4
|
|
- compress
|
|
- missingok
|
|
- notifempty
|
|
- create 0644 root root
|
|
- name: dockerapps
|
|
path: /opt/dockerapps/logs/homeserver/*.log
|
|
options:
|
|
- rotate 12
|
|
- monthly
|
|
- compress
|
|
- missingok
|
|
- delaycompress
|
|
scripts:
|
|
- name: restart gitea
|
|
script: docker-compose restart gitea
|
|
- name: restart vaultwarden
|
|
script: docker-compose restart vaultwarden
|
|
- name: restart grafana
|
|
script: docker-compose restart grafana
|
|
- name: restart traefrik
|
|
script: docker-compose restart traefrik
|
|
|
|
|
|
##########
|
|
# CHISEL #
|
|
##########
|
|
|
|
# SHOULD BE IN [server] GROUP
|
|
chisel_server: true
|
|
chisel_version: 1.8.1
|
|
chisel_basic_auth: "user:pass"
|
|
chisel_service_name: chisel-server
|
|
chisel_server_host: 163.172.84.28
|
|
chisel_config_name: chisel-server
|
|
chisel_server_port: 8080
|
|
chisel_proxychains_conf:
|
|
# chisel enable socks5, reverse and basic auth
|
|
- path: "/etc/chisel/{{ chisel_config_name }}.conf"
|
|
regexp: "^SOCK5=--socks5"
|
|
state: present
|
|
line: "SOCK5=--socks5"
|
|
- path: "/etc/chisel/{{ chisel_config_name }}.conf"
|
|
regexp: "^PID=--reverse"
|
|
state: present
|
|
line: "PID=--reverse"
|
|
- path: "/etc/chisel/{{ chisel_config_name }}.conf"
|
|
regexp: "^AUTH=--auth {{ chisel_basic_auth }}"
|
|
state: present
|
|
line: "AUTH=--auth {{ chisel_basic_auth }}"
|
|
- path: "/etc/chisel/{{ chisel_config_name }}.conf"
|
|
regexp: "^HOST=--host {{ chisel_server_host }}"
|
|
state: present
|
|
line: "HOST=--host {{ chisel_server_host }}"
|
|
# proxychains replace socks4 to socks5
|
|
- path: "/etc/proxychains.conf"
|
|
regexp: "^socks4 127.0.0.1 9050"
|
|
state: "absent"
|
|
- path: "/etc/proxychains.conf"
|
|
regexp: "^socks5 {{ chisel_server_host }} 1080"
|
|
state: present
|
|
line: "socks5 {{ chisel_server_host }} 1080" |