pluto
b9be45dc71
Complete IaC covering: - 14 roles: common, docker, traefik, vaultwarden, monitoring, media, matrix, home_assistant, frigate, adguard, gitea, semaphore, openclaw, security, backup - Inventory for all hosts (Peggy, Bart, Yoda, NAS, Firewalla) - Stack playbooks: core-infrastructure, monitoring, media, communication, automation, smarthome, security-hardening - Maintenance playbooks: update-containers, backup, health-check - Production Docker Compose templates with Traefik labels - Security hardening (sysctl, auditd, UFW, fail2ban) - Automated backups with retention policy
38 lines
748 B
YAML
38 lines
748 B
YAML
---
|
|
ansible_host: 192.168.86.45
|
|
hostname: peggy
|
|
hardware_description: "Intel i7-6700T, 8GB RAM"
|
|
os: "Ubuntu 24.04"
|
|
|
|
docker_compose_stacks:
|
|
- core-infrastructure
|
|
- infrastructure
|
|
- monitoring
|
|
- media
|
|
- automation
|
|
- communication
|
|
- smarthome
|
|
|
|
# NAS mounts for Peggy
|
|
nfs_mounts:
|
|
- src: "192.168.86.30:/volume1/media"
|
|
dest: /mnt/nas/media
|
|
fstype: nfs
|
|
opts: "rw,hard,intr,rsize=8192,wsize=8192"
|
|
- src: "192.168.86.30:/volume1/backups"
|
|
dest: /mnt/nas/backups
|
|
fstype: nfs
|
|
opts: "rw,hard,intr"
|
|
|
|
# Backup paths
|
|
backup_sources:
|
|
- /data/docker-compose
|
|
- /data/traefik
|
|
- /data/vaultwarden
|
|
- /data/grafana
|
|
- /data/prometheus
|
|
- /data/homeassistant
|
|
- /data/gitea
|
|
|
|
backup_destination: /mnt/nas/backups/peggy
|