mirror of
https://github.com/fscotto/infra.git
synced 2026-09-27 11:02:47 +00:00
160d63c02d
* Add Atlas media and storage services * Document Atlas backend phase one and WireGuard deployment * Enable Atlas NAS management and document bootstrap workflow * Harden Atlas network, SSH, firewall, and sharing * Rotate Ansible Vault secrets * Allow configurable Aegis SSH users and authorized keys * Manage Aegis SSH authorized key fragments * Manage SSH authorized key fragments for infrastructure hosts * Harden Rocky storage and sharing configuration * Verify WireGuard handshakes and restore Podman networking
56 lines
1.4 KiB
YAML
56 lines
1.4 KiB
YAML
---
|
|
platform_profile: rocky
|
|
platform_family: redhat
|
|
platform_package_manager: dnf
|
|
platform_service_manager: systemd
|
|
|
|
rocky_openzfs_release_rpm: https://zfsonlinux.org/epel/zfs-release-3-0.el9.noarch.rpm
|
|
rocky_openzfs_gpg_key_url: >-
|
|
https://raw.githubusercontent.com/zfsonlinux/zfsonlinux.github.com/master/zfs-release/RPM-GPG-KEY-openzfs-key2
|
|
rocky_openzfs_gpg_key_fingerprint: 7DC7 299D CF7C 7FD9 CD87 701B A599 FD5E 9DB8 4141
|
|
rocky_syncthing_version: 2.1.3
|
|
rocky_syncthing_archive_checksum: sha256:f929eb8e5b72a85543eeeefb2c38f34a68e0c530e70758a2905b78840c76602c
|
|
rocky_syncthing_archive_url: >-
|
|
{{
|
|
'https://github.com/syncthing/syncthing/releases/download/v'
|
|
~ rocky_syncthing_version
|
|
~ '/syncthing-linux-amd64-v'
|
|
~ rocky_syncthing_version
|
|
~ '.tar.gz'
|
|
}}
|
|
|
|
rocky_manage_openzfs_repo: false
|
|
rocky_manage_syncthing_binary: false
|
|
rocky_manage_podman: false
|
|
rocky_manage_github_cli_repo: false
|
|
|
|
rocky_github_cli_repo_url: https://cli.github.com/packages/rpm/gh-cli.repo
|
|
rocky_github_cli_repo_file: /etc/yum.repos.d/gh-cli.repo
|
|
|
|
enabled_services:
|
|
- firewalld
|
|
|
|
rocky_common_packages:
|
|
- bash-completion
|
|
- bat
|
|
- fzf
|
|
- git
|
|
- jq
|
|
- tree
|
|
- unzip
|
|
- vim-enhanced
|
|
- wget
|
|
- zip
|
|
- zoxide
|
|
|
|
rocky_packages_base:
|
|
- dnf-plugins-core
|
|
- firewalld
|
|
- openssh-server
|
|
- rsync
|
|
- selinux-policy-targeted
|
|
- sudo
|
|
|
|
rocky_profile_packages: []
|
|
rocky_podman_packages: []
|