mirror of
https://github.com/fscotto/infra.git
synced 2026-09-27 11:02:47 +00:00
160d63c02d
* Add Atlas media and storage services * Document Atlas backend phase one and WireGuard deployment * Enable Atlas NAS management and document bootstrap workflow * Harden Atlas network, SSH, firewall, and sharing * Rotate Ansible Vault secrets * Allow configurable Aegis SSH users and authorized keys * Manage Aegis SSH authorized key fragments * Manage SSH authorized key fragments for infrastructure hosts * Harden Rocky storage and sharing configuration * Verify WireGuard handshakes and restore Podman networking
18 lines
555 B
YAML
18 lines
555 B
YAML
---
|
|
aegis_hostname: aegis
|
|
aegis_adguard_image: docker.io/adguard/adguardhome:latest
|
|
aegis_icloudpd_image: docker.io/boredazfcuk/icloudpd:latest
|
|
aegis_icloudpd_folder_structure: '{:%Y/%m/%d}'
|
|
aegis_icloudpd_synchronisation_interval: 86400
|
|
aegis_icloudpd_apple_id: ""
|
|
aegis_ikaros_mac_address: aa:bb:cc:dd:ee:ff
|
|
aegis_wol_port: 9
|
|
|
|
aegis_lan_subnet: CHANGEME_LAN_SUBNET
|
|
aegis_firewalld_zone: public
|
|
aegis_adguard_web_port: 80
|
|
aegis_ssh_allowed_users:
|
|
- "{{ ansible_user }}"
|
|
aegis_ssh_user_home: "/var/home/{{ ansible_user }}"
|
|
aegis_ssh_authorized_keys: []
|