Files
infra/ansible/inventory/group_vars/server.yml
2026-09-12 17:19:20 +02:00

98 lines
2.1 KiB
YAML

---
server_username: "{{ username }}"
server_user_group: "{{ server_username }}"
server_user_home: "/home/{{ server_username }}"
effective_username: "{{ server_username }}"
effective_user_group: "{{ server_user_group }}"
effective_user_home: "{{ server_user_home }}"
server_container_stack_dir: /opt/docker/server
ai_agents: {}
vim_plugins_enabled: false
profile_packages:
- avahi-daemon
- dmidecode
- dosfstools
- gh
- gnupg
- gpg-agent
- netcat-openbsd
- openssh-server
- parted
- pciutils
- pinentry-curses
- ranger
- rsync
server_dotfiles:
- src: .bashrc.d/20-editor-server.sh
dest: .bashrc.d/20-editor-server.sh
mode: "0644"
- src: .gnupg/gpg-agent.conf
dest: .gnupg/gpg-agent.conf
mode: "0600"
- src: .gitignore_global
dest: .gitignore_global
mode: "0644"
- src: .themes.gitignore
dest: .themes.gitignore
mode: "0644"
server_templates:
- src: server/.gitconfig.j2
dest: .gitconfig
mode: "0644"
- src: server/docker-compose.yml.j2
dest: "{{ server_container_stack_dir }}/docker-compose.yml"
owner: root
group: root
mode: "0600"
no_log: true
server_directories:
- path: "{{ server_user_home }}/.bashrc.d"
owner: "{{ server_username }}"
group: "{{ server_user_group }}"
mode: "0755"
- path: "{{ server_user_home }}/.gnupg"
owner: "{{ server_username }}"
group: "{{ server_user_group }}"
mode: "0700"
- path: "{{ server_container_stack_dir }}"
owner: root
group: root
mode: "0755"
- path: /opt/npm/data
owner: root
group: root
mode: "0755"
- path: /opt/npm/letsencrypt
owner: root
group: root
mode: "0755"
- path: /opt/gitea/data
owner: root
group: root
mode: "0755"
server_syncthing_enabled: true
server_syncthing_directories:
- path: /opt/syncthing/config
owner: root
group: root
mode: "0755"
- path: /srv/syncthing
owner: root
group: root
mode: "0755"
- path: /srv/syncthing/data
owner: "1000"
group: "1000"
mode: "0755"
server_sshd_settings:
PermitRootLogin: "no"
server_sshd_allow_users:
- "{{ server_username }}"