mirror of
https://github.com/fscotto/infra.git
synced 2026-09-27 19:03:47 +00:00
160d63c02d
* Add Atlas media and storage services * Document Atlas backend phase one and WireGuard deployment * Enable Atlas NAS management and document bootstrap workflow * Harden Atlas network, SSH, firewall, and sharing * Rotate Ansible Vault secrets * Allow configurable Aegis SSH users and authorized keys * Manage Aegis SSH authorized key fragments * Manage SSH authorized key fragments for infrastructure hosts * Harden Rocky storage and sharing configuration * Verify WireGuard handshakes and restore Podman networking
36 lines
956 B
YAML
36 lines
956 B
YAML
---
|
|
hostname: prometheus
|
|
ansible_host: 179.237.102.172
|
|
ansible_user: rocky
|
|
ansible_port: 22
|
|
ansible_ssh_private_key_file: /home/fscotto/.ssh/id_ed25519
|
|
|
|
server_username: rocky
|
|
server_duckdns_domain: fscotto
|
|
server_ssh_authorized_keys:
|
|
- name: ikaros
|
|
key: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINrIxXjA3ffPwziKGR5gzc4gAoBehQPlnEMcXF4Wl0ZS ikaros"
|
|
- name: nymph
|
|
key: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEH/7GJfGt0ZVmKeEzceoFkFkeCXFryKK9vAbaip+HCx nymph"
|
|
- name: siren
|
|
key: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA95wYlzpfN3rjUhpMeP4KHn8I6ZrjQXoDTgwgRIa++b siren"
|
|
|
|
wireguard_overlay_enabled: true
|
|
wireguard_address: 10.0.0.1/24
|
|
wireguard_listen_port: 51820
|
|
wireguard_enable_ipv4_forwarding: true
|
|
wireguard_reload_rootful_podman_networks: true
|
|
wireguard_peers:
|
|
- name: atlas
|
|
host: atlas
|
|
allowed_ips:
|
|
- 10.0.0.2/32
|
|
|
|
host_packages:
|
|
- cockpit
|
|
- cockpit-navigator
|
|
- cockpit-podman
|
|
|
|
host_enabled_services:
|
|
- cockpit.socket
|