Files
infra/ansible/inventory/group_vars/server.yml
2026-03-30 19:02:24 +02:00

76 lines
1.5 KiB
YAML

---
server_username: "{{ username }}"
server_user_group: "{{ server_username }}"
server_user_home: "/home/{{ server_username }}"
effective_username: "{{ server_username }}"
effective_user_group: "{{ server_user_group }}"
effective_user_home: "{{ server_user_home }}"
profile_packages:
- avahi-daemon
- dmidecode
- dosfstools
- gh
- netcat-openbsd
- openssh-server
- parted
- pciutils
- ranger
- rsync
server_dotfiles:
- src: .gitignore_global
dest: .gitignore_global
mode: "0644"
- src: .themes.gitignore
dest: .themes.gitignore
mode: "0644"
- src: duckdns/
dest: duckdns/
mode: preserve
server_templates:
- src: server/.gitconfig.j2
dest: .gitconfig
mode: "0644"
server_directories:
- path: /opt/navidrome/data
owner: "{{ server_username }}"
group: "{{ server_user_group }}"
mode: "0755"
- path: /opt/music
owner: "{{ server_username }}"
group: "{{ server_user_group }}"
mode: "0755"
- path: /opt/npm/data
owner: root
group: root
mode: "0755"
- path: /opt/npm/letsencrypt
owner: root
group: root
mode: "0755"
- path: /opt/postgres/data
owner: root
group: root
mode: "0755"
- path: /opt/gitea/data
owner: root
group: root
mode: "0755"
- path: /home/git/.ssh
owner: git
group: git
mode: "0700"
server_ufw_rules:
- rule: allow
name: OpenSSH
server_sshd_settings:
PermitRootLogin: "no"
server_sshd_allow_users:
- "{{ server_username }}"