Remove dashes from group_vars names
This commit is contained in:
parent
e16b92563d
commit
3a77c2901f
29 changed files with 39 additions and 39 deletions
|
@ -3,7 +3,7 @@
|
|||
Wir, die Freifunk MWU Community, nutzen Ansible um unsere Freifunk Server aufzusetzen und zu konfigurieren. In
|
||||
diesem Repository verwalten wir unsere Ansible Roles und Playbooks.
|
||||
|
||||
Ein Server muss minimal vorbereitet sein, bevor dieser per Ansible z.B. zu einem Freifunk-Gateway gemacht werden
|
||||
Ein Server muss minimal vorbereitet sein, bevor dieser per Ansible z.B. zu einem Freifunk-Gateway gemacht werden
|
||||
kann. Die folgenden Voraussetzungen müssen erfüllt sein:
|
||||
|
||||
- Ein dedizierter (v)server muss existieren und unter einer IPv4- und einer IPv6-Adresse öffentlich erreichbar sein.
|
||||
|
@ -154,7 +154,7 @@ export PASSWORD_STORE_DIR=...
|
|||
|
||||
## Aufsetzen eines neuen Gateways
|
||||
|
||||
- FQDN im Inventory zur Gruppe ffmwu-gateways hinzufügen
|
||||
- FQDN im Inventory zur Gruppe gateways hinzufügen
|
||||
- Host-Variablen setzen
|
||||
- inventory/host_vars/$FQDN
|
||||
|
||||
|
|
|
@ -1,2 +1,2 @@
|
|||
[ffmwu-servers]
|
||||
[buildservers]
|
||||
milchreis.freifunk-mwu.de
|
|
@ -1,3 +1,3 @@
|
|||
[ffmwu-dns]
|
||||
[dns]
|
||||
kichererbse.freifunk-mwu.de
|
||||
linse.freifunk-mwu.de
|
|
@ -1,4 +1,4 @@
|
|||
[ffmwu-gateways]
|
||||
[gateways]
|
||||
ingwer.freifunk-mwu.de
|
||||
lotuswurzel.freifunk-mwu.de
|
||||
uffschnitt.freifunk-mwu.de
|
|
@ -34,9 +34,9 @@ public_prefixes:
|
|||
bgp_ipv4_transfer_net_legacy: 10.37.0.0/18
|
||||
bgp_ipv6_transfer_net_legacy: fd37:b4dc:4b1e::/64
|
||||
bgp_groups:
|
||||
- ffmwu-gateways
|
||||
- ffmwu-mesh-services
|
||||
- ffmwu-monitoring
|
||||
- gateways
|
||||
- services
|
||||
- monitoring
|
||||
|
||||
wireguard_networks:
|
||||
- ipv4: 10.87.253.0/31
|
||||
|
@ -181,13 +181,13 @@ wireguard_networks:
|
|||
port: 50027
|
||||
|
||||
fastd_groups:
|
||||
- ffmwu-gateways
|
||||
- ffmwu-monitoring
|
||||
- gateways
|
||||
- monitoring
|
||||
|
||||
prometheus_groups:
|
||||
- ffmwu-gateways
|
||||
- ffmwu-mesh-services
|
||||
- ffmwu-monitoring
|
||||
- gateways
|
||||
- services
|
||||
- monitoring
|
||||
|
||||
node_exporter_opts: "--collector.systemd"
|
||||
|
||||
|
|
|
@ -1,5 +1,5 @@
|
|||
---
|
||||
server_type: "mesh-service"
|
||||
server_type: "service"
|
||||
|
||||
magic: 67
|
||||
|
||||
|
|
|
@ -1,5 +1,5 @@
|
|||
---
|
||||
server_type: "mesh-service"
|
||||
server_type: "service"
|
||||
|
||||
magic: 71
|
||||
|
||||
|
|
|
@ -1,2 +1,2 @@
|
|||
[ffmwu-monitoring]
|
||||
[monitoring]
|
||||
suesskartoffel.freifunk-mwu.de
|
|
@ -1,2 +1,2 @@
|
|||
[ffmwu-build-servers]
|
||||
[servers]
|
||||
milchreis.freifunk-mwu.de
|
|
@ -1,3 +1,3 @@
|
|||
[ffmwu-mesh-services]
|
||||
[services]
|
||||
kichererbse.freifunk-mwu.de
|
||||
linse.freifunk-mwu.de
|
|
@ -1,2 +1,2 @@
|
|||
[test-vms]
|
||||
[test_vms]
|
||||
local-test-vm.ffmwu.local ansible_host=192.168.137.7 require_dns=False
|
|
@ -1,7 +1,7 @@
|
|||
#!/usr/bin/ansible-playbook
|
||||
---
|
||||
- name: Manage firmware buid servers
|
||||
hosts: ffmwu-build-servers
|
||||
hosts: buildservers
|
||||
|
||||
roles:
|
||||
- prerequisites
|
|
@ -1,7 +1,7 @@
|
|||
#!/usr/bin/ansible-playbook
|
||||
---
|
||||
- name: Manage Freifunk Gateways
|
||||
hosts: ffmwu-gateways
|
||||
hosts: gateways
|
||||
|
||||
roles:
|
||||
- prerequisites
|
||||
|
|
|
@ -1,7 +1,7 @@
|
|||
#!/usr/bin/ansible-playbook
|
||||
---
|
||||
- name: Manage Monitoring Server
|
||||
hosts: ffmwu-monitoring
|
||||
hosts: monitoring
|
||||
|
||||
roles:
|
||||
- prerequisites
|
||||
|
|
|
@ -1,7 +1,7 @@
|
|||
#!/usr/bin/ansible-playbook
|
||||
---
|
||||
- name: Manage Mesh Services Servers.
|
||||
hosts: ffmwu-mesh-services
|
||||
hosts: services
|
||||
|
||||
roles:
|
||||
- server-apt-repos
|
|
@ -2,6 +2,6 @@
|
|||
---
|
||||
- import_playbook: gateways.yml
|
||||
- import_playbook: monitoring.yml
|
||||
- import_playbook: mesh-services.yml
|
||||
- import_playbook: services.yml
|
||||
- import_playbook: dns.yml
|
||||
- import_playbook: firmware-build-server.yml
|
||||
- import_playbook: buildservers.yml
|
||||
|
|
|
@ -61,7 +61,7 @@
|
|||
loop: "{{ sysctl_settings_routing_basic }}"
|
||||
|
||||
- name: set sysctl settings for ip forwarding
|
||||
when: server_type == "gateway" or server_type == "mesh-service" or server_type == "monitoring"
|
||||
when: server_type == "gateway" or server_type == "service" or server_type == "monitoring"
|
||||
sysctl:
|
||||
name: "{{ item.name }}"
|
||||
value: "{{ item.value }}"
|
||||
|
|
|
@ -40,13 +40,13 @@ Unattended-Upgrade::Origins-Pattern {
|
|||
"origin=Debian,codename=sid,archive=unstable";
|
||||
"origin=Freifunk MWU,codename=${distro_codename},label=Freifunk MWU";
|
||||
"origin=nginx,codename=${distro_codename},label=nginx,archive=stable";
|
||||
{% if 'ffmwu-monitoring' in group_names %}
|
||||
{% if 'monitoring' in group_names %}
|
||||
"origin=yarn,codename=stable,archive=stable,label=yarn-stable";
|
||||
"origin=Node Source,codename=${distro_codename},label=Node Source";
|
||||
"origin=InfluxDB,codename=${distro_codename},label=InfluxDB";
|
||||
"origin=grafana stable,codename=stable,archive=stable,label=grafana stable";
|
||||
{% endif %}
|
||||
{% if 'ffmwu-dns' in group_names %}
|
||||
{% if 'dns' in group_names %}
|
||||
"origin=PowerDNS,label=PowerDNS";
|
||||
{% endif %}
|
||||
};
|
||||
|
|
|
@ -8,20 +8,20 @@ BIND_IP = "127.0.0.1"
|
|||
BIND_PORT = 5001
|
||||
|
||||
PROXY = {
|
||||
{% for host in groups["ffmwu-gateways"] %}
|
||||
{% for host in groups["gateways"] %}
|
||||
"{{ host.rsplit('.freifunk-mwu.de')[0] }}" : 5000,
|
||||
{% endfor %}
|
||||
}
|
||||
|
||||
# Used for bgpmap
|
||||
ROUTER_IP = {
|
||||
{% for host in groups["ffmwu-gateways"] %}
|
||||
{% for host in groups["gateways"] %}
|
||||
"{{ host.rsplit('.freifunk-mwu.de')[0] }}" : [ "{{ loopback_net_ipv4 | ipsubnet(32, hostvars[host]['magic']) | ipaddr('address') }}", "{{ loopback_net_ipv6 | ipaddr(hostvars[host]['magic']) | ipaddr('address') }}" ],
|
||||
{% endfor %}
|
||||
}
|
||||
|
||||
AS_NUMBER = {
|
||||
{% for host in groups["ffmwu-gateways"] %}
|
||||
{% for host in groups["gateways"] %}
|
||||
"{{ host.rsplit('.freifunk-mwu.de')[0] }}" : "{{ as_private }}",
|
||||
{% endfor %}
|
||||
}
|
||||
|
|
|
@ -6,7 +6,7 @@ LOG_LEVEL="WARNING"
|
|||
BIND_IP = "{{ loopback_net_ipv4 | ipsubnet(32, magic) | ipaddr('address') }}"
|
||||
BIND_PORT = 5000
|
||||
|
||||
ACCESS_LIST = [ {% for host in groups["ffmwu-monitoring"] %}"{{ loopback_net_ipv4 | ipsubnet(32, hostvars[host]['magic']) | ipaddr('address') }}"{% if not loop.last %}, {% endif %}{% endfor %} ]
|
||||
ACCESS_LIST = [ {% for host in groups["monitoring"] %}"{{ loopback_net_ipv4 | ipsubnet(32, hostvars[host]['magic']) | ipaddr('address') }}"{% if not loop.last %}, {% endif %}{% endfor %} ]
|
||||
|
||||
# ???
|
||||
IPV4_SOURCE = "10.207.0.37"
|
||||
|
|
|
@ -116,7 +116,7 @@ protocol kernel kernel_mwu {
|
|||
if is_mwu_loopback() then accept;
|
||||
reject;
|
||||
};
|
||||
merge paths yes limit {{ groups['ffmwu-gateways'] | length }};
|
||||
merge paths yes limit {{ groups['gateways'] | length }};
|
||||
kernel table ipt_mwu;
|
||||
};
|
||||
|
||||
|
|
|
@ -98,13 +98,13 @@ protocol kernel kernel_mwu {
|
|||
{% else %}
|
||||
if is_mwu_anycast() then accept;
|
||||
{% endif %}
|
||||
{% if server_type == "mesh-service" %}
|
||||
{% if server_type == "service" %}
|
||||
if is_ula() then accept;
|
||||
{% endif %}
|
||||
if is_mwu_loopback() then accept;
|
||||
reject;
|
||||
};
|
||||
merge paths yes limit {{ groups['ffmwu-gateways'] | length }};
|
||||
merge paths yes limit {{ groups['gateways'] | length }};
|
||||
kernel table ipt_mwu;
|
||||
};
|
||||
|
||||
|
|
|
@ -10,7 +10,7 @@ fastd_keys: '{{ git_path }}/peers-ffmwu'
|
|||
key_ttl: 900
|
||||
|
||||
gateways:
|
||||
{% for gateway in groups['ffmwu-gateways'] %}
|
||||
{% for gateway in groups['gateways'] %}
|
||||
- {{ gateway.rsplit('.freifunk-mwu.de')[0] }}
|
||||
{% endfor %}
|
||||
|
||||
|
|
|
@ -13,7 +13,7 @@ server {
|
|||
|
||||
allow 127.0.0.0/8;
|
||||
allow ::1/128;
|
||||
{% for group in ['ffmwu-monitoring', 'ffmwu-gateways'] %}
|
||||
{% for group in ['monitoring', 'gateways'] %}
|
||||
{% for host in groups[group] %}
|
||||
allow {{ lookup('dig', host, 'qtype=A') }};
|
||||
allow {{ lookup('dig', host, 'qtype=AAAA') }};
|
||||
|
|
|
@ -13,7 +13,7 @@ server {
|
|||
|
||||
allow 127.0.0.0/8;
|
||||
allow ::1/128;
|
||||
{% for host in groups['ffmwu-monitoring'] %}
|
||||
{% for host in groups['monitoring'] %}
|
||||
allow {{ lookup('dig', host, 'qtype=A') }};
|
||||
allow {{ lookup('dig', host, 'qtype=AAAA') }};
|
||||
deny all;
|
||||
|
|
|
@ -47,7 +47,7 @@ scrape_configs:
|
|||
scheme: "https"
|
||||
static_configs:
|
||||
- targets:
|
||||
{% for host in groups['ffmwu-gateways'] %}
|
||||
{% for host in groups['gateways'] %}
|
||||
- '{{ host }}:9281'
|
||||
{% endfor %}
|
||||
relabel_configs:
|
||||
|
|
Loading…
Reference in a new issue