Trash + Redo
This commit is contained in:
parent
1265f1cb06
commit
7a3ade11ff
24
README.md
24
README.md
@ -20,26 +20,26 @@ Ansible _tests_ to learn its concepts.
|
||||
|
||||
* TDD
|
||||
|
||||
### 2023-09-24
|
||||
### 2023-09-25
|
||||
|
||||
* TDD
|
||||
* docker-compose template: split single/multiple command(s) with a test _(await a better solution)_
|
||||
* Add _some_ documentation
|
||||
* Bugfixes _(founded when running stacks)_
|
||||
|
||||
### 2023-09-23
|
||||
### 2023-09-25
|
||||
|
||||
* TDD
|
||||
* Bugfixes
|
||||
* Rework on stacks folders organization
|
||||
|
||||
### 2023-09-19
|
||||
### 2023-09-25
|
||||
|
||||
* TDD
|
||||
* Depot reinitialization due to error
|
||||
* Bugfixes after empty vm deployment
|
||||
|
||||
### 2023-09-12
|
||||
### 2023-09-25
|
||||
|
||||
* TDD
|
||||
* Rework, refacto, variabilization
|
||||
@ -50,13 +50,13 @@ Ansible _tests_ to learn its concepts.
|
||||
* Add middleware option for traefik
|
||||
* Stacks definition: jekyll, registry, ntfy, ipfs
|
||||
|
||||
### 2023-09-11
|
||||
### 2023-09-25
|
||||
|
||||
* TDD
|
||||
* Add stack name override (and defaulting network name to it in this case in docker-compose template)
|
||||
* Stacks definition: promtail, portainer-agent, monitoring-vm, portainer
|
||||
|
||||
### 2023-09-10
|
||||
### 2023-09-25
|
||||
|
||||
* TDD
|
||||
* docker-compose template corrections
|
||||
@ -64,7 +64,7 @@ Ansible _tests_ to learn its concepts.
|
||||
* Redesign of 'files' folder structure for each stack (conf/datas/template as services subfolders)
|
||||
* Stacks definition: drawio, flame, hastebin
|
||||
|
||||
### 2023-09-09
|
||||
### 2023-09-25
|
||||
|
||||
* TDD
|
||||
* Reorder readme's changelog
|
||||
@ -74,7 +74,7 @@ Ansible _tests_ to learn its concepts.
|
||||
* Add system services managment
|
||||
* Rename template files
|
||||
|
||||
### 2023-09-08
|
||||
### 2023-09-25
|
||||
|
||||
* TDD
|
||||
* Move Itzg from Orochi task to VM conditionnal stack
|
||||
@ -84,7 +84,7 @@ Ansible _tests_ to learn its concepts.
|
||||
* Stacks definition: adguardhome, adminer, aptcacherng, dl, homepage, itzg
|
||||
* Add _jinja2.ext.do_ to **jinja2_extensions** in _ansible.cfg_
|
||||
|
||||
### 2023-09-07
|
||||
### 2023-09-25
|
||||
|
||||
* TDD
|
||||
* Rework using roles
|
||||
@ -95,7 +95,7 @@ Ansible _tests_ to learn its concepts.
|
||||
* Templating stacks
|
||||
* Stacks definition: dozzle, watchtower
|
||||
|
||||
### 2023-09-06
|
||||
### 2023-09-25
|
||||
|
||||
* TDD
|
||||
* Refinements
|
||||
@ -103,7 +103,7 @@ Ansible _tests_ to learn its concepts.
|
||||
* Use of Vault
|
||||
* Improve VM base deployment
|
||||
|
||||
### 2023-09-05
|
||||
### 2023-09-25
|
||||
|
||||
* TDD
|
||||
* Rework as concept
|
||||
@ -112,7 +112,7 @@ Ansible _tests_ to learn its concepts.
|
||||
* Add things to common
|
||||
* Add Itzg Minecraft Server
|
||||
|
||||
### 2023-09-01
|
||||
### 2023-09-25
|
||||
|
||||
* TDD
|
||||
* Depot reinitialization due to corruption
|
||||
|
||||
@ -1,4 +1,4 @@
|
||||
# 2023-09-19
|
||||
# 2023-09-25
|
||||
|
||||
[defaults]
|
||||
home = /opt/ansible
|
||||
|
||||
18
inventory/group_vars/all.yml
Normal file
18
inventory/group_vars/all.yml
Normal file
@ -0,0 +1,18 @@
|
||||
$ANSIBLE_VAULT;1.1;AES256
|
||||
36383630346233663239303335663439356635393364383133393736313262343761393034316530
|
||||
3338383035393135343465626165663262363566623062620a326433313766633137373562383831
|
||||
65343339653862356334636535393062613363386231646462663535626536313265616535616561
|
||||
6465383836393233320a306632306530366133653331653839393833653861636134326235363561
|
||||
66333637633234376138333636343761633832346134343335393233316337616562613730633666
|
||||
31626162326133376565353236383562303733326431343937363539656637353531326565346431
|
||||
35373366643739353963383533333638343034303732386563386637386335333834373936656561
|
||||
39616137613964313838653930353664636432613262303236666239633431333634376361373935
|
||||
30386431363066613034383831353865663265386335373662386339336436623835383734323930
|
||||
63623464326461613463396137666264333962666462346332663262303064363339663331323938
|
||||
34373463323938313834383837393935636261313461653038633764313863643433326337303463
|
||||
38366362306161623166353237323337636439333661346139303037353362663565653531353530
|
||||
64396136663735383932643464646464396635353036633033343464383830373235323932656163
|
||||
30356365306161633233336461643239326465643436336533313534666365633362303437303665
|
||||
34656263656233336639356664346435356437333730613565666230333663383139303037636236
|
||||
32376563303936343765383332313338333865616539303738326439666632326266316230626130
|
||||
31346362386332663934356534616261623538333665383163333638373131326231
|
||||
2
inventory/host_vars/all.yml
Normal file
2
inventory/host_vars/all.yml
Normal file
@ -0,0 +1,2 @@
|
||||
# 2023-09-25
|
||||
---
|
||||
2
inventory/host_vars/orochi.yml
Normal file
2
inventory/host_vars/orochi.yml
Normal file
@ -0,0 +1,2 @@
|
||||
# 2023-09-25
|
||||
---
|
||||
75
inventory/zogg.yml
Normal file
75
inventory/zogg.yml
Normal file
@ -0,0 +1,75 @@
|
||||
# 2023-09-25
|
||||
|
||||
zogg:
|
||||
|
||||
hosts:
|
||||
|
||||
izanagi:
|
||||
ansible_host: izanagi.home
|
||||
ansible_connection: ssh
|
||||
ansible_port: "{{sshport}}"
|
||||
ansible_ssh_user: "{{sshuser}}"
|
||||
ansible_ssh_private_key_file: "{{sshkey}}"
|
||||
|
||||
omoikane:
|
||||
ansible_host: omoikane.home
|
||||
ansible_connection: ssh
|
||||
ansible_port: "{{sshport}}"
|
||||
ansible_ssh_user: "{{sshuser}}"
|
||||
ansible_ssh_private_key_file: "{{sshkey}}"
|
||||
|
||||
raijin:
|
||||
ansible_host: raijin.home
|
||||
ansible_connection: ssh
|
||||
ansible_port: "{{sshport}}"
|
||||
ansible_ssh_user: "{{sshuser}}"
|
||||
ansible_ssh_private_key_file: "{{sshkey}}"
|
||||
|
||||
tenjin:
|
||||
ansible_host: tenjin.home
|
||||
ansible_connection: ssh
|
||||
ansible_port: "{{sshport}}"
|
||||
ansible_ssh_user: "{{sshuser}}"
|
||||
ansible_ssh_private_key_file: "{{sshkey}}"
|
||||
|
||||
inari:
|
||||
ansible_host: inari.home
|
||||
ansible_connection: ssh
|
||||
ansible_port: "{{sshport}}"
|
||||
ansible_ssh_user: "{{sshuser}}"
|
||||
ansible_ssh_private_key_file: "{{sshkey}}"
|
||||
|
||||
uzume:
|
||||
ansible_host: uzume.home
|
||||
ansible_connection: ssh
|
||||
ansible_port: "{{sshport}}"
|
||||
ansible_ssh_user: "{{sshuser}}"
|
||||
ansible_ssh_private_key_file: "{{sshkey}}"
|
||||
|
||||
sarutahiko:
|
||||
ansible_host: sarutahiko.home
|
||||
ansible_connection: ssh
|
||||
ansible_port: "{{sshport}}"
|
||||
ansible_ssh_user: "{{sshuser}}"
|
||||
ansible_ssh_private_key_file: "{{sshkey}}"
|
||||
|
||||
susanoo:
|
||||
ansible_host: susanoo.home
|
||||
ansible_connection: ssh
|
||||
ansible_port: "{{sshport}}"
|
||||
ansible_ssh_user: "{{sshuser}}"
|
||||
ansible_ssh_private_key_file: "{{sshkey}}"
|
||||
|
||||
orochi:
|
||||
ansible_host: orochi.home
|
||||
ansible_connection: ssh
|
||||
ansible_port: "{{sshport}}"
|
||||
ansible_ssh_user: "{{sshuser}}"
|
||||
ansible_ssh_private_key_file: "{{sshkey}}"
|
||||
|
||||
suijin:
|
||||
ansible_host: suijin.home
|
||||
ansible_connection: ssh
|
||||
ansible_port: "{{sshport}}"
|
||||
ansible_ssh_user: "{{sshuser}}"
|
||||
ansible_ssh_private_key_file: "{{sshkey}}"
|
||||
3
logs/README.md
Normal file
3
logs/README.md
Normal file
@ -0,0 +1,3 @@
|
||||
# Logs
|
||||
|
||||
Show logs from playbooks run.
|
||||
3
playbook/README.md
Normal file
3
playbook/README.md
Normal file
@ -0,0 +1,3 @@
|
||||
# Playbook
|
||||
|
||||
* orochi.yml: base playbook for debug
|
||||
45
playbook/orochi.yml
Normal file
45
playbook/orochi.yml
Normal file
@ -0,0 +1,45 @@
|
||||
# 2023-09-25
|
||||
---
|
||||
|
||||
- name: Orochi
|
||||
hosts: orochi
|
||||
|
||||
vars:
|
||||
vm_name: "orochi" # VM name
|
||||
vm_title: "Orochi" # VM title
|
||||
vm_ip: "151" # VM IP
|
||||
# VM specifics stacks
|
||||
stacks_vm:
|
||||
#[]
|
||||
- "{{ adguardhome }}"
|
||||
- "{{ adminer }}"
|
||||
- "{{ aptcacherng }}"
|
||||
- "{{ dl }}"
|
||||
- "{{ drawio }}"
|
||||
- "{{ flame }}"
|
||||
- "{{ hastebin }}"
|
||||
- "{{ homepage }}"
|
||||
- "{{ itzg }}"
|
||||
- "{{ jekyll }}"
|
||||
- "{{ monitoring_vm }}"
|
||||
- "{{ portainer_agent }}"
|
||||
- "{{ portainer }}"
|
||||
- "{{ promtail }}"
|
||||
- "{{ registry }}"
|
||||
- "{{ ntfy }}"
|
||||
- "{{ ipfs }}"
|
||||
availables: []
|
||||
|
||||
roles:
|
||||
- common # Perform common tacks
|
||||
- docker # Perform Docker installation
|
||||
- vm # Perform VM preparation
|
||||
- stacks # Perform stacks creation (include common & 'stacks_vm')
|
||||
|
||||
tasks:
|
||||
|
||||
# Orochi
|
||||
- ansible.builtin.include_tasks: orochi/tasks/main.yml
|
||||
tags:
|
||||
- tasks
|
||||
- orochi
|
||||
29
playbook/orochi/tasks/helloworld.yml
Normal file
29
playbook/orochi/tasks/helloworld.yml
Normal file
@ -0,0 +1,29 @@
|
||||
# 2023-09-25
|
||||
# Tasks: helloworld
|
||||
---
|
||||
|
||||
- ansible.builtin.include_vars: ../vars/helloworld.yml
|
||||
|
||||
- name: Run hello-world
|
||||
community.docker.docker_container:
|
||||
cleanup: true
|
||||
keep_volumes: false
|
||||
output_logs: true
|
||||
pull: false
|
||||
name: hello-world
|
||||
image: hello-world:latest
|
||||
hostname: hello-world
|
||||
auto_remove: false
|
||||
detach: false
|
||||
register: container_output
|
||||
tags:
|
||||
- tasks
|
||||
- orochi
|
||||
- testing
|
||||
- docker
|
||||
- container
|
||||
- helloworld
|
||||
|
||||
- name: Display hello-world output
|
||||
debug:
|
||||
msg: "Output:[{{ container_output.container.Output | trim }}]"
|
||||
15
playbook/orochi/tasks/main.yml
Normal file
15
playbook/orochi/tasks/main.yml
Normal file
@ -0,0 +1,15 @@
|
||||
# 2023-09-25
|
||||
# Tasks: main
|
||||
---
|
||||
|
||||
- ansible.builtin.include_vars: ../vars/main.yml
|
||||
|
||||
# Hello World
|
||||
- ansible.builtin.include_tasks: helloworld.yml
|
||||
when:
|
||||
- task_enable_all
|
||||
- task_enable_helloworld
|
||||
tags:
|
||||
- tasks
|
||||
- testing
|
||||
- helloworld
|
||||
3
playbook/orochi/vars/helloworld.yml
Normal file
3
playbook/orochi/vars/helloworld.yml
Normal file
@ -0,0 +1,3 @@
|
||||
# 2023-09-05
|
||||
# Vars: hello-world
|
||||
---
|
||||
6
playbook/orochi/vars/main.yml
Normal file
6
playbook/orochi/vars/main.yml
Normal file
@ -0,0 +1,6 @@
|
||||
# 2023-09-25
|
||||
# Vars: main
|
||||
---
|
||||
|
||||
task_enable_all: false
|
||||
task_enable_helloworld: false
|
||||
8
roles/README.md
Normal file
8
roles/README.md
Normal file
@ -0,0 +1,8 @@
|
||||
# Roles
|
||||
|
||||
Define common roles for playbook runs.
|
||||
|
||||
* **common**: setup a common base sor linux/debian vm
|
||||
* **docker**: install & setup a functionnal Docker base
|
||||
* **stacks**: definitions of my Docker stacks
|
||||
* **vm**: install & setup common vm's stack functionnalities
|
||||
3
roles/common/README.md
Normal file
3
roles/common/README.md
Normal file
@ -0,0 +1,3 @@
|
||||
# Common
|
||||
|
||||
Used to setup a functionnal base linuyx/debian system.
|
||||
41
roles/common/tasks/aliases.yml
Normal file
41
roles/common/tasks/aliases.yml
Normal file
@ -0,0 +1,41 @@
|
||||
# 2023-09-25
|
||||
# Tasks: aliases
|
||||
---
|
||||
|
||||
- ansible.builtin.include_vars: aliases.yml
|
||||
|
||||
- name: Process bash aliases template
|
||||
ansible.builtin.template:
|
||||
backup: true
|
||||
src: "{{ bash_aliases_template }}"
|
||||
dest: "{{ bash_aliases_distribution }}"
|
||||
owner: root
|
||||
group: root
|
||||
mode: u=rw,g=r,o=r
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
tags:
|
||||
- template
|
||||
- system
|
||||
- bash
|
||||
- aliases
|
||||
- add
|
||||
|
||||
- name: Link bash_aliases to bash_bashrc
|
||||
ansible.builtin.blockinfile:
|
||||
backup: true
|
||||
path: "{{ bash_bashrc }}"
|
||||
block: |
|
||||
# 2023-09-25
|
||||
# Load: bash_aliases
|
||||
if [ -f {{ bash_aliases_distribution }} ]; then
|
||||
. {{ bash_aliases_distribution }}
|
||||
fi
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
tags:
|
||||
- template
|
||||
- system
|
||||
- bash
|
||||
- aliases
|
||||
- link
|
||||
13
roles/common/tasks/daemons.yml
Normal file
13
roles/common/tasks/daemons.yml
Normal file
@ -0,0 +1,13 @@
|
||||
# 2023-09-25
|
||||
# Tasks: daemons
|
||||
---
|
||||
|
||||
- name: Reload system daemons
|
||||
ansible.builtin.systemd:
|
||||
daemon_reload: true
|
||||
tags:
|
||||
- system
|
||||
- services
|
||||
- reload
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
20
roles/common/tasks/directories.yml
Normal file
20
roles/common/tasks/directories.yml
Normal file
@ -0,0 +1,20 @@
|
||||
# 2023-09-25
|
||||
# Tasks: directories
|
||||
---
|
||||
|
||||
- ansible.builtin.include_vars: directories.yml
|
||||
|
||||
- name: Create extra directories
|
||||
ansible.builtin.file:
|
||||
path: "{{ item }}"
|
||||
owner: root
|
||||
group: root
|
||||
state: directory
|
||||
mode: u=rwx,g=rx,o=rx
|
||||
with_items: "{{ directories_create }}"
|
||||
tags:
|
||||
- system
|
||||
- directories
|
||||
- create
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
29
roles/common/tasks/locales.yml
Normal file
29
roles/common/tasks/locales.yml
Normal file
@ -0,0 +1,29 @@
|
||||
# 2023-09-25
|
||||
# Tasks: locales
|
||||
---
|
||||
|
||||
- ansible.builtin.include_vars: locales.yml
|
||||
|
||||
- name: Process default locale template
|
||||
ansible.builtin.template:
|
||||
src: "{{ locale_template }}"
|
||||
dest: "{{ locale_template_distribution }}"
|
||||
owner: root
|
||||
group: root
|
||||
mode: u=rw,g=r,o=r
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
tags:
|
||||
- system
|
||||
- locales
|
||||
- default
|
||||
|
||||
- name: Build locales
|
||||
ansible.builtin.locale_gen:
|
||||
name : "{{ item }}"
|
||||
with_items: "{{ locales_selections }}"
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
tags:
|
||||
- system
|
||||
- locales
|
||||
135
roles/common/tasks/main.yml
Normal file
135
roles/common/tasks/main.yml
Normal file
@ -0,0 +1,135 @@
|
||||
# 2023-09-25
|
||||
# Tasks: main
|
||||
---
|
||||
|
||||
- ansible.builtin.include_vars: main.yml
|
||||
|
||||
# Packages
|
||||
- ansible.builtin.include_tasks: packages.yml
|
||||
when:
|
||||
- task_enable_all
|
||||
- task_enable_packages
|
||||
tags:
|
||||
- tasks
|
||||
- system
|
||||
- packages
|
||||
|
||||
# Users
|
||||
- ansible.builtin.include_tasks: users.yml
|
||||
when:
|
||||
- task_enable_all
|
||||
- task_enable_users
|
||||
tags:
|
||||
- tasks
|
||||
- system
|
||||
- locales
|
||||
|
||||
# Locales
|
||||
- ansible.builtin.include_tasks: locales.yml
|
||||
when:
|
||||
- task_enable_all
|
||||
- task_enable_locales
|
||||
tags:
|
||||
- tasks
|
||||
- system
|
||||
- locales
|
||||
|
||||
# Timezones
|
||||
- ansible.builtin.include_tasks: timezone.yml
|
||||
when:
|
||||
- task_enable_all
|
||||
- task_enable_timezone
|
||||
tags:
|
||||
- tasks
|
||||
- system
|
||||
- timezone
|
||||
|
||||
# NTP
|
||||
- ansible.builtin.include_tasks: ntp.yml
|
||||
when:
|
||||
- task_enable_all
|
||||
- task_enable_ntp
|
||||
tags:
|
||||
- tasks
|
||||
- system
|
||||
- ntp
|
||||
|
||||
# Aliases
|
||||
- ansible.builtin.include_tasks: aliases.yml
|
||||
when:
|
||||
- task_enable_all
|
||||
- task_enable_aliases
|
||||
tags:
|
||||
- tasks
|
||||
- system
|
||||
- aliases
|
||||
|
||||
# Mounts
|
||||
- ansible.builtin.include_tasks: mounts.yml
|
||||
when:
|
||||
- task_enable_all
|
||||
- task_enable_mounts
|
||||
tags:
|
||||
- tasks
|
||||
- system
|
||||
- mounts
|
||||
|
||||
# Directories
|
||||
- ansible.builtin.include_tasks: directories.yml
|
||||
when:
|
||||
- task_enable_all
|
||||
- task_enable_directories
|
||||
tags:
|
||||
- tasks
|
||||
- system
|
||||
- directories
|
||||
|
||||
# Samba
|
||||
- ansible.builtin.include_tasks: samba.yml
|
||||
when:
|
||||
- task_enable_all
|
||||
- task_enable_samba
|
||||
tags:
|
||||
- tasks
|
||||
- system
|
||||
- samba
|
||||
|
||||
# Tuned
|
||||
- ansible.builtin.include_tasks: tuned.yml
|
||||
when:
|
||||
- task_enable_all
|
||||
- task_enable_tuned
|
||||
tags:
|
||||
- tasks
|
||||
- system
|
||||
- tuned
|
||||
|
||||
# SystemD
|
||||
- ansible.builtin.include_tasks: systemd.yml
|
||||
when:
|
||||
- task_enable_all
|
||||
- task_enable_systemd
|
||||
tags:
|
||||
- tasks
|
||||
- system
|
||||
- systemd
|
||||
|
||||
# Daemons
|
||||
- ansible.builtin.include_tasks: daemons.yml
|
||||
when:
|
||||
- task_enable_all
|
||||
- task_enable_daemons
|
||||
tags:
|
||||
- tasks
|
||||
- system
|
||||
- daemons
|
||||
|
||||
# Services
|
||||
- ansible.builtin.include_tasks: services.yml
|
||||
when:
|
||||
- task_enable_all
|
||||
- task_enable_services
|
||||
tags:
|
||||
- tasks
|
||||
- system
|
||||
- services
|
||||
62
roles/common/tasks/mounts.yml
Normal file
62
roles/common/tasks/mounts.yml
Normal file
@ -0,0 +1,62 @@
|
||||
# 2023-09-25
|
||||
# Tasks: mounts
|
||||
---
|
||||
|
||||
- ansible.builtin.include_vars: mounts.yml
|
||||
|
||||
- name: Create mount directories
|
||||
ansible.builtin.file:
|
||||
path: "{{ item }}"
|
||||
owner: root
|
||||
group: root
|
||||
state: directory
|
||||
mode: u=rwx,g=rwx,o=rwx
|
||||
with_items: "{{ mounts_create }}"
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
tags:
|
||||
- system
|
||||
- mounts
|
||||
- create
|
||||
|
||||
- name: Append informations to fstab
|
||||
ansible.builtin.lineinfile:
|
||||
backup: true
|
||||
path: "{{ fstab_path }}"
|
||||
state: present
|
||||
line: "# {{ item }}"
|
||||
with_items:
|
||||
- "master: {{ common_mastering }}"
|
||||
- "updated: {{ ansible_date_time.date }}"
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
tags:
|
||||
- system
|
||||
- mounts
|
||||
- fstab
|
||||
- append
|
||||
|
||||
- name: Append mount directories to fstab
|
||||
ansible.builtin.lineinfile:
|
||||
backup: true
|
||||
path: "{{ fstab_path }}"
|
||||
state: present
|
||||
line: tmpfs {{ item }} tmpfs defaults,noatime 0 0
|
||||
with_items: "{{ mounts_fstab_append }}"
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
tags:
|
||||
- system
|
||||
- mounts
|
||||
- fstab
|
||||
- append
|
||||
|
||||
- name: Remount all mount
|
||||
ansible.builtin.shell: |
|
||||
mount -a
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
tags:
|
||||
- system
|
||||
- mounts
|
||||
- remount
|
||||
51
roles/common/tasks/ntp.yml
Normal file
51
roles/common/tasks/ntp.yml
Normal file
@ -0,0 +1,51 @@
|
||||
# 2023-09-25
|
||||
# Tasks: ntp
|
||||
---
|
||||
|
||||
- ansible.builtin.include_vars: ntp.yml
|
||||
|
||||
- name: Install NTP
|
||||
ansible.builtin.package:
|
||||
name: "{{ ntp_package_daemon }}"
|
||||
state: present
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
tags:
|
||||
- apt
|
||||
- packages
|
||||
- ntp
|
||||
- add
|
||||
|
||||
- name: Install tzdata
|
||||
ansible.builtin.package:
|
||||
name: "{{ ntp_package_tzdata }}"
|
||||
state: present
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
tags:
|
||||
- apt
|
||||
- packages
|
||||
- tzdata
|
||||
- add
|
||||
|
||||
- name: Populate service facts
|
||||
service_facts:
|
||||
|
||||
- name: Disable systemd-timesyncd (if it's running but ntp is enabled)
|
||||
ansible.builtin.service:
|
||||
name: systemd-timesyncd.service
|
||||
enabled: false
|
||||
state: stopped
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
- ntp_enabled | bool
|
||||
- '"systemd-timesyncd.service" in services'
|
||||
- services["systemd-timesyncd.service"]["status"] != "not-found"
|
||||
|
||||
- name: Process ntp template
|
||||
ansible.builtin.template:
|
||||
src: "{{ ntp_conf_template }}"
|
||||
dest: "{{ ntp_conf_distribution }}"
|
||||
mode: u=rw,g=r,o=r
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
79
roles/common/tasks/packages.yml
Normal file
79
roles/common/tasks/packages.yml
Normal file
@ -0,0 +1,79 @@
|
||||
# 2023-09-25
|
||||
# Tasks: apt
|
||||
---
|
||||
|
||||
- ansible.builtin.include_vars: "packages/{{ ansible_facts['os_family'] | lower }}.yml"
|
||||
|
||||
- name: Comment all entries in sources.list
|
||||
ansible.builtin.replace:
|
||||
backup: true
|
||||
path: /etc/apt/sources.list
|
||||
regexp: '^(.*)$'
|
||||
replace: '# \1'
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
- ansible_facts['os_family'] == "Debian"
|
||||
tags:
|
||||
- apt
|
||||
- sources
|
||||
- cdrom
|
||||
|
||||
- name: Process packages repositories template
|
||||
ansible.builtin.template:
|
||||
backup: true
|
||||
src: "{{ sources_list_template }}"
|
||||
dest: "{{ sources_list_distribution }}"
|
||||
owner: root
|
||||
group: root
|
||||
mode: u=rw,g=r,o=r
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
- ansible_facts['os_family'] == "Debian"
|
||||
tags:
|
||||
- system
|
||||
- packages
|
||||
- template
|
||||
- repositories
|
||||
- debian
|
||||
|
||||
- name: Upgrade packages
|
||||
ansible.builtin.apt:
|
||||
state: present
|
||||
install_recommends: no
|
||||
update_cache: yes
|
||||
upgrade: full
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
- ansible_facts['os_family'] == "Debian"
|
||||
tags:
|
||||
- system
|
||||
- packages
|
||||
- add
|
||||
|
||||
- name: Install packages
|
||||
ansible.builtin.apt:
|
||||
state: present
|
||||
install_recommends: no
|
||||
update_cache: yes
|
||||
name: "{{ packages_needed }}"
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
- ansible_facts['os_family'] == "Debian"
|
||||
tags:
|
||||
- system
|
||||
- packages
|
||||
- add
|
||||
|
||||
- name: Remove packages
|
||||
ansible.builtin.apt:
|
||||
state: absent
|
||||
autoclean: true
|
||||
autoremove: true
|
||||
name: "{{ packages_removed }}"
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
- ansible_facts['os_family'] == "Debian"
|
||||
tags:
|
||||
- system
|
||||
- packages
|
||||
- add
|
||||
21
roles/common/tasks/samba.yml
Normal file
21
roles/common/tasks/samba.yml
Normal file
@ -0,0 +1,21 @@
|
||||
# 2023-09-25
|
||||
# Tasks: samba
|
||||
---
|
||||
|
||||
- ansible.builtin.include_vars: vault/samba.yml
|
||||
- ansible.builtin.include_vars: samba.yml
|
||||
|
||||
- name: Process smb.conf template
|
||||
ansible.builtin.template:
|
||||
backup: true
|
||||
src: "{{ smb_conf_template }}"
|
||||
dest: "{{ smb_conf_distribution }}"
|
||||
owner: root
|
||||
group: root
|
||||
mode: u=rw,g=r,o=r
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
tags:
|
||||
- template
|
||||
- samba
|
||||
- add
|
||||
63
roles/common/tasks/services.yml
Normal file
63
roles/common/tasks/services.yml
Normal file
@ -0,0 +1,63 @@
|
||||
# 2023-09-25
|
||||
# Tasks: services
|
||||
---
|
||||
|
||||
- ansible.builtin.include_vars: services.yml
|
||||
|
||||
- name: Disable services
|
||||
ansible.builtin.service:
|
||||
name: "{{ item }}"
|
||||
enabled: false
|
||||
state: "stopped"
|
||||
with_items: "{{ services_disable }}"
|
||||
tags:
|
||||
- system
|
||||
- services
|
||||
- disable
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
- ansible_facts['os_family'] == "Debian"
|
||||
|
||||
- name: Enable services
|
||||
ansible.builtin.service:
|
||||
name: "{{ item }}"
|
||||
enabled: true
|
||||
state: "started"
|
||||
with_items: "{{ services_enable }}"
|
||||
tags:
|
||||
- system
|
||||
- services
|
||||
- enable
|
||||
- restart
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
- ansible_facts['os_family'] == "Debian"
|
||||
|
||||
- name: Restart services
|
||||
ansible.builtin.service:
|
||||
name: "{{ item }}"
|
||||
enabled: true
|
||||
state: "restarted"
|
||||
with_items: "{{ services_restart }}"
|
||||
tags:
|
||||
- system
|
||||
- services
|
||||
- enable
|
||||
- restart
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
- ansible_facts['os_family'] == "Debian"
|
||||
|
||||
- name: Enable timers
|
||||
ansible.builtin.service:
|
||||
name: "{{ item }}"
|
||||
enabled: true
|
||||
state: "started"
|
||||
with_items: "{{ timers_enable }}"
|
||||
tags:
|
||||
- system
|
||||
- timers
|
||||
- enable
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
- ansible_facts['os_family'] == "Debian"
|
||||
44
roles/common/tasks/systemd.yml
Normal file
44
roles/common/tasks/systemd.yml
Normal file
@ -0,0 +1,44 @@
|
||||
# 2023-09-25
|
||||
# Tasks: systemd
|
||||
---
|
||||
|
||||
- ansible.builtin.include_vars: systemd.yml
|
||||
- ansible.builtin.include_vars: ../../roles/vm/vars/vault/ports.yml
|
||||
|
||||
- name: Create all systemd required directories
|
||||
ansible.builtin.file:
|
||||
path: "{{ item }}"
|
||||
owner: root
|
||||
group: root
|
||||
state: directory
|
||||
mode: u=rwx,g=rx,o=rx
|
||||
with_items:
|
||||
- "{{ systemd_directories }}"
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
tags:
|
||||
- system
|
||||
- systemd
|
||||
- directories
|
||||
- create
|
||||
|
||||
- name: "Process systemd templates"
|
||||
ansible.builtin.template:
|
||||
lstrip_blocks: true
|
||||
trim_blocks: true
|
||||
backup: yes
|
||||
src: "{{ templates.local }}"
|
||||
dest: "{{ templates.remote }}"
|
||||
owner: root
|
||||
group: root
|
||||
mode: u=rw,g=r,o=r
|
||||
with_items:
|
||||
- "{{ systemd_templates }}"
|
||||
loop_control:
|
||||
loop_var: templates
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
tags:
|
||||
- system
|
||||
- services
|
||||
- systemd
|
||||
11
roles/common/tasks/timezone.yml
Normal file
11
roles/common/tasks/timezone.yml
Normal file
@ -0,0 +1,11 @@
|
||||
# 2023-09-25
|
||||
# Tasks: timezone
|
||||
---
|
||||
|
||||
- ansible.builtin.include_vars: timezone.yml
|
||||
|
||||
- name: Define timezone
|
||||
ansible.builtin.timezone:
|
||||
name: "{{ timezone }}"
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
28
roles/common/tasks/tuned.yml
Normal file
28
roles/common/tasks/tuned.yml
Normal file
@ -0,0 +1,28 @@
|
||||
# 2023-09-25
|
||||
# Tasks: tuned
|
||||
---
|
||||
|
||||
- ansible.builtin.include_vars: tuned.yml
|
||||
|
||||
- name: Install tuned
|
||||
ansible.builtin.apt:
|
||||
name: "{{ packages_needed }}"
|
||||
install_recommends: false
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
- ansible_facts['os_family'] == "Debian"
|
||||
tags:
|
||||
- apt
|
||||
- packages
|
||||
- add
|
||||
|
||||
- name: Select tuned profile
|
||||
command: tuned-adm profile virtual-guest
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
- ansible_facts['os_family'] == "Debian"
|
||||
tags:
|
||||
- system
|
||||
- service
|
||||
- tuned
|
||||
- profile
|
||||
19
roles/common/tasks/users.yml
Normal file
19
roles/common/tasks/users.yml
Normal file
@ -0,0 +1,19 @@
|
||||
# 2023-09-25
|
||||
# Tasks: users
|
||||
---
|
||||
|
||||
- name: Create new users
|
||||
ansible.builtin.user:
|
||||
append: yes
|
||||
name: "{{ item.name }}"
|
||||
group: "{{ item.name }}"
|
||||
shell: "{{ item.shell }}"
|
||||
groups: "{{ item.groups }}"
|
||||
with_items:
|
||||
- "{{ users }}"
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
tags:
|
||||
- system
|
||||
- users
|
||||
- create
|
||||
389
roles/common/templates/bash_aliases.j2
Normal file
389
roles/common/templates/bash_aliases.j2
Normal file
@ -0,0 +1,389 @@
|
||||
{# Updated: 2023-09-25 #}
|
||||
# master: {{ common_mastering }}
|
||||
# updated: {{ ansible_date_time.date }}
|
||||
|
||||
# -----------------------------------------------------------------------------
|
||||
# BASH TWEAKS
|
||||
# -----------------------------------------------------------------------------
|
||||
|
||||
|
||||
# ------------------------------
|
||||
# HISTORY
|
||||
# ------------------------------
|
||||
|
||||
# Line wrap on window resize
|
||||
shopt -s checkwinsize
|
||||
|
||||
# Enable history
|
||||
set -o history
|
||||
|
||||
# Combine multiline commands into one in history
|
||||
shopt -s cmdhist
|
||||
|
||||
# Disable completion when the input buffer is empty. i.e. Hitting tab
|
||||
# and waiting a long time for bash to expand all of $PATH.
|
||||
shopt -s no_empty_cmd_completion
|
||||
|
||||
# Shorter history
|
||||
export HISTCONTROL=ignoredups
|
||||
export HISTIGNORE='&:ls:[bf]g:exit'
|
||||
|
||||
# big history
|
||||
export HISTFILESIZE=20000
|
||||
export HISTSIZE=10000
|
||||
shopt -s histappend
|
||||
|
||||
# History completion
|
||||
bind "'\e[A': history-search-backward"
|
||||
bind "'\e[B': history-search-forward"
|
||||
|
||||
|
||||
# ------------------------------
|
||||
# COMPLETION
|
||||
# ------------------------------
|
||||
|
||||
# Autocomplétion
|
||||
if ! shopt -oq posix; then
|
||||
if [ -f /usr/share/bash-completion/bash_completion ]; then
|
||||
. /usr/share/bash-completion/bash_completion
|
||||
elif [ -f /etc/bash_completion ]; then
|
||||
. /etc/bash_completion
|
||||
fi
|
||||
fi
|
||||
|
||||
# bash completion
|
||||
[ -r /usr/share/bash-completion/bash_completion ] && . /usr/share/bash-completion/bash_completion
|
||||
bind 'set completion-ignore-case on' # note: bind used instead of sticking these in .inputrc
|
||||
bind 'set bell-style none' # no bell
|
||||
bind 'set show-all-if-ambiguous On' # show list automatically, without double tab
|
||||
|
||||
|
||||
# ------------------------------
|
||||
# COLORS
|
||||
# ------------------------------
|
||||
|
||||
# colors & char
|
||||
# text normal colors
|
||||
red='\e[0;31m'
|
||||
blue='\e[0;34m'
|
||||
cyan='\e[0;36m'
|
||||
green='\e[0;32m'
|
||||
yellow='\e[0;33m'
|
||||
# text bright colors
|
||||
bred='\e[0;91m'
|
||||
bblue='\e[0;94m'
|
||||
bcyan='\e[0;96m'
|
||||
bgreen='\e[0;92m'
|
||||
byellow='\e[0;93m'
|
||||
bwhite='\e[0;97m'
|
||||
# reset color
|
||||
NC='\e[0m'
|
||||
|
||||
# Set colorful PS1 only on colorful terminals.
|
||||
# dircolors --print-database uses its own built-in database
|
||||
# instead of using /etc/DIR_COLORS. Try to use the external file
|
||||
# first to take advantage of user additions.
|
||||
# We run dircolors directly due to its changes in file syntax and
|
||||
# terminal name patching.
|
||||
use_color=false
|
||||
if type -P dircolors >/dev/null ; then
|
||||
# Enable colors for ls, etc. Prefer ~/.dir_colors #64489
|
||||
LS_COLORS=
|
||||
if [[ -f ~/.dir_colors ]] ; then
|
||||
eval "$(dircolors -b ~/.dir_colors)"
|
||||
elif [[ -f /etc/DIR_COLORS ]] ; then
|
||||
eval "$(dircolors -b /etc/DIR_COLORS)"
|
||||
else
|
||||
eval "$(dircolors -b)"
|
||||
fi
|
||||
# Note: We always evaluate the LS_COLORS setting even when it's the
|
||||
# default. If it isn't set, then `ls` will only colorize by default
|
||||
# based on file attributes and ignore extensions (even the compiled
|
||||
# in defaults of dircolors). #583814
|
||||
if [[ -n ${LS_COLORS:+set} ]] ; then
|
||||
use_color=true
|
||||
else
|
||||
# Delete it if it's empty as it's useless in that case.
|
||||
unset LS_COLORS
|
||||
fi
|
||||
else
|
||||
# Some systems (e.g. BSD & embedded) don't typically come with
|
||||
# dircolors so we need to hardcode some terminals in here.
|
||||
case ${TERM} in
|
||||
[aEkx]term*|rxvt*|gnome*|konsole*|screen|cons25|*color) use_color=true;;
|
||||
esac
|
||||
fi
|
||||
|
||||
if ${use_color} ; then
|
||||
if [[ ${EUID} == 0 ]] ; then
|
||||
PS1+='\[\033[01;31m\]\h\[\033[01;34m\] \w \$\[\033[00m\] '
|
||||
else
|
||||
PS1+='\[\033[01;32m\]\u@\h\[\033[01;34m\] \w \$\[\033[00m\] '
|
||||
fi
|
||||
|
||||
#BSD#@export CLICOLOR=1
|
||||
#GNU#@alias ls='ls --color=auto'
|
||||
alias grep='grep --colour=auto'
|
||||
alias egrep='egrep --colour=auto'
|
||||
alias fgrep='fgrep --colour=auto'
|
||||
else
|
||||
# show root@ when we don't have colors
|
||||
PS1+='\u@\h \w \$ '
|
||||
fi
|
||||
|
||||
for sh in /etc/bash/bashrc.d/* ; do
|
||||
[[ -r ${sh} ]] && source '${sh}'
|
||||
done
|
||||
|
||||
# Try to keep environment pollution down, EPA loves us.
|
||||
unset use_color sh
|
||||
|
||||
|
||||
# ------------------------------
|
||||
# PROMPT
|
||||
# ------------------------------
|
||||
|
||||
# Prompt
|
||||
PS1='[\u@\h \W]\$ '
|
||||
case ${TERM} in
|
||||
xterm*|rxvt*|Eterm|aterm|kterm|gnome*)
|
||||
PROMPT_COMMAND=${PROMPT_COMMAND:+$PROMPT_COMMAND; }"printf '\033]0;%s@%s:%s\007' '${USER}' '${HOSTNAME%%.*}' '${PWD/#$HOME/\~}'"
|
||||
|
||||
;;
|
||||
screen*)
|
||||
PROMPT_COMMAND=${PROMPT_COMMAND:+$PROMPT_COMMAND; }"printf '\033_%s@%s:%s\033\\' '${USER}' '${HOSTNAME%%.*}' '${PWD/#$HOME/\~}'"
|
||||
;;
|
||||
esac
|
||||
if [ '$color_prompt' = yes ]; then
|
||||
PS1='${debian_chroot:+($debian_chroot)}\[\033[01;32m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '
|
||||
else
|
||||
PS1='${debian_chroot:+($debian_chroot)}\u@\h:\w\$ '
|
||||
fi
|
||||
unset color_prompt force_color_prompt
|
||||
|
||||
# Titre du terminal
|
||||
# If this is an xterm set the title to user@host:dir
|
||||
case '$TERM' in
|
||||
xterm*|rxvt*)
|
||||
PS1='\[\e]0;${debian_chroot:+($debian_chroot)}\u@\h: \w\a\]$PS1'
|
||||
;;
|
||||
*)
|
||||
;;
|
||||
esac
|
||||
|
||||
|
||||
# ------------------------------
|
||||
# ALIASES
|
||||
# ------------------------------
|
||||
|
||||
# Privileged access
|
||||
if (( UID != 0 )); then
|
||||
alias sudo='sudo '
|
||||
alias scat='sudo cat'
|
||||
alias svim='sudoedit'
|
||||
alias root='sudo -i'
|
||||
alias reboot='sudo systemctl reboot'
|
||||
alias poweroff='sudo systemctl poweroff'
|
||||
alias update='sudo apt update'
|
||||
alias netctl='sudo netctl'
|
||||
fi
|
||||
|
||||
## Safety features
|
||||
alias cp='cp -i'
|
||||
alias mv='mv -i'
|
||||
alias rm='rm -I' # 'rm -i' prompts for every file
|
||||
|
||||
# btrfs cow
|
||||
alias cp='cp -i --reflink=auto'
|
||||
|
||||
# safer alternative w/ timeout, not stored in history
|
||||
alias rm=' timeout 3 rm -Iv --one-file-system'
|
||||
alias ln='ln -i'
|
||||
alias chown='chown --preserve-root'
|
||||
alias chmod='chmod --preserve-root'
|
||||
alias chgrp='chgrp --preserve-root'
|
||||
alias cls=" echo -ne '\033c'" # clear screen for real (it does not work in Terminology)
|
||||
|
||||
## Make Bash error tolerant
|
||||
alias :q=' exit'
|
||||
alias :Q=' exit'
|
||||
alias :x=' exit'
|
||||
alias cd..='cd ..'
|
||||
|
||||
# process using web
|
||||
alias ports='lsof -i -n -P'
|
||||
|
||||
# make parent directory if needed
|
||||
alias mkdir='mkdir -p'
|
||||
|
||||
# quit, exit & reboot
|
||||
alias :q='exit'
|
||||
alias oust="echo 'bye $USER...'; sleep 2s && systemctl poweroff"
|
||||
alias comeback="echo 'be back right now...'; sleep 2s && systemctl reboot"
|
||||
|
||||
# Modified commands
|
||||
alias diff='colordiff' # requires colordiff package
|
||||
alias grep='grep --color=auto'
|
||||
alias more='less'
|
||||
alias df='df -h'
|
||||
alias du='du -c -h'
|
||||
alias mkdir='mkdir -p -v'
|
||||
alias nano='nano -w'
|
||||
alias ping='ping -c 5'
|
||||
alias dmesg='dmesg -HL'
|
||||
|
||||
## New commands
|
||||
alias da="date '+%A, %B %d, %Y [%T]'"
|
||||
alias du1='du --max-depth=1'
|
||||
alias hist='history | grep' # requires an argument
|
||||
alias openports='ss --all --numeric --processes --ipv4 --ipv6'
|
||||
alias pgg='ps -Af | grep' # requires an argument
|
||||
alias ..='cd ..'
|
||||
alias x=exit
|
||||
|
||||
# changes directories
|
||||
alias ..='cd ..'
|
||||
alias ...='cd ../..'
|
||||
alias ....='cd ../../..'
|
||||
alias .....='cd ../../../..'
|
||||
alias .3='...'
|
||||
alias .4='....'
|
||||
alias .5='.....'
|
||||
|
||||
# handy short cuts
|
||||
alias h='history'
|
||||
alias j='jobs -l'
|
||||
|
||||
# date /time
|
||||
alias path='echo -e ${PATH//:/\\n}'
|
||||
alias now="date +'%T'"
|
||||
alias nowtime=now
|
||||
alias nowdate="date +'%d-%m-%Y'"
|
||||
|
||||
## pass options to free ##
|
||||
alias free='free -h'
|
||||
alias meminfo='free -m -l -t'
|
||||
|
||||
## get top process eating memory
|
||||
alias psmem='ps auxf | sort -nr -k 4'
|
||||
alias psmem10='ps auxf | sort -nr -k 4 | head -10'
|
||||
|
||||
## get top process eating cpu ##
|
||||
alias pscpu='ps auxf | sort -nr -k 3'
|
||||
alias pscpu10='ps auxf | sort -nr -k 3 | head -10'
|
||||
|
||||
## Resume wget by default
|
||||
alias wget='wget -c'
|
||||
|
||||
# better 'top'
|
||||
alias top='htop'
|
||||
|
||||
# screen default resume
|
||||
alias screen='screen -R'
|
||||
alias sr='screen'
|
||||
|
||||
# listings
|
||||
alias ll='ls -lha'
|
||||
alias lo='ls -o'
|
||||
alias lh='ls -lh'
|
||||
alias la='ls -la'
|
||||
alias sl='ls'
|
||||
alias l='ls'
|
||||
alias s='ls'
|
||||
alias lt='ls -laptr' #oldest first sort
|
||||
alias labc='ls -lap' #alphabetical sort
|
||||
|
||||
## ls
|
||||
alias ls='ls -hFX --color=auto --group-directories-first'
|
||||
alias lr='ls -RhFX --color=auto --group-directories-first'
|
||||
alias ll='ls -lhFXa --color=auto --group-directories-first'
|
||||
alias la='ll -AhFX --color=auto --group-directories-first'
|
||||
alias lx='ll -BXhFX --color=auto --group-directories-first' # sort by extension
|
||||
alias lz='ll -rShFX --color=auto --group-directories-first' # sort by size
|
||||
alias lt='ll -rthFX --color=auto --group-directories-first' # sort by date
|
||||
alias lm='la | more'
|
||||
|
||||
# Git related
|
||||
alias gs='git status'
|
||||
alias gc='git commit'
|
||||
alias ga='git add'
|
||||
alias gd='git diff'
|
||||
alias gb='git branch'
|
||||
alias gl='git log'
|
||||
alias gsb='git show-branch'
|
||||
alias gco='git checkout'
|
||||
alias gg='git grep'
|
||||
alias gk='gitk --all'
|
||||
alias gr='git rebase'
|
||||
alias gri='git rebase --interactive'
|
||||
alias gcp='git cherry-pick'
|
||||
alias grm='git rm'
|
||||
|
||||
# performances analysis
|
||||
alias analyze='systemd-analyze'
|
||||
alias blame='systemd-analyze blame'
|
||||
alias criticalchain='systemd-analyze critical-chain'
|
||||
alias plot='systemd-analyze plot > /tmp/boot.analysis.svg && chmod 0777 /tmp/boot.analysis.svg'
|
||||
|
||||
# systemctl
|
||||
alias ssysctl='sudo systemctl'
|
||||
alias status='ssysctl status'
|
||||
alias running='ssysctl list-units'
|
||||
alias failed='ssysctl --failed'
|
||||
alias units='ssysctl list-unit-files'
|
||||
alias start='ssysctl start'
|
||||
alias stop='ssysctl stop'
|
||||
alias restart='ssysctl restart'
|
||||
alias reload='ssysctl reload'
|
||||
alias status='ssysctl status'
|
||||
alias enable='ssysctl enable'
|
||||
alias disable='ssysctl disable'
|
||||
alias activate='enable --now'
|
||||
alias mask='ssysctl mask'
|
||||
alias unmask='ssysctl unmask'
|
||||
alias help='ssysctl help'
|
||||
alias daemonreload='ssysctl daemon-reload'
|
||||
alias reboot='ssysctl reboot'
|
||||
alias poweroff='ssysctl poweroff'
|
||||
alias suspend='ssysctl suspend'
|
||||
alias hibernate='ssysctl hibernate'
|
||||
alias sleep='ssysctl hybrid-sleep'
|
||||
alias reenable='ssysctl reenable'
|
||||
alias revert='ssysctl revert'
|
||||
alias targets='running --type=target'
|
||||
alias enabled='units |grep enabled'
|
||||
alias disabled='units |grep disabled'
|
||||
alias jobs='ssysctl list-jobs'
|
||||
|
||||
# journald
|
||||
alias journal='sudo journalctl'
|
||||
alias boot='journal -b'
|
||||
alias pid='journal _PID='
|
||||
alias follow='journal -f'
|
||||
alias kernel='journal -k'
|
||||
alias unit='journal -u'
|
||||
alias jeca='journal -p err..alert'
|
||||
alias jreload='reload systemd-journald.service'
|
||||
alias jauth='journal SYSLOG_FACILITY=10'
|
||||
alias since='journal --since'
|
||||
alias today="journalsince 'yesterday'"
|
||||
alias j1h="journalsince '60 minutes ago'"
|
||||
alias j15m="journal --since '15 minutes ago'"
|
||||
alias j30m="journal --since '30 minutes ago'"
|
||||
alias kernelboot='journal -k -b -1'
|
||||
alias boots='journal --list-boots'
|
||||
alias entries20='journal -n 20'
|
||||
|
||||
# exports
|
||||
export EDITOR='nano'
|
||||
export BROWSER='surf'
|
||||
export PAGER='most'
|
||||
|
||||
# path
|
||||
export PATH="/usr/lib/colorgcc/bin/:$PATH"
|
||||
export CCACHE_PATH='/usr/bin'
|
||||
export CCACHE_DIR=/mnt/build
|
||||
export BUILDDIR=/mnt/build
|
||||
|
||||
# vm
|
||||
NPROC=$(nproc)
|
||||
12
roles/common/templates/debian_sources_list.j2
Normal file
12
roles/common/templates/debian_sources_list.j2
Normal file
@ -0,0 +1,12 @@
|
||||
{# Updated: 2023-09-25 #}
|
||||
# master: {{ common_mastering }}
|
||||
# updated: {{ ansible_date_time.date }}
|
||||
|
||||
deb http://deb.debian.org/debian/ {{ ansible_distribution_release }} main contrib non-free non-free-firmware
|
||||
deb-src http://deb.debian.org/debian/ {{ ansible_distribution_release }} main contrib non-free non-free-firmware
|
||||
|
||||
deb http://security.debian.org/debian-security {{ ansible_distribution_release }}-security main contrib non-free non-free-firmware
|
||||
deb-src http://security.debian.org/debian-security {{ ansible_distribution_release }}-security main contrib non-free non-free-firmware
|
||||
|
||||
deb http://deb.debian.org/debian/ {{ ansible_distribution_release }}-updates main contrib non-free non-free-firmware
|
||||
deb-src http://deb.debian.org/debian/ {{ ansible_distribution_release }}-updates main contrib non-free non-free-firmware
|
||||
22
roles/common/templates/ethernet_service.j2
Normal file
22
roles/common/templates/ethernet_service.j2
Normal file
@ -0,0 +1,22 @@
|
||||
{# Updated: 2023-09-25 #}
|
||||
# master: {{ common_mastering }}
|
||||
# updated: {{ ansible_date_time.date }}
|
||||
|
||||
[Unit]
|
||||
Description=Ethernet MTU & Tx Queue Len
|
||||
After=network-online.target
|
||||
|
||||
[Service]
|
||||
Type=oneshot
|
||||
{% if jumbo_frames is defined %}
|
||||
#ExecStart=ip link set {{ ethernet_interface }} mtu 1500
|
||||
#ExecStart=ip link set {{ ethernet_interface }} txqueuelen 1000
|
||||
ExecStart=ip link set {{ ethernet_interface }} mtu {{ ethernet_mtu }}
|
||||
ExecStart=ip link set {{ ethernet_interface }} txqueuelen {{ ethernet_txqueuelen }}
|
||||
{% else %}
|
||||
ExecStart=ip link set {{ ethernet_interface }} mtu 1500
|
||||
ExecStart=ip link set {{ ethernet_interface }} txqueuelen 1000
|
||||
{% endif %}
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
10
roles/common/templates/journald_conf.j2
Normal file
10
roles/common/templates/journald_conf.j2
Normal file
@ -0,0 +1,10 @@
|
||||
{# Updated: 2023-09-25 #}
|
||||
# master: {{ common_mastering }}
|
||||
# updated: {{ ansible_date_time.date }}
|
||||
|
||||
[Journal]
|
||||
MaxFileSec=1week
|
||||
SystemMaxUse=250M
|
||||
SystemMaxFileSize=50M
|
||||
SystemMaxFiles=32
|
||||
RuntimeMaxFiles=32
|
||||
50
roles/common/templates/locale.j2
Normal file
50
roles/common/templates/locale.j2
Normal file
@ -0,0 +1,50 @@
|
||||
{# Updated: 2023-09-25 #}
|
||||
# master: {{ common_mastering }}
|
||||
# updated: {{ ansible_date_time.date }}
|
||||
|
||||
LANG="{{ locales_default.lang }}"
|
||||
{% if locales_default.language is defined %}
|
||||
LANGUAGE="{{ locales_default.language }}"
|
||||
{% endif %}
|
||||
{% if locales_default.lc_address is defined %}
|
||||
LC_ADDRESS="{{ locales_default.lc_address }}"
|
||||
{% endif %}
|
||||
{% if locales_default.lc_all is defined %}
|
||||
LC_ALL="{{ locales_default.lc_all }}"
|
||||
{% endif %}
|
||||
{% if locales_default.lc_collate is defined %}
|
||||
LC_COLLATE="{{ locales_default.lc_collate }}"
|
||||
{% endif %}
|
||||
{% if locales_default.lc_ctype is defined %}
|
||||
LC_CTYPE="{{ locales_default.lc_ctype }}"
|
||||
{% endif %}
|
||||
{% if locales_default.lc_identification is defined %}
|
||||
LC_IDENTIFICATION="{{ locales_default.lc_identification }}"
|
||||
{% endif %}
|
||||
{% if locales_default.lc_measurement is defined %}
|
||||
LC_MEASUREMENT="{{ locales_default.lc_measurement }}"
|
||||
{% endif %}
|
||||
{% if locales_default.lc_messages is defined %}
|
||||
LC_MESSAGES="{{ locales_default.lc_messages }}"
|
||||
{% endif %}
|
||||
{% if locales_default.lc_monetary is defined %}
|
||||
LC_MONETARY="{{ locales_default.lc_monetary }}"
|
||||
{% endif %}
|
||||
{% if locales_default.lc_name is defined %}
|
||||
LC_NAME="{{ locales_default.lc_name }}"
|
||||
{% endif %}
|
||||
{% if locales_default.lc_numeric is defined %}
|
||||
LC_NUMERIC="{{ locales_default.lc_numeric }}"
|
||||
{% endif %}
|
||||
{% if locales_default.lc_paper is defined %}
|
||||
LC_PAPER="{{ locales_default.lc_paper }}"
|
||||
{% endif %}
|
||||
{% if locales_default.lc_response is defined %}
|
||||
LC_RESPONSE="{{ locales_default.lc_response }}"
|
||||
{% endif %}
|
||||
{% if locales_default.lc_telephone is defined %}
|
||||
LC_TELEPHONE="{{ locales_default.lc_telephone }}"
|
||||
{% endif %}
|
||||
{% if locales_default.lc_time is defined %}
|
||||
LC_TIME="{{ locales_default.lc_time }}"
|
||||
{% endif %}
|
||||
14
roles/common/templates/multiqueue_service.j2
Normal file
14
roles/common/templates/multiqueue_service.j2
Normal file
@ -0,0 +1,14 @@
|
||||
{# Updated: 2023-09-25 #}
|
||||
# master: {{ common_mastering }}
|
||||
# updated: {{ ansible_date_time.date }}
|
||||
|
||||
[Unit]
|
||||
Description=Ethernet Multiqueue
|
||||
After=network-online.target
|
||||
|
||||
[Service]
|
||||
Type=oneshot
|
||||
ExecStart=ethtool -L {{ ethernet_interface }} combined ${NPROC}
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
6
roles/common/templates/multiqueue_service_override.j2
Normal file
6
roles/common/templates/multiqueue_service_override.j2
Normal file
@ -0,0 +1,6 @@
|
||||
{# Updated: 2023-09-25 #}
|
||||
# master: {{ common_mastering }}
|
||||
# updated: {{ ansible_date_time.date }}
|
||||
|
||||
[Service]
|
||||
Environment="NPROC={{ ethernet_multiqueue }}"
|
||||
116
roles/common/templates/ntp_conf.j2
Normal file
116
roles/common/templates/ntp_conf.j2
Normal file
@ -0,0 +1,116 @@
|
||||
{# Updated: 2023-09-25 #}
|
||||
# master: {{ common_mastering }}
|
||||
# updated: {{ ansible_date_time.date }}
|
||||
|
||||
# /etc/ntpsec/ntp.conf, configuration for ntpd; see ntp.conf(5) for help
|
||||
|
||||
driftfile {{ ntp_driftfile }}
|
||||
leapfile {{ ntp_leapfile }}
|
||||
|
||||
# To enable Network Time Security support as a server, obtain a certificate
|
||||
# (e.g. with Let's Encrypt), configure the paths below, and uncomment:
|
||||
# nts cert CERT_FILE
|
||||
# nts key KEY_FILE
|
||||
# nts enable
|
||||
|
||||
# You must create /var/log/ntpsec (owned by ntpsec:ntpsec) to enable logging.
|
||||
#statsdir /var/log/ntpsec/
|
||||
#statistics loopstats peerstats clockstats
|
||||
#filegen loopstats file loopstats type day enable
|
||||
#filegen peerstats file peerstats type day enable
|
||||
#filegen clockstats file clockstats type day enable
|
||||
|
||||
statistics loopstats peerstats clockstats
|
||||
filegen loopstats file loopstats type day enable
|
||||
filegen peerstats file peerstats type day enable
|
||||
filegen clockstats file clockstats type day enable
|
||||
|
||||
{% if ntp_tinker_panic is sameas true %}
|
||||
# Always reset the clock, even if the new time is more than 1000s away
|
||||
# from the current system time. Usefull for VMs that can be paused
|
||||
# and much later resumed.
|
||||
tinker panic 0
|
||||
{% endif %}
|
||||
|
||||
# This should be maxclock 7, but the pool entries count towards maxclock.
|
||||
tos maxclock 11
|
||||
|
||||
# Comment this out if you have a refclock and want it to be able to discipline
|
||||
# the clock by itself (e.g. if the system is not connected to the network).
|
||||
tos minclock 4 minsane 3
|
||||
|
||||
# Specify one or more NTP servers.
|
||||
|
||||
# Public NTP servers supporting Network Time Security:
|
||||
# server time.cloudflare.com nts
|
||||
|
||||
# pool.ntp.org maps to about 1000 low-stratum NTP servers. Your server will
|
||||
# pick a different set every time it starts up. Please consider joining the
|
||||
# pool: <https://www.pool.ntp.org/join.html>
|
||||
|
||||
{% for item in ntp_servers %}
|
||||
pool {{ item }} iburst dynamic
|
||||
{% endfor %}
|
||||
|
||||
# Access control configuration; see /usr/share/doc/ntpsec-doc/html/accopt.html
|
||||
# for details.
|
||||
#
|
||||
# Note that "restrict" applies to both servers and clients, so a configuration
|
||||
# that might be intended to block requests from certain clients could also end
|
||||
# up blocking replies from your own upstream servers.
|
||||
|
||||
# By default, exchange time with everybody, but don't allow configuration.
|
||||
restrict default kod nomodify nopeer noquery limited
|
||||
|
||||
# Allow pool associations
|
||||
restrict source nomodify notrap noquery
|
||||
|
||||
# Local users may interrogate the ntp server more closely.
|
||||
|
||||
# Permit all access over the loopback interface. This could
|
||||
# be tightened as well, but to do so would effect some of
|
||||
# the administrative functions.
|
||||
{% for item in ntp_restrict %}
|
||||
restrict {{ item }}
|
||||
{% endfor %}
|
||||
|
||||
|
||||
# Clients from this (example!) subnet have unlimited access, but only if
|
||||
# cryptographically authenticated.
|
||||
#restrict 192.168.123.0 mask 255.255.255.0 notrust
|
||||
|
||||
# Enable public key cryptography.
|
||||
#crypto
|
||||
|
||||
#includefile /etc/ntp/crypto/pw
|
||||
|
||||
# Key file containing the keys and key identifiers used when operating
|
||||
# with symmetric key cryptography.
|
||||
#keys /etc/ntp/keys
|
||||
|
||||
# Specify the key identifiers which are trusted.
|
||||
#trustedkey 4 8 42
|
||||
|
||||
# Specify the key identifier to use with the ntpdc utility.
|
||||
#requestkey 8
|
||||
|
||||
# Specify the key identifier to use with the ntpq utility.
|
||||
#controlkey 8
|
||||
|
||||
# Enable writing of statistics records.
|
||||
#statistics clockstats cryptostats loopstats peerstats
|
||||
|
||||
# Disable the monitoring facility to prevent amplification attacks using ntpdc
|
||||
# monlist command when default restrict does not include the noquery flag. See
|
||||
# CVE-2013-5211 for more details.
|
||||
# Note: Monitoring will not be disabled with the limited restriction flag.
|
||||
disable monitor
|
||||
|
||||
# If you want to provide time to your local subnet, change the next line.
|
||||
# (Again, the address is an example only.)
|
||||
#broadcast 192.168.123.255
|
||||
|
||||
# If you want to listen to time broadcasts on your local subnet, de-comment the
|
||||
# next lines. Please do this only if you trust everybody on the network!
|
||||
#disable auth
|
||||
#broadcastclient
|
||||
19
roles/common/templates/opt_backups_mount.j2
Normal file
19
roles/common/templates/opt_backups_mount.j2
Normal file
@ -0,0 +1,19 @@
|
||||
{# Updated: 2023-09-25 #}
|
||||
# master: {{ common_mastering }}
|
||||
# updated: {{ ansible_date_time.date }}
|
||||
|
||||
[Unit]
|
||||
Description=Master Node Backups Mount
|
||||
DefaultDependencies=yes
|
||||
Conflicts=umount.target
|
||||
Before=docker.service
|
||||
After=systemd-networkd-wait-online@{{ ethernet_interface }}.service
|
||||
|
||||
[Mount]
|
||||
What=//{{ vm_master_node_local }}/backups
|
||||
Where=/opt/backups
|
||||
Type=cifs
|
||||
Options=defaults,_netdev,guest,exec,dir_mode=0775,file_mode=0664,uid=1000,gid=1000
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
19
roles/common/templates/opt_docker_ssl_mount.j2
Normal file
19
roles/common/templates/opt_docker_ssl_mount.j2
Normal file
@ -0,0 +1,19 @@
|
||||
{# Updated: 2023-09-25 #}
|
||||
# master: {{ common_mastering }}
|
||||
# updated: {{ ansible_date_time.date }}
|
||||
|
||||
[Unit]
|
||||
Description=Master Node SSL Mount
|
||||
DefaultDependencies=yes
|
||||
Conflicts=umount.target
|
||||
Before=docker.service
|
||||
After=systemd-networkd-wait-online@{{ ethernet_interface }}.service
|
||||
|
||||
[Mount]
|
||||
What=//{{ vm_master_node_local }}/ssl
|
||||
Where=/opt/docker/ssl
|
||||
Type=cifs
|
||||
Options=defaults,_netdev,guest,exec,dir_mode=0555,file_mode=0444,uid=1000,gid=1000
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
19
roles/common/templates/opt_kernels_mount.j2
Normal file
19
roles/common/templates/opt_kernels_mount.j2
Normal file
@ -0,0 +1,19 @@
|
||||
{# Updated: 2023-09-25 #}
|
||||
# master: {{ common_mastering }}
|
||||
# updated: {{ ansible_date_time.date }}
|
||||
|
||||
[Unit]
|
||||
Description=Master Node Kernels Mount
|
||||
DefaultDependencies=yes
|
||||
Conflicts=umount.target
|
||||
Before=docker.service
|
||||
After=systemd-networkd-wait-online@{{ ethernet_interface }}.service
|
||||
|
||||
[Mount]
|
||||
What=//{{ vm_master_node_local }}/kernels
|
||||
Where=/opt/kernels
|
||||
Type=cifs
|
||||
Options=defaults,_netdev,guest,exec,dir_mode=0775,file_mode=0664,uid=1000,gid=1000
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
19
roles/common/templates/opt_scripts_mount.j2
Normal file
19
roles/common/templates/opt_scripts_mount.j2
Normal file
@ -0,0 +1,19 @@
|
||||
{# Updated: 2023-09-25 #}
|
||||
# master: {{ common_mastering }}
|
||||
# updated: {{ ansible_date_time.date }}
|
||||
|
||||
[Unit]
|
||||
Description=Master Node Scripts Mount
|
||||
DefaultDependencies=yes
|
||||
Conflicts=umount.target
|
||||
Before=docker.service
|
||||
After=systemd-networkd-wait-online@{{ ethernet_interface }}.service
|
||||
|
||||
[Mount]
|
||||
What=//{{ vm_master_node_local }}/scripts
|
||||
Where=/opt/scripts
|
||||
Type=cifs
|
||||
Options=defaults,_netdev,guest,exec,dir_mode=0775,file_mode=0664,uid=1000,gid=1000
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
19
roles/common/templates/opt_work_mount.j2
Normal file
19
roles/common/templates/opt_work_mount.j2
Normal file
@ -0,0 +1,19 @@
|
||||
{# Updated: 2023-09-25 #}
|
||||
# master: {{ common_mastering }}
|
||||
# updated: {{ ansible_date_time.date }}
|
||||
|
||||
[Unit]
|
||||
Description=Master Node Work Mount
|
||||
DefaultDependencies=yes
|
||||
Conflicts=umount.target
|
||||
Before=docker.service
|
||||
After=systemd-networkd-wait-online@{{ ethernet_interface }}.service
|
||||
|
||||
[Mount]
|
||||
What=//{{ vm_master_node_local }}/work
|
||||
Where=/opt/work
|
||||
Type=cifs
|
||||
Options=defaults,_netdev,guest,exec,dir_mode=0775,file_mode=0664,uid=1000,gid=1000
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
86
roles/common/templates/smb_conf.j2
Normal file
86
roles/common/templates/smb_conf.j2
Normal file
@ -0,0 +1,86 @@
|
||||
{# Updated: 2023-09-25 #}
|
||||
# master: {{ common_mastering }}
|
||||
# updated: {{ ansible_date_time.date }}
|
||||
|
||||
[global]
|
||||
workgroup = {{ samba_workgroup_name }}
|
||||
security = user
|
||||
map to guest = Bad User
|
||||
name resolve order = bcast host
|
||||
usershare allow guests = yes
|
||||
client min protocol = NT1
|
||||
client max protocol = SMB3
|
||||
server min protocol = NT1
|
||||
server max protocol = SMB3
|
||||
getwd cache = yes
|
||||
strict allocate = yes
|
||||
strict locking = no
|
||||
read raw = yes
|
||||
write raw = yes
|
||||
use sendfile = yes
|
||||
oplocks = yes
|
||||
getwd cache = yes
|
||||
max connections = 65535
|
||||
max open files = 65535
|
||||
max xmit = 65535
|
||||
aio read size = 16384
|
||||
aio write size = 16384
|
||||
min receivefile size = 16384
|
||||
log level = 0
|
||||
dead time = 15
|
||||
load printers = no
|
||||
printing = bsd
|
||||
printcap name = /dev/null
|
||||
disable spoolss = yes
|
||||
show add printer wizard = no
|
||||
use sendfile = yes
|
||||
domain master = auto
|
||||
mangled names = no
|
||||
charset = UTF-8
|
||||
unix charset = UTF-8
|
||||
display charset = UTF-8
|
||||
store dos attributes = no
|
||||
ea support = no
|
||||
map archive = no
|
||||
map hidden = no
|
||||
map system = no
|
||||
map readonly = no
|
||||
|
||||
[work]
|
||||
comment = work
|
||||
path = {{ smb_work }}
|
||||
force user = {{ samba_default_force_user }}
|
||||
force group = {{ samba_default_force_group }}
|
||||
create mask = 0644
|
||||
directory mask = 0755
|
||||
force create mode = 0644
|
||||
force directory mode = 0775
|
||||
browsable = yes
|
||||
public = yes
|
||||
writable = yes
|
||||
|
||||
[backups]
|
||||
comment = backups
|
||||
path = {{ smb_backups }}
|
||||
force user = {{ samba_default_force_user }}
|
||||
force group = {{ samba_default_force_group }}
|
||||
create mask = 0644
|
||||
directory mask = 0755
|
||||
force create mode = 0644
|
||||
force directory mode = 0775
|
||||
browsable = yes
|
||||
public = yes
|
||||
writable = yes
|
||||
|
||||
[docker]
|
||||
comment = Docker
|
||||
path = {{ smb_docker }}
|
||||
force user = {{ samba_default_force_user }}
|
||||
force group = {{ samba_default_force_group }}
|
||||
create mask = 0644
|
||||
directory mask = 0755
|
||||
force create mode = 0644
|
||||
force directory mode = 0775
|
||||
browsable = yes
|
||||
public = yes
|
||||
writable = yes
|
||||
18
roles/common/templates/vm_service.j2
Normal file
18
roles/common/templates/vm_service.j2
Normal file
@ -0,0 +1,18 @@
|
||||
{# Updated: 2023-09-25 #}
|
||||
# master: {{ common_mastering }}
|
||||
# updated: {{ ansible_date_time.date }}
|
||||
|
||||
[Unit]
|
||||
Description=VM Start/Stop Notifications
|
||||
After=network.target docker.service
|
||||
After=systemd-networkd-wait-online@{{ ethernet_interface }}.service
|
||||
RequiresMountsFor=/opt/scripts
|
||||
|
||||
[Service]
|
||||
Type=oneshot
|
||||
ExecStart=bash /opt/scripts/ntfy.sh -t "vm" -m "START"
|
||||
ExecStop=bash /opt/scripts/ntfy.sh -t "vm" -m "STOP"
|
||||
RemainAfterExit=yes
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
12
roles/common/vars/aliases.yml
Normal file
12
roles/common/vars/aliases.yml
Normal file
@ -0,0 +1,12 @@
|
||||
# 2023-09-25
|
||||
# Settings: aliases
|
||||
---
|
||||
|
||||
# bash_aliases template
|
||||
bash_aliases_template: bash_aliases.j2
|
||||
|
||||
# bash_aliases path
|
||||
bash_aliases_distribution: /etc/bash_aliases
|
||||
|
||||
# bash.bashrc
|
||||
bash_bashrc: /etc/bash.bashrc
|
||||
11
roles/common/vars/directories.yml
Normal file
11
roles/common/vars/directories.yml
Normal file
@ -0,0 +1,11 @@
|
||||
# 2023-09-25
|
||||
# Settings: directories
|
||||
---
|
||||
|
||||
# New directories to create
|
||||
directories_create:
|
||||
- /opt/backups
|
||||
- /opt/scripts
|
||||
- /opt/work
|
||||
- /opt/docker
|
||||
- /opt/docker/ssl
|
||||
35
roles/common/vars/locales.yml
Normal file
35
roles/common/vars/locales.yml
Normal file
@ -0,0 +1,35 @@
|
||||
# 2023-09-25
|
||||
# Settings: locales
|
||||
---
|
||||
|
||||
locales_selections:
|
||||
- "en_US.UTF-8"
|
||||
- "fr_FR.UTF-8"
|
||||
|
||||
# locale template
|
||||
locale_template: locale.j2
|
||||
|
||||
# locale path
|
||||
locale_template_distribution: /etc/default/locale
|
||||
|
||||
# Global default locale definition
|
||||
default_locale: "fr_FR.UTF-8"
|
||||
|
||||
# Setup all system default locales
|
||||
locales_default:
|
||||
lang: "{{ default_locale }}"
|
||||
language: "{{ default_locale }}"
|
||||
lc_address: "{{ default_locale }}"
|
||||
lc_all: "{{ default_locale }}"
|
||||
lc_collate: "{{ default_locale }}"
|
||||
lc_ctype: "{{ default_locale }}"
|
||||
lc_identification: "{{ default_locale }}"
|
||||
lc_measurement: "{{ default_locale }}"
|
||||
lc_messages: "{{ default_locale }}"
|
||||
lc_monetary: "{{ default_locale }}"
|
||||
lc_name: "{{ default_locale }}"
|
||||
lc_numeric: "{{ default_locale }}"
|
||||
lc_paper: "{{ default_locale }}"
|
||||
lc_response: "{{ default_locale }}"
|
||||
lc_telephone: "{{ default_locale }}"
|
||||
lc_time: "{{ default_locale }}"
|
||||
26
roles/common/vars/main.yml
Normal file
26
roles/common/vars/main.yml
Normal file
@ -0,0 +1,26 @@
|
||||
# 2023-09-25
|
||||
# Vars: main
|
||||
---
|
||||
|
||||
task_enable_all: true
|
||||
task_enable_users: true
|
||||
task_enable_locales: true
|
||||
task_enable_timezone: true
|
||||
task_enable_ntp: true
|
||||
task_enable_aliases: true
|
||||
task_enable_mounts: true
|
||||
task_enable_directories: true
|
||||
task_enable_packages: true
|
||||
task_enable_samba: true
|
||||
task_enable_tuned: true
|
||||
task_enable_systemd: true
|
||||
task_enable_daemons: true
|
||||
task_enable_services: true
|
||||
|
||||
|
||||
|
||||
#
|
||||
# mastering date
|
||||
#
|
||||
|
||||
common_mastering: "{{ mastering_common | default('2023-09-25') }}"
|
||||
21
roles/common/vars/mounts.yml
Normal file
21
roles/common/vars/mounts.yml
Normal file
@ -0,0 +1,21 @@
|
||||
# 2023-09-25
|
||||
# Settings: mounts
|
||||
---
|
||||
|
||||
# New directories to create
|
||||
mounts_create:
|
||||
- /mnt/memory
|
||||
- /mnt/build
|
||||
- /mnt/cache
|
||||
|
||||
# Path to systel fstab file
|
||||
fstab_path: /etc/fstab
|
||||
|
||||
# Directories to mount in fstab
|
||||
mounts_fstab_append:
|
||||
- /mnt/memory
|
||||
- /mnt/build
|
||||
- /mnt/cache
|
||||
- /tmp
|
||||
- /var/log
|
||||
- /var/tmp
|
||||
26
roles/common/vars/ntp.yml
Normal file
26
roles/common/vars/ntp.yml
Normal file
@ -0,0 +1,26 @@
|
||||
# 2023-09-25
|
||||
# Settings: ntp
|
||||
---
|
||||
|
||||
ntp_enabled: true
|
||||
|
||||
ntp_restrict:
|
||||
- "127.0.0.1"
|
||||
- "::1"
|
||||
|
||||
ntp_package_daemon: ntp
|
||||
ntp_package_tzdata: tzdata
|
||||
|
||||
ntp_timezone: "{{ timezone }}"
|
||||
ntp_daemon: ntp
|
||||
|
||||
ntp_servers:
|
||||
- fr.pool.ntp.org
|
||||
- pool.ntp.org
|
||||
|
||||
ntp_conf_template: ntp_conf.j2
|
||||
ntp_conf_distribution: /etc/ntpsec/ntp.conf
|
||||
|
||||
ntp_driftfile: /var/lib/ntpsec/ntp.drift
|
||||
ntp_leapfile: /usr/share/zoneinfo/leap-seconds.list
|
||||
ntp_cron_daemon: cron
|
||||
38
roles/common/vars/packages/debian.yml
Normal file
38
roles/common/vars/packages/debian.yml
Normal file
@ -0,0 +1,38 @@
|
||||
# 2023-09-25
|
||||
# Settings: packages
|
||||
---
|
||||
|
||||
# APT sources.list template
|
||||
sources_list_template: debian_sources_list.j2
|
||||
|
||||
# APT distribution template full remote path
|
||||
sources_list_distribution: /etc/apt/sources.list.d/debian.list
|
||||
|
||||
# base system packages to remove
|
||||
packages_removed:
|
||||
- systemd-timesyncd
|
||||
|
||||
# base system packages needed
|
||||
packages_needed:
|
||||
- ca-certificates
|
||||
- locales
|
||||
- sudo
|
||||
- nano
|
||||
- curl
|
||||
- wget
|
||||
- surf
|
||||
- most
|
||||
- gnupg
|
||||
- zram-tools
|
||||
- bash-completion
|
||||
- lsof
|
||||
- colordiff
|
||||
- htop
|
||||
- screen
|
||||
- git
|
||||
- samba
|
||||
- mlocate
|
||||
- mc
|
||||
- ethtool
|
||||
- cifs-utils
|
||||
- qemu-guest-agent
|
||||
14
roles/common/vars/samba.yml
Normal file
14
roles/common/vars/samba.yml
Normal file
@ -0,0 +1,14 @@
|
||||
# 2023-09-25
|
||||
# Settings: samba
|
||||
---
|
||||
|
||||
# Samba smb.conf template
|
||||
smb_conf_template: smb_conf.j2
|
||||
|
||||
# smb.conf full remote path
|
||||
smb_conf_distribution: /etc/samba/smb.conf
|
||||
|
||||
# folders specifications
|
||||
smb_docker: "/opt/docker"
|
||||
smb_work: "/opt/work"
|
||||
smb_backups: "/opt/backups"
|
||||
40
roles/common/vars/services.yml
Normal file
40
roles/common/vars/services.yml
Normal file
@ -0,0 +1,40 @@
|
||||
# 2023-09-25
|
||||
# Settings: services
|
||||
---
|
||||
|
||||
services_disable:
|
||||
- "proc-sys-fs-binfmt_misc.mount"
|
||||
- "ifupdown-wait-online.service"
|
||||
- "systemd-network-generator.service"
|
||||
- "systemd-networkd-wait-online.service"
|
||||
- "systemd-time-wait-sync.service"
|
||||
|
||||
services_enable:
|
||||
- "systemd-boot-check-no-failures.service"
|
||||
- "systemd-networkd.service"
|
||||
- "systemd-pstore.service"
|
||||
- "ntpsec.service"
|
||||
- "ntpsec-systemd-netif.path"
|
||||
- "systemd-networkd-wait-online@{{ ethernet_interface }}.service"
|
||||
|
||||
services_restart:
|
||||
- "cron.service"
|
||||
- "nmbd.service"
|
||||
- "smbd.service"
|
||||
- "tuned.service"
|
||||
- "{{ systemd_container_ethernet_service }}"
|
||||
- "{{ systemd_container_multiqueue_service }}"
|
||||
- "{{ systemd_container_vm_service }}"
|
||||
- "{{ systemd_container_opt_work_mount }}"
|
||||
- "{{ systemd_container_opt_backup_mount }}"
|
||||
- "{{ systemd_container_opt_kernels_mount}}"
|
||||
- "{{ systemd_container_opt_scripts_mount }}"
|
||||
- "{{ systemd_container_opt_docker_ssl_mount }}"
|
||||
|
||||
timers_enable:
|
||||
- "e2scrub_all.timer"
|
||||
- "fstrim.timer"
|
||||
- "logrotate.timer"
|
||||
- "man-db.timer"
|
||||
- "plocate-updatedb.timer"
|
||||
- "ntpsec-rotate-stats.timer"
|
||||
61
roles/common/vars/systemd.yml
Normal file
61
roles/common/vars/systemd.yml
Normal file
@ -0,0 +1,61 @@
|
||||
# 2023-09-25
|
||||
# Settings: systemd
|
||||
---
|
||||
|
||||
systemd_root: "/etc/systemd"
|
||||
systemd_system_root: "{{ systemd_root }}/system"
|
||||
systemd_journal_root: "{{ systemd_root }}/journald.conf.d"
|
||||
local_folder_templates: ../templates
|
||||
|
||||
ethernet_interface: "{{ ansible_default_ipv4.interface }}"
|
||||
|
||||
jumbo_frames: true
|
||||
ethernet_mtu: 9000
|
||||
ethernet_txqueuelen: 10000
|
||||
ethernet_multiqueue: "{{ ansible_facts['processor_nproc'] }}"
|
||||
|
||||
systemd_template_journald_service: "{{ local_folder_templates }}/journald_conf.j2"
|
||||
systemd_container_journald_service: "vm.conf"
|
||||
|
||||
systemd_template_ethernet_service: "{{ local_folder_templates }}/ethernet_service.j2"
|
||||
systemd_container_ethernet_service: "ethernet.service"
|
||||
|
||||
systemd_template_multiqueue_service_override: "{{ local_folder_templates }}/multiqueue_service_override.j2"
|
||||
systemd_container_multiqueue_service_override: "multiqueue.service.d/override.conf"
|
||||
|
||||
systemd_template_multiqueue_service: "{{ local_folder_templates }}/multiqueue_service.j2"
|
||||
systemd_container_multiqueue_service: "multiqueue.service"
|
||||
|
||||
systemd_template_vm_service: "{{ local_folder_templates }}/vm_service.j2"
|
||||
systemd_container_vm_service: "vm.service"
|
||||
|
||||
systemd_template_opt_backup_mount: "{{ local_folder_templates }}/opt_backups_mount.j2"
|
||||
systemd_container_opt_backup_mount: "opt-backups.mount"
|
||||
|
||||
systemd_template_opt_work_mount: "{{ local_folder_templates }}/opt_work_mount.j2"
|
||||
systemd_container_opt_work_mount: "opt-work.mount"
|
||||
|
||||
systemd_template_opt_kernels_mount: "{{ local_folder_templates }}/opt_kernels_mount.j2"
|
||||
systemd_container_opt_kernels_mount: "opt-kernels.mount"
|
||||
|
||||
systemd_template_opt_scripts_mount: "{{ local_folder_templates }}/opt_scripts_mount.j2"
|
||||
systemd_container_opt_scripts_mount: "opt-scripts.mount"
|
||||
|
||||
systemd_template_opt_docker_ssl_mount: "{{ local_folder_templates }}/opt_docker_ssl_mount.j2"
|
||||
systemd_container_opt_docker_ssl_mount: "opt-docker-ssl.mount"
|
||||
|
||||
systemd_directories:
|
||||
- "{{ systemd_system_root }}/multiqueue.service.d"
|
||||
- "{{ systemd_journal_root }}"
|
||||
|
||||
systemd_templates:
|
||||
- { local: "{{ systemd_template_journald_service }}", remote: "{{ systemd_journal_root }}/{{ systemd_container_journald_service }}" }
|
||||
- { local: "{{ systemd_template_ethernet_service }}", remote: "{{ systemd_system_root }}/{{ systemd_container_ethernet_service }}" }
|
||||
- { local: "{{ systemd_template_multiqueue_service_override }}", remote: "{{ systemd_system_root }}/{{ systemd_container_multiqueue_service_override }}" }
|
||||
- { local: "{{ systemd_template_multiqueue_service }}", remote: "{{ systemd_system_root }}/{{ systemd_container_multiqueue_service }}" }
|
||||
- { local: "{{ systemd_template_vm_service }}", remote: "{{ systemd_system_root }}/{{ systemd_container_vm_service }}" }
|
||||
- { local: "{{ systemd_template_opt_backup_mount }}", remote: "{{ systemd_system_root }}/{{ systemd_container_opt_backup_mount }}" }
|
||||
- { local: "{{ systemd_template_opt_work_mount }}", remote: "{{ systemd_system_root }}/{{ systemd_container_opt_work_mount }}" }
|
||||
- { local: "{{ systemd_template_opt_kernels_mount }}", remote: "{{ systemd_system_root }}/{{ systemd_container_opt_kernels_mount }}" }
|
||||
- { local: "{{ systemd_template_opt_scripts_mount }}", remote: "{{ systemd_system_root }}/{{ systemd_container_opt_scripts_mount }}" }
|
||||
- { local: "{{ systemd_template_opt_docker_ssl_mount }}", remote: "{{ systemd_system_root }}/{{ systemd_container_opt_docker_ssl_mount }}" }
|
||||
9
roles/common/vars/timezone.yml
Normal file
9
roles/common/vars/timezone.yml
Normal file
@ -0,0 +1,9 @@
|
||||
# 2023-09-25
|
||||
# Settings: timezone
|
||||
---
|
||||
|
||||
# Define time zone
|
||||
timezone: "Europe/Paris"
|
||||
|
||||
# SystemD cron daemon
|
||||
cron_daemon: "cron"
|
||||
9
roles/common/vars/tuned.yml
Normal file
9
roles/common/vars/tuned.yml
Normal file
@ -0,0 +1,9 @@
|
||||
# 2023-09-25
|
||||
# Settings: tuned
|
||||
---
|
||||
|
||||
# packages needed
|
||||
packages_needed:
|
||||
- tuned
|
||||
- tuned-utils
|
||||
- tuned-utils-systemtap
|
||||
15
roles/common/vars/vault/samba.yml
Normal file
15
roles/common/vars/vault/samba.yml
Normal file
@ -0,0 +1,15 @@
|
||||
$ANSIBLE_VAULT;1.1;AES256
|
||||
37326662323464363664353831663333313866653762643036663633633939303865333330393164
|
||||
6266663764333931356337636434643931623637396236660a656330643061353537316332373261
|
||||
39316162393830396165323335623236393638313236343033326538303261383164376436396133
|
||||
6533653362326233630a616139323435306538386365366532373436303861633165653861313630
|
||||
33653263626330613165306639393533616131373462303837326634393164386138386136643330
|
||||
62303335376536323536303633626132386438376364313864646465373538656262306166336562
|
||||
62643237613737653337333635333863653933343266633439666131623437383131636434666430
|
||||
63303131666539616465303433633231633964613036636439653531343937653635636630613865
|
||||
62383338643438346238656131323765373461353739633165333139303136363962313661373166
|
||||
37343138626438666264326431323735363635336636623262666336333931653863613135393831
|
||||
35356430326436313131626264646564333731383334646466343532653437353866323133643030
|
||||
38643033343732303635663963613365636638366131626464356438313236306366353435383038
|
||||
36333337383339353737623736666261343836336435316461633039323438633663396632646632
|
||||
3138373231326130323864653439373563653961666666633135
|
||||
3
roles/docker/README.md
Normal file
3
roles/docker/README.md
Normal file
@ -0,0 +1,3 @@
|
||||
# Docker
|
||||
|
||||
Create needed directories, remove old packages and install required packages from official Docker recommandations.
|
||||
146
roles/docker/tasks/docker.yml
Normal file
146
roles/docker/tasks/docker.yml
Normal file
@ -0,0 +1,146 @@
|
||||
# 2023-09-25
|
||||
# Tasks: docker
|
||||
---
|
||||
|
||||
- ansible.builtin.include_vars: docker.yml
|
||||
|
||||
#
|
||||
# Prepare Docker service
|
||||
#
|
||||
|
||||
- name: Create directories
|
||||
ansible.builtin.file:
|
||||
path: "{{ item }}"
|
||||
owner: root
|
||||
group: root
|
||||
state: directory
|
||||
mode: u=rwx,g=rx,o=rx
|
||||
with_items: "{{ directories_create }}"
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
tags:
|
||||
- system
|
||||
- directories
|
||||
- create
|
||||
|
||||
- name: Process daemon.json template
|
||||
ansible.builtin.template:
|
||||
backup: true
|
||||
src: "{{ vm_template_daemon_json }}"
|
||||
dest: "{{ vm_daemon_json_root }}/{{ vm_template_daemon_json_name }}"
|
||||
owner: root
|
||||
group: root
|
||||
mode: u=rw,g=r,o=r
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
tags:
|
||||
- template
|
||||
- docker
|
||||
- daemon
|
||||
- add
|
||||
|
||||
- name: Process override.conf template
|
||||
ansible.builtin.template:
|
||||
backup: true
|
||||
src: "{{ vm_template_docker_override }}"
|
||||
dest: "{{ vm_docker_override_root }}/{{ vm_template_docker_override_name }}"
|
||||
owner: root
|
||||
group: root
|
||||
mode: u=rw,g=r,o=r
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
tags:
|
||||
- template
|
||||
- docker
|
||||
- override
|
||||
- add
|
||||
|
||||
|
||||
|
||||
#
|
||||
# Install Docker
|
||||
#
|
||||
|
||||
- name: Setup Docker's GPG
|
||||
ansible.builtin.shell: |
|
||||
install -m 0755 -d /etc/apt/keyrings
|
||||
curl -fsSL https://download.docker.com/linux/debian/gpg | sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg
|
||||
chmod a+r /etc/apt/keyrings/docker.gpg
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
- ansible_facts['os_family'] == "Debian"
|
||||
tags:
|
||||
- docker
|
||||
- gpg
|
||||
|
||||
- name: Add Docker repository
|
||||
ansible.builtin.shell: |
|
||||
echo \
|
||||
"deb [arch="$(dpkg --print-architecture)" signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/debian \
|
||||
"$(. /etc/os-release && echo "$VERSION_CODENAME")" stable" | \
|
||||
sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
- ansible_facts['os_family'] == "Debian"
|
||||
tags:
|
||||
- docker
|
||||
- repositories
|
||||
|
||||
- name: Perform Docker packages cleanup
|
||||
ansible.builtin.package:
|
||||
state: absent
|
||||
name: "{{ docker_pakages_cleanup }}"
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
tags:
|
||||
- apt
|
||||
- packages
|
||||
- remove
|
||||
- docker
|
||||
|
||||
- name: Install Docker packages
|
||||
ansible.builtin.package:
|
||||
install_recommends: false
|
||||
update_cache: true
|
||||
name: "{{ docker_pakages_required + docker_pakages_needed }}"
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
tags:
|
||||
- apt
|
||||
- packages
|
||||
- add
|
||||
- docker
|
||||
|
||||
- name: Reload daemons
|
||||
ansible.builtin.systemd:
|
||||
daemon_reload: true
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
tags:
|
||||
- system
|
||||
- services
|
||||
- reload
|
||||
|
||||
- name: Ensure Docker is restarted
|
||||
ansible.builtin.service:
|
||||
name: "{{ item }}"
|
||||
state: restarted
|
||||
with_items: "{{ docker_services }}"
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
tags:
|
||||
- services
|
||||
- docker
|
||||
- start
|
||||
|
||||
- name: Install Grafana Loki Docker plugin
|
||||
community.docker.docker_plugin:
|
||||
plugin_name: "{{docker_loki_image}}:{{ docker_loki_version }}"
|
||||
alias: "{{ docker_loki_alias }}"
|
||||
state: enable
|
||||
when:
|
||||
- ansible_facts['system'] == "Linux"
|
||||
tags:
|
||||
- services
|
||||
- docker
|
||||
- plugins
|
||||
16
roles/docker/tasks/main.yml
Normal file
16
roles/docker/tasks/main.yml
Normal file
@ -0,0 +1,16 @@
|
||||
# 2023-09-25
|
||||
# Tasks: main
|
||||
---
|
||||
|
||||
- ansible.builtin.include_vars: main.yml
|
||||
|
||||
# Docker
|
||||
- ansible.builtin.include_tasks: docker.yml
|
||||
when:
|
||||
- task_enable_all
|
||||
- task_enable_docker
|
||||
tags:
|
||||
- tasks
|
||||
- system
|
||||
- vm
|
||||
- docker
|
||||
35
roles/docker/templates/daemon_json.j2
Normal file
35
roles/docker/templates/daemon_json.j2
Normal file
@ -0,0 +1,35 @@
|
||||
{
|
||||
"live-restore": true,
|
||||
"max-concurrent-downloads": 16,
|
||||
"max-concurrent-uploads": 16,
|
||||
"max-download-attempts": 16,
|
||||
"mtu": 1500,
|
||||
"dns": [
|
||||
"1.1.1.1",
|
||||
"8.8.8.8",
|
||||
"1.0.0.1",
|
||||
"8.8.4.4"
|
||||
],
|
||||
"bip": "10.200.0.1/24",
|
||||
"ipv6": true,
|
||||
"fixed-cidr-v6": "2001:db8:1::/64",
|
||||
"ip6tables": true,
|
||||
"experimental": true,
|
||||
"default-address-pools": [
|
||||
{
|
||||
"base" : "10.201.0.0/16",
|
||||
"size" : 24
|
||||
},
|
||||
{
|
||||
"base" : "10.202.0.0/16",
|
||||
"size" : 24
|
||||
},
|
||||
{
|
||||
"base": "2001:db8::/104",
|
||||
"size": 112
|
||||
}
|
||||
],
|
||||
"hosts": [
|
||||
"unix:///var/run/docker.sock"
|
||||
]
|
||||
}
|
||||
6
roles/docker/templates/docker_override_json.j2
Normal file
6
roles/docker/templates/docker_override_json.j2
Normal file
@ -0,0 +1,6 @@
|
||||
# {{ ansible_managed }}
|
||||
# {{ docker_mastering }}
|
||||
# 2023-09-25
|
||||
[Service]
|
||||
ExecStart=
|
||||
ExecStart=/usr/bin/dockerd
|
||||
58
roles/docker/vars/docker.yml
Normal file
58
roles/docker/vars/docker.yml
Normal file
@ -0,0 +1,58 @@
|
||||
# 2023-09-25
|
||||
# Settings: docker
|
||||
---
|
||||
|
||||
|
||||
|
||||
#
|
||||
# installation
|
||||
#
|
||||
|
||||
# directories
|
||||
vm_daemon_json_root: "/etc/docker"
|
||||
vm_docker_override_root: "/etc/systemd/system/docker.service.d/"
|
||||
|
||||
directories_create:
|
||||
- "{{ vm_daemon_json_root }}"
|
||||
- "{{ vm_docker_override_root }}"
|
||||
|
||||
# daemon.json
|
||||
vm_template_daemon_json: daemon_json.j2
|
||||
vm_template_daemon_json_name: "daemon.json"
|
||||
|
||||
# override.conf
|
||||
vm_template_docker_override: docker_override_json.j2
|
||||
vm_template_docker_override_name: "override.conf"
|
||||
|
||||
# Grafana Loki plugin
|
||||
docker_loki_image: "grafana/loki-docker-driver"
|
||||
docker_loki_version: "latest"
|
||||
docker_loki_alias: "loki"
|
||||
|
||||
# Docker packages required
|
||||
docker_pakages_required:
|
||||
- curl
|
||||
- gnupg
|
||||
- lsb-release
|
||||
|
||||
# Packages to remove before Docker
|
||||
docker_pakages_cleanup:
|
||||
- docker.io
|
||||
- docker-doc
|
||||
- docker-compose
|
||||
- podman-docker
|
||||
- containerd
|
||||
|
||||
# Packages to install Docker
|
||||
docker_pakages_needed:
|
||||
- docker-ce
|
||||
- docker-ce-cli
|
||||
- containerd.io
|
||||
- docker-buildx-plugin
|
||||
- docker-compose-plugin
|
||||
- cgroupfs-mount
|
||||
|
||||
# Docker services
|
||||
docker_services:
|
||||
- docker.service
|
||||
- docker.socket
|
||||
14
roles/docker/vars/main.yml
Normal file
14
roles/docker/vars/main.yml
Normal file
@ -0,0 +1,14 @@
|
||||
# 2023-09-25
|
||||
# Vars: main
|
||||
---
|
||||
|
||||
task_enable_all: true
|
||||
task_enable_docker: true
|
||||
|
||||
|
||||
|
||||
#
|
||||
# mastering date
|
||||
#
|
||||
|
||||
docker_mastering: "{{ mastering_docker | default('2023-09-25') }}"
|
||||
23
roles/stacks/README.md
Normal file
23
roles/stacks/README.md
Normal file
@ -0,0 +1,23 @@
|
||||
# Stacks
|
||||
|
||||
Define all required settings and required files, to setup my Docker stacks:
|
||||
|
||||
* Docker Socket Proxy
|
||||
* Dozzle
|
||||
* Adguard Home
|
||||
* APT Cacher NG
|
||||
* DL (download zone for my blog)
|
||||
* Draw.IO
|
||||
* Flame
|
||||
* Hastebin
|
||||
* Homepage
|
||||
* IPFS
|
||||
* ITZG _(Minecraft server... for testing purpose only)_
|
||||
* Jekyll
|
||||
* Monitoring _(base)_ including cAdvisor & Node-exporter
|
||||
* Ntfy
|
||||
* Portainer Agent
|
||||
* Portainer
|
||||
* Promtail
|
||||
* Docker Registry
|
||||
* Watchtower
|
||||
@ -0,0 +1,387 @@
|
||||
# {{ ansible_managed }}
|
||||
# master: {{ stacks_mastering }}
|
||||
# edited: 2023-09-25
|
||||
# updated: {{ ansible_date_time.date }}
|
||||
http:
|
||||
pprof:
|
||||
port: 6060
|
||||
enabled: false
|
||||
address: 0.0.0.0:80
|
||||
session_ttl: 720h
|
||||
users:
|
||||
- name: {{ admin_user }}
|
||||
password: {{ admin_password }}
|
||||
auth_attempts: 5
|
||||
block_auth_min: 15
|
||||
http_proxy: ""
|
||||
language: ""
|
||||
theme: auto
|
||||
dns:
|
||||
bind_hosts:
|
||||
- 0.0.0.0
|
||||
port: 53
|
||||
anonymize_client_ip: false
|
||||
ratelimit: 0
|
||||
ratelimit_whitelist: []
|
||||
refuse_any: true
|
||||
upstream_dns:
|
||||
- https://security.cloudflare-dns.com/dns-query
|
||||
- https://dns.quad9.net/dns-query
|
||||
- https://dns.adguard.com/dns-query
|
||||
- tls://security.cloudflare-dns.com
|
||||
- tls://dns.quad9.net
|
||||
- tls://dns.adguard.com
|
||||
upstream_dns_file: ""
|
||||
bootstrap_dns:
|
||||
- 9.9.9.10
|
||||
- 149.112.112.10
|
||||
- 2620:fe::10
|
||||
- 2620:fe::fe:10
|
||||
- 1.1.1.1
|
||||
- 1.0.0.1
|
||||
- 2606:4700:4700::1111
|
||||
- 2606:4700:4700::1001
|
||||
- 8.8.8.8
|
||||
- 8.8.4.4
|
||||
- 2001:4860:4860::8888
|
||||
- 2001:4860:4860::8844
|
||||
- 9.9.9.9
|
||||
- 149.112.112.112
|
||||
- 2620:fe::fe
|
||||
- 2620:fe::9
|
||||
fallback_dns: []
|
||||
all_servers: true
|
||||
fastest_addr: false
|
||||
fastest_timeout: 1s
|
||||
allowed_clients: []
|
||||
disallowed_clients: []
|
||||
blocked_hosts:
|
||||
- version.bind
|
||||
- id.server
|
||||
- hostname.bind
|
||||
trusted_proxies:
|
||||
- 127.0.0.0/8
|
||||
- ::1/128
|
||||
cache_size: 4194304
|
||||
cache_ttl_min: 2400
|
||||
cache_ttl_max: 84600
|
||||
cache_optimistic: true
|
||||
bogus_nxdomain: []
|
||||
aaaa_disabled: false
|
||||
enable_dnssec: true
|
||||
edns_client_subnet:
|
||||
custom_ip: ""
|
||||
enabled: true
|
||||
use_custom: false
|
||||
max_goroutines: 0
|
||||
handle_ddr: true
|
||||
ipset: []
|
||||
ipset_file: ""
|
||||
bootstrap_prefer_ipv6: false
|
||||
upstream_timeout: 10s
|
||||
private_networks: []
|
||||
use_private_ptr_resolvers: true
|
||||
local_ptr_upstreams: []
|
||||
use_dns64: false
|
||||
dns64_prefixes: []
|
||||
serve_http3: true
|
||||
use_http3_upstreams: false
|
||||
tls:
|
||||
enabled: true
|
||||
server_name: {{ tls_server_name }}
|
||||
force_https: false
|
||||
port_https: 443
|
||||
port_dns_over_tls: 853
|
||||
port_dns_over_quic: 853
|
||||
port_dnscrypt: 0
|
||||
dnscrypt_config_file: ""
|
||||
allow_unencrypted_doh: false
|
||||
certificate_chain: ""
|
||||
private_key: ""
|
||||
certificate_path: {{ tls_certificate_path }}
|
||||
private_key_path: {{ tls_private_key_path }}
|
||||
strict_sni_check: false
|
||||
querylog:
|
||||
ignored: []
|
||||
interval: 720h
|
||||
size_memory: 1000
|
||||
enabled: true
|
||||
file_enabled: true
|
||||
statistics:
|
||||
ignored: []
|
||||
interval: 720h
|
||||
enabled: true
|
||||
filters:
|
||||
- enabled: true
|
||||
url: https://raw.githubusercontent.com/DandelionSprout/adfilt/master/GameConsoleAdblockList.txt
|
||||
name: Game Console Adblock List
|
||||
id: 1664518418
|
||||
- enabled: true
|
||||
url: https://someonewhocares.org/hosts/zero/hosts
|
||||
name: Dan Pollock's List
|
||||
id: 1664518423
|
||||
- enabled: true
|
||||
url: https://pgl.yoyo.org/adservers/serverlist.php?hostformat=adblockplus&showintro=1&mimetype=plaintext
|
||||
name: Peter Lowe's List
|
||||
id: 1664518424
|
||||
- enabled: true
|
||||
url: https://malware-filter.gitlab.io/malware-filter/urlhaus-filter-agh-online.txt
|
||||
name: Online Malicious URL Blocklist
|
||||
id: 1664518428
|
||||
- enabled: true
|
||||
url: https://raw.githubusercontent.com/mitchellkrogza/The-Big-List-of-Hacked-Malware-Web-Sites/master/hosts
|
||||
name: The Big List of Hacked Malware Web Sites
|
||||
id: 1664518429
|
||||
- enabled: true
|
||||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_2.txt
|
||||
name: AdAway Default Blocklist
|
||||
id: 1674828830
|
||||
- enabled: true
|
||||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_1.txt
|
||||
name: AdGuard DNS filter
|
||||
id: 1674828831
|
||||
- enabled: true
|
||||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_32.txt
|
||||
name: The NoTracking blocklist
|
||||
id: 1674828833
|
||||
- enabled: true
|
||||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_5.txt
|
||||
name: OISD Blocklist Basic
|
||||
id: 1674828834
|
||||
- enabled: true
|
||||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_27.txt
|
||||
name: OISD Blocklist Full
|
||||
id: 1674828835
|
||||
- enabled: true
|
||||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_23.txt
|
||||
name: WindowsSpyBlocker - Hosts spy rules
|
||||
id: 1674828836
|
||||
- enabled: true
|
||||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_7.txt
|
||||
name: Perflyst and Dandelion Sprout's Smart-TV Blocklist
|
||||
id: 1674828837
|
||||
- enabled: true
|
||||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_30.txt
|
||||
name: Phishing URL Blocklist (PhishTank and OpenPhish)
|
||||
id: 1674828838
|
||||
- enabled: true
|
||||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_12.txt
|
||||
name: Dandelion Sprout's Anti-Malware List
|
||||
id: 1674828839
|
||||
- enabled: true
|
||||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_11.txt
|
||||
name: Malicious URL Blocklist (URLHaus)
|
||||
id: 1674828840
|
||||
- enabled: true
|
||||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_8.txt
|
||||
name: NoCoin Filter List
|
||||
id: 1674828841
|
||||
- enabled: true
|
||||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_10.txt
|
||||
name: Scam Blocklist by DurableNapkin
|
||||
id: 1674828842
|
||||
- enabled: true
|
||||
url: https://raw.githubusercontent.com/AdguardTeam/FiltersRegistry/master/filters/filter_2_Base/filter.txt
|
||||
name: Base filter
|
||||
id: 1674828843
|
||||
- enabled: true
|
||||
url: https://raw.githubusercontent.com/AdguardTeam/FiltersRegistry/master/filters/filter_3_Spyware/filter.txt
|
||||
name: Tracking Protection filter
|
||||
id: 1674828844
|
||||
- enabled: true
|
||||
url: https://raw.githubusercontent.com/AdguardTeam/FiltersRegistry/master/filters/filter_17_TrackParam/filter.txt
|
||||
name: URL Tracking filter
|
||||
id: 1674828845
|
||||
- enabled: true
|
||||
url: https://raw.githubusercontent.com/AdguardTeam/FiltersRegistry/master/filters/filter_4_Social/filter.txt
|
||||
name: Social media filter
|
||||
id: 1674828846
|
||||
- enabled: true
|
||||
url: https://raw.githubusercontent.com/AdguardTeam/FiltersRegistry/master/filters/filter_14_Annoyances/filter.txt
|
||||
name: Annoyances filter
|
||||
id: 1674828847
|
||||
- enabled: true
|
||||
url: https://raw.githubusercontent.com/AdguardTeam/FiltersRegistry/master/filters/filter_16_French/filter.txt
|
||||
name: French filter
|
||||
id: 1674828848
|
||||
- enabled: true
|
||||
url: https://raw.githubusercontent.com/AdguardTeam/FiltersRegistry/master/filters/filter_11_Mobile/filter.txt
|
||||
name: Mobile ads filter
|
||||
id: 1674828849
|
||||
- enabled: true
|
||||
url: https://raw.githubusercontent.com/AdguardTeam/FiltersRegistry/master/filters/filter_15_DnsFilter/filter.txt
|
||||
name: DNS filter
|
||||
id: 1674828850
|
||||
- enabled: true
|
||||
url: https://malware-filter.gitlab.io/malware-filter/urlhaus-filter-agh.txt
|
||||
name: Online Malicious URL Blocklist (AdGuard Home)
|
||||
id: 1674828851
|
||||
- enabled: true
|
||||
url: https://raw.githubusercontent.com/uBlockOrigin/uAssets/master/filters/filters.txt
|
||||
name: uBlock filters - Default
|
||||
id: 1674828852
|
||||
- enabled: true
|
||||
url: https://raw.githubusercontent.com/uBlockOrigin/uAssets/master/filters/badware.txt
|
||||
name: uBlock filters – Badware risks
|
||||
id: 1674828853
|
||||
- enabled: true
|
||||
url: https://raw.githubusercontent.com/uBlockOrigin/uAssets/master/filters/privacy.txt
|
||||
name: uBlock filters – Privacy
|
||||
id: 1674828854
|
||||
- enabled: true
|
||||
url: https://raw.githubusercontent.com/uBlockOrigin/uAssets/master/filters/resource-abuse.txt
|
||||
name: uBlock filters – Resource abuse
|
||||
id: 1674828855
|
||||
- enabled: true
|
||||
url: https://www.github.developerdan.com/hosts/lists/ads-and-tracking-extended.txt
|
||||
name: Lightswitch05 - Ads and Tracking
|
||||
id: 1674828856
|
||||
- enabled: true
|
||||
url: https://www.github.developerdan.com/hosts/lists/dating-services-extended.txt
|
||||
name: Lightswitch05 - Dating Services
|
||||
id: 1674828857
|
||||
- enabled: true
|
||||
url: https://www.github.developerdan.com/hosts/lists/tracking-aggressive-extended.txt
|
||||
name: Lightswitch05 - Tracking Aggressive
|
||||
id: 1674828858
|
||||
- enabled: true
|
||||
url: https://v.firebog.net/hosts/Prigent-Crypto.txt
|
||||
name: Firebog - Prigent Crypto
|
||||
id: 1674828859
|
||||
- enabled: true
|
||||
url: https://v.firebog.net/hosts/Prigent-Malware.txt
|
||||
name: Firebog - Prigent Malware
|
||||
id: 1674828860
|
||||
- enabled: true
|
||||
url: https://raw.githubusercontent.com/matomo-org/referrer-spam-blacklist/master/spammers.txt
|
||||
name: Matomo - Referrer Spam Blacklist
|
||||
id: 1674828861
|
||||
- enabled: true
|
||||
url: https://raw.githubusercontent.com/matomo-org/referrer-spam-list/master/spammers.txt
|
||||
name: Matomo.org - Referrer Spammers
|
||||
id: 1674828862
|
||||
- enabled: true
|
||||
url: https://s3.amazonaws.com/lists.disconnect.me/simple_ad.txt
|
||||
name: Ad filter list by Disconnect
|
||||
id: 1674828863
|
||||
- enabled: true
|
||||
url: https://gitlab.com/quidsup/notrack-blocklists/raw/master/notrack-malware.txt
|
||||
name: NoTrack Malware Blocklist
|
||||
id: 1674828864
|
||||
- enabled: true
|
||||
url: https://easylist-downloads.adblockplus.org/antiadblockfilters.txt
|
||||
name: Adblock Warning Removal List
|
||||
id: 1674828865
|
||||
- enabled: true
|
||||
url: https://secure.fanboy.co.nz/fanboy-cookiemonster.txt
|
||||
name: Easylist Cookie List
|
||||
id: 1674828866
|
||||
- enabled: true
|
||||
url: https://raw.githubusercontent.com/nextdns/native-tracking-domains/main/domains/alexa
|
||||
name: NextDNS Privacy - Alexa
|
||||
id: 1674828867
|
||||
- enabled: true
|
||||
url: https://raw.githubusercontent.com/nextdns/native-tracking-domains/main/domains/windows
|
||||
name: NextDNS Privacy - Windows
|
||||
id: 1674828868
|
||||
- enabled: true
|
||||
url: https://raw.githubusercontent.com/nextdns/native-tracking-domains/main/domains/samsung
|
||||
name: NextDNS Privacy - Samsung
|
||||
id: 1674828869
|
||||
- enabled: true
|
||||
url: https://s3.amazonaws.com/lists.disconnect.me/simple_malvertising.txt
|
||||
name: Malvertising list by Disconnect
|
||||
id: 1674828870
|
||||
- enabled: true
|
||||
url: https://dl.red.flag.domains/red.flag.domains.txt
|
||||
name: 'FR: French filters RedFlagDomains'
|
||||
id: 1674828871
|
||||
- enabled: true
|
||||
url: https://dbl.oisd.nl/
|
||||
name: OISD Domains
|
||||
id: 1674828872
|
||||
- enabled: true
|
||||
url: https://hosts.oisd.nl/
|
||||
name: OISD Hosts
|
||||
id: 1674828873
|
||||
- enabled: true
|
||||
url: https://raw.githubusercontent.com/NanoAdblockerLab/NanoContrib/master/dist/placeholder-buster.txt
|
||||
name: Removes empty ads placeholders
|
||||
id: 1686454535
|
||||
whitelist_filters: []
|
||||
user_rules:
|
||||
{% for item in user_rules %}
|
||||
- {{ item.rule }}
|
||||
{% endfor %}
|
||||
dhcp:
|
||||
enabled: false
|
||||
interface_name: ""
|
||||
local_domain_name: lan
|
||||
dhcpv4:
|
||||
gateway_ip: ""
|
||||
subnet_mask: ""
|
||||
range_start: ""
|
||||
range_end: ""
|
||||
lease_duration: 86400
|
||||
icmp_timeout_msec: 1000
|
||||
options: []
|
||||
dhcpv6:
|
||||
range_start: ""
|
||||
lease_duration: 86400
|
||||
ra_slaac_only: false
|
||||
ra_allow_slaac: false
|
||||
filtering:
|
||||
blocking_ipv4: ""
|
||||
blocking_ipv6: ""
|
||||
blocked_services:
|
||||
schedule:
|
||||
time_zone: {{ time_zone }}
|
||||
ids: []
|
||||
protection_disabled_until: null
|
||||
safe_search:
|
||||
enabled: false
|
||||
bing: true
|
||||
duckduckgo: true
|
||||
google: true
|
||||
pixabay: true
|
||||
yandex: true
|
||||
youtube: true
|
||||
blocking_mode: default
|
||||
parental_block_host: family-block.dns.adguard.com
|
||||
safebrowsing_block_host: standard-block.dns.adguard.com
|
||||
rewrites:
|
||||
{% for item in rewrites %}
|
||||
- domain: {{ item.domain }}
|
||||
answer: {{ item.answer }}
|
||||
{% endfor %}
|
||||
safebrowsing_cache_size: 1048576
|
||||
safesearch_cache_size: 1048576
|
||||
parental_cache_size: 1048576
|
||||
cache_time: 30
|
||||
filters_update_interval: 12
|
||||
blocked_response_ttl: 10
|
||||
filtering_enabled: true
|
||||
parental_enabled: false
|
||||
safebrowsing_enabled: false
|
||||
protection_enabled: true
|
||||
clients:
|
||||
runtime_sources:
|
||||
whois: true
|
||||
arp: true
|
||||
rdns: true
|
||||
dhcp: true
|
||||
hosts: true
|
||||
persistent: []
|
||||
log:
|
||||
file: ""
|
||||
max_backups: 0
|
||||
max_size: 100
|
||||
max_age: 3
|
||||
compress: false
|
||||
local_time: false
|
||||
verbose: false
|
||||
os:
|
||||
group: ""
|
||||
user: ""
|
||||
rlimit_nofile: 0
|
||||
schema_version: 27
|
||||
@ -0,0 +1,585 @@
|
||||
# 2023-09-25
|
||||
#
|
||||
# IMPORTANT NOTE:
|
||||
#
|
||||
# THIS FILE IS MAYBE JUST ONE OF MANY CONFIGURATION FILES IN THIS DIRECTORY.
|
||||
# SETTINGS MADE IN OTHER FILES CAN OVERRIDE VALUES THAT YOU CHANGE HERE. GO
|
||||
# LOOK FOR OTHER CONFIGURATION FILES! CHECK THE MANUAL AND INSTALLATION NOTES
|
||||
# (like README.Debian) FOR MORE DETAILS!
|
||||
#
|
||||
|
||||
# This is a configuration file for apt-cacher-ng, a smart caching proxy for
|
||||
# software package downloads. It's supposed to be in a directory specified by
|
||||
# the -c option of apt-cacher-ng, see apt-cacher-ng(8) for details.
|
||||
# RULES:
|
||||
# - letter case in variable names does not matter
|
||||
# - names and values are separated by colon or equals sign
|
||||
# - for boolean variables, zero means false, non-zero means true
|
||||
# - "default value" means built-in (!) defaults, i.e. something which the
|
||||
# program uses if the option is not set here or in other config files.
|
||||
# That value might be explicitly mentioned in the description. Where it is
|
||||
# not, there is no reason to assume any of the examples to be the default
|
||||
# value! In doubt, use acngtool to query the value of the particular variable.
|
||||
|
||||
# Storage directory for downloaded data and related maintenance activity.
|
||||
#
|
||||
# Note: When the value for CacheDir is changed, change the file
|
||||
# /lib/systemd/system/apt-cacher-ng.service too
|
||||
#
|
||||
CacheDir: /var/cache/apt-cacher-ng
|
||||
|
||||
# Log file directory, can be set empty to disable logging
|
||||
#
|
||||
LogDir: /var/log/apt-cacher-ng
|
||||
|
||||
# A place to look for additional configuration and resource files if they are not
|
||||
# found in the configuration directory
|
||||
#
|
||||
SupportDir: /usr/lib/apt-cacher-ng
|
||||
|
||||
# TCP server port for incoming http (or HTTP proxy) connections.
|
||||
# Can be set to 9999 to emulate apt-proxy. Value of 0 turns off TCP server
|
||||
# (SocketPath must be set in this case).
|
||||
#
|
||||
# Port:3142
|
||||
|
||||
# Addresses or hostnames to listen on. Multiple addresses must be separated by
|
||||
# spaces. Each entry must be an exact local address which is associated with a
|
||||
# local interface. DNS resolution is performed using getaddrinfo(3) for all
|
||||
# available protocols (IPv4, IPv6, ...). Using a protocol specific format will
|
||||
# create binding(s) only on protocol specific socket(s), e.g. 0.0.0.0 will
|
||||
# listen only to IPv4. The endpoint can also be specified as host:port (or
|
||||
# [ipv6-address]:port) which allows binding on non-standard ports (Port
|
||||
# directive is ignored in this case).
|
||||
#
|
||||
# Default: listens on all interfaces and protocols
|
||||
#
|
||||
# BindAddress: localhost 192.168.7.254 publicNameOnMainInterface
|
||||
|
||||
# The specification of another HTTP proxy which shall be used for downloads.
|
||||
# It can include user name and password but see the manual for limitations.
|
||||
#
|
||||
# Default: uses direct connection
|
||||
#
|
||||
# Proxy: http://www-proxy.example.net:3128
|
||||
# Proxy: https://username:proxypassword@proxy.example.net:3129
|
||||
|
||||
# Repository remapping. See manual for details.
|
||||
# In this example, some backends files might be generated during package
|
||||
# installation using information collected on the system.
|
||||
# Examples:
|
||||
Remap-debrep: file:deb_mirror*.gz /debian ; file:backends_debian # Debian Archives
|
||||
Remap-uburep: file:ubuntu_mirrors /ubuntu ; file:backends_ubuntu # Ubuntu Archives
|
||||
Remap-klxrep: file:kali_mirrors /kali ; file:backends_kali # Kali Linux Archives
|
||||
Remap-cygwin: file:cygwin_mirrors /cygwin # ; file:backends_cygwin # incomplete, please create this file or specify preferred mirrors here
|
||||
Remap-sfnet: file:sfnet_mirrors # ; file:backends_sfnet # incomplete, please create this file or specify preferred mirrors here
|
||||
Remap-alxrep: file:archlx_mirrors /archlinux # ; file:backend_archlx # Arch Linux
|
||||
Remap-fedora: file:fedora_mirrors # Fedora Linux
|
||||
Remap-epel: file:epel_mirrors # Fedora EPEL
|
||||
Remap-slrep: file:sl_mirrors # Scientific Linux
|
||||
Remap-gentoo: file:gentoo_mirrors.gz /gentoo ; file:backends_gentoo # Gentoo Archives
|
||||
Remap-secdeb: security.debian.org security.debian.org/debian-security deb.debian.org/debian-security /debian-security cdn-fastly.deb.debian.org/debian-security ; deb.debian.org/debian-security security.debian.org cdn-fastly.deb.debian.org/debian-security
|
||||
|
||||
# Virtual page accessible in a web browser to see statistics and status
|
||||
# information, i.e. under http://localhost:3142/acng-report.html
|
||||
# NOTE: This option must be configured to run maintenance jobs (even when used
|
||||
# via acngtool in cron scripts). The AdminAuth option can be used to restrict
|
||||
# access to sensitive areas on that page.
|
||||
#
|
||||
# Default: not set, should be set by the system administrator
|
||||
#
|
||||
ReportPage: acng-report.html
|
||||
|
||||
# Socket file for accessing through local UNIX socket instead of TCP/IP. Can be
|
||||
# used with inetd (via bridge tool in.acng from apt-cacher-ng package), is also
|
||||
# used internally for administrative purposes.
|
||||
#
|
||||
# Default: /run/apt-cacher-ng/socket
|
||||
#
|
||||
# SocketPath: /var/run/apt-cacher-ng/socket
|
||||
|
||||
# If set to 1, makes log files be written to disk on every new line. Default
|
||||
# is 0, buffers are flushed after the client disconnects. Technically,
|
||||
# it's a convenience alias for the Debug option, see below for details.
|
||||
#
|
||||
# UnbufferLogs: 0
|
||||
|
||||
# Enables extended client information in log entries. When set to 0, only
|
||||
# activity type, time and transfer sizes are logged.
|
||||
#
|
||||
# VerboseLog: 1
|
||||
|
||||
# Don't detach from the starting console.
|
||||
#
|
||||
ForeGround: 1
|
||||
|
||||
# Store the pid of the daemon process in the specified text file.
|
||||
# Default: disabled
|
||||
#
|
||||
# PidFile: /var/run/apt-cacher-ng/pid
|
||||
|
||||
# Forbid outgoing connections and work without an internet connection or
|
||||
# respond with 503 error where it's not possible.
|
||||
#
|
||||
# Offlinemode: 0
|
||||
|
||||
# Forbid downloads from locations that are directly specified in the user
|
||||
# request, i.e. all downloads must be processed by the preconfigured remapping
|
||||
# backends (see above).
|
||||
#
|
||||
# ForceManaged: 0
|
||||
|
||||
# Days before considering an unreferenced file expired (to be deleted).
|
||||
# WARNING: if the value is set too low and particular index files are not
|
||||
# available for some days (mirror downtime) then there is a risk of removal of
|
||||
# still useful package files.
|
||||
#
|
||||
ExThreshold: 4
|
||||
|
||||
# If set to true, the removal (i.e. response status 404) of remote
|
||||
# volatile/index files is considered a hint to consider the local cached
|
||||
# versions irrelevant and also expire them just like package files. This adds
|
||||
# some risk of removing too much cache contents in cases where a middlebox
|
||||
# reports bogus 404 codes.
|
||||
#
|
||||
# If false (0), a less sloppy algorithm is used to invalidate certain keyfiles
|
||||
# first, which might subsequently expire the cache contents but much later or
|
||||
# maybe never unless the administrator intervenes.
|
||||
#
|
||||
FollowIndexFileRemoval: 1
|
||||
|
||||
# If the expiration is run daily, it sometimes does not make much sense to do
|
||||
# it because the expected changes (i.e. removal of expired files) don't justify
|
||||
# the extra processing time or additional downloads for expiration operation
|
||||
# itself. This discrepancy might be especially worse if the local client
|
||||
# installations are small or are rarely updated but the daily changes of
|
||||
# the remote archive metadata are heavy.
|
||||
#
|
||||
# The following option enables a possible trade-off: the expiration run is
|
||||
# suppressed until a certain amount of data has been downloaded through
|
||||
# apt-cacher-ng since the last expiration execution (which might indicate that
|
||||
# packages were replaced with newer versions).
|
||||
#
|
||||
# The number can have a suffix (k,K,m,M for Kb,KiB,Mb,MiB)
|
||||
#
|
||||
# ExStartTradeOff: 500m
|
||||
|
||||
# Stop expiration when a critical problem appears, issue like a failed update
|
||||
# of an index file in the preparation step.
|
||||
#
|
||||
# WARNING: don't set this option to zero or empty without considering possible
|
||||
# consequences like a sudden and complete cache data loss.
|
||||
#
|
||||
# ExAbortOnProblems: 1
|
||||
|
||||
# Number of failed nightly expiration runs which are considered acceptable and
|
||||
# do not trigger an error notification to the admin (e.g. via daily cron job)
|
||||
# before the (day) count is reached. Might be useful with whacky internet
|
||||
# connections.
|
||||
#
|
||||
# Default: a guessed value, 1 if ExThreshold is 5 or more, 0 otherwise.
|
||||
#
|
||||
# ExSuppressAdminNotification: 1
|
||||
|
||||
# Modify file names to work around limitations of some file systems.
|
||||
# WARNING: experimental feature, subject to change
|
||||
#
|
||||
# StupidFs: 0
|
||||
|
||||
# Experimental feature for apt-listbugs: pass-through SOAP requests and
|
||||
# responses to/from bugs.debian.org.
|
||||
# Default: guessed value, true unless ForceManaged is enabled
|
||||
#
|
||||
# ForwardBtsSoap: 1
|
||||
|
||||
# There is a small in-memory cache for DNS resolution data, expired by
|
||||
# this timeout (in seconds). Internal caching is disabled if set to a value
|
||||
# less than zero.
|
||||
#
|
||||
# DnsCacheSeconds: 1800
|
||||
|
||||
###############################################################################
|
||||
#
|
||||
# WARNING: don't modify thread and file matching parameters without a clear
|
||||
# idea of what is happening behind the scene!
|
||||
#
|
||||
# Max. count of connection threads kept ready (for faster response in the
|
||||
# future). Should be a sane value between 0 and average number of connections,
|
||||
# and depend on the amount of spare RAM.
|
||||
# MaxStandbyConThreads: 8
|
||||
#
|
||||
# Hard limit of active thread count for incoming connections, i.e. operation
|
||||
# is refused when this value is reached (below zero = unlimited).
|
||||
# MaxConThreads: -1
|
||||
#
|
||||
# Timeout for a forced disconnect in cases where a client connection is about
|
||||
# to be closed but remote refuses to confirm the disconnect request. Setting
|
||||
# this to a lower value mitigates the effects of resource starvation in case of
|
||||
# a DOS attack but increases the risk of failing to flush the remaining portion
|
||||
# of data.
|
||||
# DisconnectTimeout: 15
|
||||
|
||||
# By default, if a remote suddenly reconnects, ACNG tries at least two times to
|
||||
# redownload from the same or different location (if known).
|
||||
# DlMaxRetries: 2
|
||||
|
||||
# Pigeonholing files (like static vs. volatile contents) is done by (extended)
|
||||
# regular expressions.
|
||||
#
|
||||
# The following patterns are available for the purposes detailed, where
|
||||
# the latter takes precedence over the former:
|
||||
# - «PFilePattern» for static data that doesn't change silently on the server.
|
||||
# - «VFilePattern» for volatile data that may change like every hour. Files
|
||||
# that match both PFilePattern and VfilePattern will be treated as volatile.
|
||||
# - Static data with file names that match VFilePattern may be overriden being
|
||||
# treated as volatile by making it match the special static data pattern,
|
||||
# «SPfilePattern».
|
||||
# - «SVfilePattern» or the "special volatile data" pattern is for the
|
||||
# convenience of specifying any exceptions to matches with SPfilePattern,
|
||||
# for cases where data must still be treated as volatile.
|
||||
# - «WfilePattern» specifies a "whitelist pattern" for the regular expiration
|
||||
# job, telling it to keep the files even if they are not referenced by
|
||||
# others, like crypto signatures with which clients begin their downloads.
|
||||
#
|
||||
# There are two versions. The pattern variables mentioned above should not be
|
||||
# set without good reason, because they would override the built-in defaults
|
||||
# (that might impact updates to future versions of apt-cacher-ng). There are
|
||||
# also versions of those patterns ending with Ex, which may be modified by the
|
||||
# local administrator. They are evaluated in addition to the regular patterns
|
||||
# at runtime.
|
||||
#
|
||||
# To see examples of the expected syntax, run: apt-cacher-ng -p debug=1
|
||||
#
|
||||
# PfilePatternEx:
|
||||
# VfilePatternEx:
|
||||
# SPfilePatternEx:
|
||||
# SVfilePatternEx:
|
||||
# WfilePatternEx:
|
||||
#
|
||||
###############################################################################
|
||||
|
||||
# A bitmask type value declaring the loging verbosity and behavior of the error
|
||||
# log writing. Non-zero value triggers at least faster log file flushing.
|
||||
#
|
||||
# Some higher bits only working with a special debug build of apt-cacher-ng,
|
||||
# see the manual for details.
|
||||
#
|
||||
# WARNING: this can write significant amount of data into apt-cacher.err logfile.
|
||||
#
|
||||
# Default: 0
|
||||
#
|
||||
# Debug:3
|
||||
|
||||
# Usually, general purpose proxies like Squid expose the IP address of the
|
||||
# client user to the remote server using the X-Forwarded-For HTTP header. This
|
||||
# behaviour can be optionally turned on with the Expose-Origin option.
|
||||
#
|
||||
# ExposeOrigin: 0
|
||||
|
||||
# When logging the originating IP address, trust the information supplied by
|
||||
# the client in the X-Forwarded-For header.
|
||||
#
|
||||
# LogSubmittedOrigin: 0
|
||||
|
||||
# The version string reported to the peer, to be displayed as HTTP client (and
|
||||
# version) in the logs of the mirror.
|
||||
#
|
||||
# WARNING: Expect side effects! Some archives use this header to guess
|
||||
# capabilities of the client (i.e. allow redirection and/or https links) and
|
||||
# change their behaviour accordingly but ACNG might not support the expected
|
||||
# features.
|
||||
#
|
||||
# Default:
|
||||
#
|
||||
# UserAgent: Yet Another HTTP Client/1.2.3p4
|
||||
|
||||
# In some cases the Import and Expiration tasks might create fresh volatile
|
||||
# data for internal use by reconstructing them using patch files. This
|
||||
# by-product might be recompressed with bzip2 and with some luck the resulting
|
||||
# file becomes identical to the *.bz2 file on the server which can be used by
|
||||
# APT when requesting a complete version of this file.
|
||||
# The downside of this feature is higher CPU load on the server during
|
||||
# the maintenance tasks, and the outcome might have not much value in a LAN
|
||||
# where all clients update their data often and regularly and therefore usually
|
||||
# don't need the full version of the index file.
|
||||
#
|
||||
# RecompBz2: 0
|
||||
|
||||
# Network timeout for outgoing connections, in seconds.
|
||||
#
|
||||
# NetworkTimeout: 40
|
||||
|
||||
# Fast fallback timeout, in seconds. This is the time to wait before
|
||||
# alternative target addresses for a client connection are tried, which can be
|
||||
# usefull for quick fallback to IPv4 in case of whacky IPv6 configuration.
|
||||
#
|
||||
# FastTimeout = 4
|
||||
|
||||
# Sometimes it makes sense to not store the data in cache and just return the
|
||||
# package data to client while it comes in. The following DontCache* parameters
|
||||
# can enable this behaviour for certain URL types. The tokens are extended
|
||||
# regular expressions which the URLs are evaluated against.
|
||||
#
|
||||
# DontCacheRequested is applied to the URL as it comes in from the client.
|
||||
# Example: exclude packages built with kernel-package for x86
|
||||
# DontCacheRequested: linux-.*_10\...\.Custo._i386
|
||||
# Example usecase: exclude popular private IP ranges from caching
|
||||
# DontCacheRequested: 192.168.0 ^10\..* 172.30
|
||||
#
|
||||
# DontCacheResolved is applied to URLs after mapping to the target server. If
|
||||
# multiple backend servers are specified then it's only matched against the
|
||||
# download link for the FIRST possible source (due to implementation limits).
|
||||
#
|
||||
# Example usecase: all Ubuntu stuff comes from a local mirror (specified as
|
||||
# backend), don't cache it again:
|
||||
# DontCacheResolved: ubuntumirror.local.net
|
||||
#
|
||||
# DontCache directive sets (overrides) both, DontCacheResolved and
|
||||
# DontCacheRequested. Provided for convenience, see those directives for
|
||||
# details.
|
||||
#
|
||||
# Example:
|
||||
# DontCache: .*.local.university.int
|
||||
|
||||
# Default permission set of freshly created files and directories, as octal
|
||||
# numbers (see chmod(1) for details).
|
||||
# Can by limited by the umask value (see umask(2) for details) if it's set in
|
||||
# the environment of the starting shell, e.g. in apt-cacher-ng init script or
|
||||
# in its configuration file.
|
||||
#
|
||||
# DirPerms: 00755
|
||||
# FilePerms: 00664
|
||||
|
||||
# It's possible to use use apt-cacher-ng as a regular web server with a limited
|
||||
# feature set, i.e. directory browsing, downloads of any files, Content-Type
|
||||
# based on /etc/mime.types, but without sorting, CGI execution, index page
|
||||
# redirection and other funny things.
|
||||
# To get this behavior, mappings between virtual directories and real
|
||||
# directories on the server must be defined with the LocalDirs directive.
|
||||
# Virtual and real directories are separated by spaces, multiple pairs are
|
||||
# separated by semi-colons. Real directories must be absolute paths.
|
||||
# NOTE: Since the names of that key directories share the same namespace as
|
||||
# repository names (see Remap-...) it is administrator's job to avoid conflicts
|
||||
# between them or explicitly create them.
|
||||
#
|
||||
# LocalDirs: woo /data/debarchive/woody ; hamm /data/debarchive/hamm
|
||||
LocalDirs: acng-doc /usr/share/doc/apt-cacher-ng
|
||||
|
||||
# Precache a set of files referenced by specified index files. This can be used
|
||||
# to create a partial mirror usable for offline work. There are certain limits
|
||||
# and restrictions on the path specification, see manual and the cache control
|
||||
# web site for details. A list of (maybe) relevant index files could be
|
||||
# retrieved via "apt-get --print-uris update" on a client machine.
|
||||
#
|
||||
# Example:
|
||||
# PrecacheFor: debrep/dists/unstable/*/source/Sources* debrep/dists/unstable/*/binary-amd64/Packages*
|
||||
PrecacheFor: {secdeb,debrep}//{Packages,InRelease,Packages.xz,Translation,Commands}*
|
||||
|
||||
# Arbitrary set of data to append to request headers sent over the wire. Should
|
||||
# be a well formated HTTP headers part including newlines (DOS style) which
|
||||
# can be entered as escape sequences (\r\n).
|
||||
#
|
||||
# RequestAppendix: X-Tracking-Choice: do-not-track\r\n
|
||||
|
||||
# Specifies the IP protocol families to use for remote connections. Order does
|
||||
# matter, first specified are considered first. Possible combinations:
|
||||
# v6 v4
|
||||
# v4 v6
|
||||
# v6
|
||||
# v4
|
||||
# Default: use native order of the system's TCP/IP stack, influenced by the
|
||||
# BindAddress value.
|
||||
#
|
||||
# ConnectProto: v6 v4
|
||||
|
||||
# Regular expiration algorithm finds package files which are no longer listed
|
||||
# in any index file and removes them of them after a safety period.
|
||||
# This option allows to keep more versions of a package in the cache after
|
||||
# the safety period is over.
|
||||
#
|
||||
# KeepExtraVersions: 0
|
||||
|
||||
# Optionally uses TCP access control provided by libwrap, see hosts_access(5)
|
||||
# for details. Daemon name is apt-cacher-ng.
|
||||
#
|
||||
# Default: guessed on startup by looking for explicit mention of apt-cacher-ng
|
||||
# in /etc/hosts.allow or /etc/hosts.deny files.
|
||||
#
|
||||
# UseWrap: 0
|
||||
|
||||
# If many machines from the same local network attempt to update index files
|
||||
# (apt-get update) at nearly the same time, the known state of these index file
|
||||
# is temporarily frozen and multiple requests receive the cached response
|
||||
# without contacting the remote server again. This parameter (in seconds)
|
||||
# specifies the length of this period before these (volatile) files are
|
||||
# considered outdated.
|
||||
# Setting this value too low transfers more data and increases remote server
|
||||
# load, setting this too high (more than a couple of minutes) increases the
|
||||
# risk of delivering inconsistent responses to the clients.
|
||||
#
|
||||
# FreshIndexMaxAge: 27
|
||||
|
||||
# Usually the users are not allowed to specify custom TCP ports of remote
|
||||
# mirrors in the requests, only the default HTTP port can be used (as
|
||||
# workaround, proxy administrator can create Remap- rules with custom ports).
|
||||
# This restriction can be disabled by specifying a list of allowed ports or 0
|
||||
# for any port.
|
||||
#
|
||||
# AllowUserPorts: 80
|
||||
|
||||
# Normally the HTTP redirection responses are forwarded to the original caller
|
||||
# (i.e. APT) which starts a new download attempt from the new URL. This
|
||||
# solution is ok for client configurations with proxy mode but doesn't work
|
||||
# well with configurations using URL prefixes in sources.list. To work around
|
||||
# this the server can restart its own download with a redirection URL,
|
||||
# configured with the following option. The downside is that this might be used
|
||||
# to circumvent download source policies by malicious users.
|
||||
# The RedirMax option specifies how many such redirects the server is allowed
|
||||
# to follow per request, 0 disables the internal redirection.
|
||||
# Default: guessed on startup, 0 if ForceManaged is used and 5 otherwise.
|
||||
#
|
||||
# RedirMax: 5
|
||||
|
||||
# There some broken HTTP servers and proxy servers in the wild which don't
|
||||
# support the If-Range header correctly and return incorrect data when the
|
||||
# contents of a (volatile) file changed. This also applies to incomplete
|
||||
# resumed downloads. Setting VfileUseRangeOps to 0 disables Range-based
|
||||
# requests (using purely If-Modified-Since and requesting the complete file
|
||||
# instead, if changed). Setting it to a negative value removes even this check
|
||||
# and means fetching the whole file from the beginning.
|
||||
#
|
||||
# VfileUseRangeOps: 1
|
||||
|
||||
# Allow data pass-through mode for certain hosts when requested by the client
|
||||
# using a CONNECT request. This is particularly useful to allow access to SSL
|
||||
# sites (https proxying). The string is a regular expression which should cover
|
||||
# the server name with port and must be correctly formated and terminated.
|
||||
# Examples:
|
||||
# PassThroughPattern: private-ppa\.launchpad\.net:443$
|
||||
PassThroughPattern: .* #
|
||||
#
|
||||
# Default: ^(bugs\.debian\.org|changelogs\.ubuntu\.com):443$
|
||||
# PassThroughPattern: ^(bugs\.debian\.org|changelogs\.ubuntu\.com):443$
|
||||
|
||||
# Interval an overaged local cache item (i.e. active file descriptor) can be
|
||||
# considered broken so that a new forced download can be started. Such
|
||||
# situation can happen when a very slow clients keeps a hot cache item active
|
||||
# for extended amounts of time so that even the remote freshness checks
|
||||
# intervals might become overrun.
|
||||
#
|
||||
# Default time is based on the value of FreshIndexMaxAge with a safety factor.
|
||||
#
|
||||
# ResponseFreezeDetectTime: 60
|
||||
|
||||
# Keep outgoing connections alive and reuse them for later downloads from
|
||||
# the same server as long as possible.
|
||||
#
|
||||
# ReuseConnections: 1
|
||||
|
||||
# Maximum number of requests sent in a batch to remote servers before the first
|
||||
# response is expected. Using higher values can greatly improve average
|
||||
# throughput depending on network latency and the implementation of remote
|
||||
# servers. Makes most sense when also enabled on the client side, see apt.conf
|
||||
# documentation for details.
|
||||
#
|
||||
# Default: 10 if ReuseConnections is set, 1 otherwise
|
||||
#
|
||||
# PipelineDepth: 10
|
||||
|
||||
# Path to the system directory containing trusted CA certificates used for
|
||||
# outgoing connections, see OpenSSL documentation for details.
|
||||
#
|
||||
# CApath: /etc/ssl/certs
|
||||
#
|
||||
# Path to a single trusted trusted CA certificate used for outgoing
|
||||
# connections, see OpenSSL documentation for details.
|
||||
#
|
||||
# CAfile:
|
||||
|
||||
# There are different ways to detect that an upstream proxy is broken and turn
|
||||
# off its use and connect directly. The first is through a custom command -
|
||||
# when it returns successfully, the proxy is used, otherwise not and the
|
||||
# command will be rerun only after a specified period.
|
||||
# Another way is to try to connect to the proxy first and detect a connection
|
||||
# timeout. The connection will then be made without HTTP proxy for the life
|
||||
# time of the particular download stream and it may also affect other other
|
||||
# parallel downloads.
|
||||
# NOTE: this operation modes are still experimental and are subject to change!
|
||||
# Unwanted side effects may occur with multiple simultaneous user connections
|
||||
# or with specific per-repository proxy settings.
|
||||
#
|
||||
# Shell command, default: not set. Executed with the default shell and
|
||||
# permissions of the apt-cacher-ng's process user. Examples:
|
||||
# /bin/ip route | grep -q 192.168.117
|
||||
# /usr/sbin/arp | grep -q 00:22:1f:51:8e:c1
|
||||
#
|
||||
# OptProxyCheckCommand: ...
|
||||
#
|
||||
# Check intervall, in seconds.
|
||||
#
|
||||
# OptProxyCheckInterval: 99
|
||||
#
|
||||
# Conection timeout in seconds, default: negative, means disabled.
|
||||
#
|
||||
# OptProxyTimeout: -1
|
||||
|
||||
# It's possible to limit the processing speed of download agents to set an
|
||||
# overall download speed limit. Unit: KiB/s, Default: unlimited.
|
||||
#
|
||||
# MaxDlSpeed: 500
|
||||
|
||||
# In special corner cases, download clients attempt to download random chunks
|
||||
# of a files headers, i.e. the first kilobytes. The "don't get client stuck"
|
||||
# policy converts this usually to a 200 response starting the body from the
|
||||
# beginning but that confuses some clients. When this option is set to a
|
||||
# certain value, this modifies the behaviour and allows to start a file
|
||||
# download where the distance between available data and the specified range
|
||||
# lies within that bounds. This can look like random lag for the user but
|
||||
# should be harmless apart from that.
|
||||
#
|
||||
# MaxInresponsiveDlSize: 64000
|
||||
|
||||
# In mobile environments having an adhoc connection with a redirection to some
|
||||
# id verification side, this redirect might damage the cache since the data is
|
||||
# involuntarily stored as package data. There is a mechanism which attempts to
|
||||
# detect a such situation and mitigate the mentioned effects by not storing the
|
||||
# data and also dropping the DNS cache. The trigger is the occurrence of a
|
||||
# specific SUBSTRING in the content type field of the final download target
|
||||
# (i.e. the auth web site) and at least one followed redirection.
|
||||
#
|
||||
# BadRedirDetectMime: text/html
|
||||
|
||||
# When a BUS signal is received (typically on IO errors), a shell command can be
|
||||
# executed before the daemon is terminated.
|
||||
# Example:
|
||||
# BusAction: ls -l /proc/$PPID/ | mail -s SIGBUS! root
|
||||
|
||||
# Only set this value for debugging purposes. It disables SSL security checks
|
||||
# like strict host verification. 0 means no, any other value can have
|
||||
# differrent meaning in the future.
|
||||
#
|
||||
# NoSSLChecks: 0
|
||||
|
||||
# Setting this value means: on file downloads from/via cache, tag relevant
|
||||
# files. And when acngtool runs the shrink command, it will look at the day
|
||||
# when the file was retrieved from cache last time (and not when it was
|
||||
# originally downloaded).
|
||||
#
|
||||
# TrackFileUse: 0
|
||||
|
||||
# Controls preallocation of file system space where this feature is supported.
|
||||
# This might reduce disk fragmentation and therefore improve later read
|
||||
# performance. However, write performance can be reduced which could be
|
||||
# exploited by malicious users.
|
||||
# The value defines a size limit of how much to report to the OS as expected
|
||||
# file size (starting from the beginning of the file).
|
||||
# Set to zero to disable this feature completely. Default: one megabyte
|
||||
#
|
||||
# ReserveSpace: 1048576
|
||||
|
||||
# PermitCacheControl will allow users to specify a few hints for processing
|
||||
# of a request, for example bypassing the local cache (see
|
||||
# https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Cache-Control for
|
||||
# no-cache, no-store).
|
||||
#
|
||||
# PermitCacheControl: no-cache, no-store
|
||||
@ -0,0 +1,10 @@
|
||||
body{
|
||||
height: 100vh;
|
||||
background: #5a6373;
|
||||
}
|
||||
|
||||
.special {
|
||||
background: #7a2a21;
|
||||
color: #fff;
|
||||
text-align: center;
|
||||
}
|
||||
Binary file not shown.
|
After Width: | Height: | Size: 24 KiB |
@ -0,0 +1,25 @@
|
||||
<!DOCTYPE html>
|
||||
<html lang="fr">
|
||||
<head>
|
||||
<meta charset="utf-8" />
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1" />
|
||||
<title>Zogg Downloads</title>
|
||||
<link href="https://cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-rbsA2VBKQhggwzxH7pPCaAqO46MgnOM80zW1RWuH61DGLwZJEdK2Kadq2F9CUG65" crossorigin="anonymous" />
|
||||
<link rel="stylesheet" href="assets/css/main.css" />
|
||||
</head>
|
||||
<body>
|
||||
<div class="d-flex align-items-center justify-content-center vh-100">
|
||||
<div class="shadow p-4 special">
|
||||
<div class="text-center">
|
||||
<h1>Oops, une erreur !</h1>
|
||||
<h1><a href="/">Allez</a> de l'avant !</h1>
|
||||
<br/>
|
||||
<img src="assets/img/404.webp" alt="Not found" />
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<script src="https://cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/js/bootstrap.bundle.min.js"
|
||||
integrity="sha384-kenU1KFdBIe4zVF0s0G1M5b4hcpxyD9F7jL+jjXkk+Q2h455rYXK/7HAuoJl+0I4"
|
||||
crossorigin="anonymous"></script>
|
||||
</body>
|
||||
</html>
|
||||
Binary file not shown.
|
After Width: | Height: | Size: 3.8 KiB |
@ -0,0 +1,22 @@
|
||||
<!DOCTYPE html>
|
||||
<html lang="fr">
|
||||
<head>
|
||||
<meta charset="utf-8" />
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1" />
|
||||
<title>Zogg Downloads</title>
|
||||
<link href="https://cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-rbsA2VBKQhggwzxH7pPCaAqO46MgnOM80zW1RWuH61DGLwZJEdK2Kadq2F9CUG65" crossorigin="anonymous" />
|
||||
<link rel="stylesheet" href="assets/css/main.css" />
|
||||
</head>
|
||||
<body>
|
||||
<div class="d-flex align-items-center justify-content-center vh-100">
|
||||
<div class="shadow p-4 special">
|
||||
<h1>Bienvenue !</h1>
|
||||
<br />
|
||||
<h2>Sur la zone de téléchargement de Zogg!</h2>
|
||||
</div>
|
||||
</div>
|
||||
<script src="https://cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/js/bootstrap.bundle.min.js"
|
||||
integrity="sha384-kenU1KFdBIe4zVF0s0G1M5b4hcpxyD9F7jL+jjXkk+Q2h455rYXK/7HAuoJl+0I4"
|
||||
crossorigin="anonymous"></script>
|
||||
</body>
|
||||
</html>
|
||||
@ -0,0 +1,69 @@
|
||||
# {{ ansible_managed }}
|
||||
# master: {{ stacks_mastering }}
|
||||
# edited: 2023-09-25
|
||||
# updated: {{ ansible_date_time.date }}
|
||||
|
||||
server {
|
||||
server_name {{ vm_subdomain_dl }}.{{ vm_internet_domain}};
|
||||
listen 80;
|
||||
listen [::]:80;
|
||||
|
||||
root /usr/share/nginx/html;
|
||||
index index.php index.html index.htm;
|
||||
try_files $uri $uri/ /index.php?$query_string;
|
||||
|
||||
#error_log /dev/stdout warn;
|
||||
#access_log /dev/stdout;
|
||||
|
||||
error_page 404 500 501 /error.html;
|
||||
|
||||
location / {
|
||||
expires 1d;
|
||||
add_header Cache-Control "public";
|
||||
}
|
||||
|
||||
location = /favicon.ico {
|
||||
access_log off;
|
||||
log_not_found off;
|
||||
}
|
||||
|
||||
location = /robots.txt {
|
||||
access_log off;
|
||||
log_not_found off;
|
||||
}
|
||||
|
||||
location ~ /\.ht {
|
||||
access_log off;
|
||||
log_not_found off;
|
||||
deny all;
|
||||
}
|
||||
|
||||
location ~* /(\.git|cache|bin|logs|backup|tests)/.*$ {
|
||||
return 403;
|
||||
}
|
||||
location ~* /(system|vendor)/.*\.(txt|xml|md|html|json|yaml|yml|php|pl|py|cgi|twig|sh|bat)$ {
|
||||
return 403;
|
||||
}
|
||||
location ~* /user/.*\.(txt|md|json|yaml|yml|php|pl|py|cgi|twig|sh|bat)$ {
|
||||
return 403;
|
||||
}
|
||||
location ~ /(LICENSE\.txt|composer\.lock|composer\.json|nginx\.conf|web\.config|htaccess\.txt|\.htaccess) {
|
||||
return 403;
|
||||
}
|
||||
|
||||
location ~ .php$ {
|
||||
root /usr/share/nginx/html;
|
||||
fastcgi_pass dl-phpfpm:9000;
|
||||
fastcgi_index index.php;
|
||||
try_files $uri =404;
|
||||
fastcgi_split_path_info ^(.+.php)(/.+)$;
|
||||
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
|
||||
fastcgi_param SCRIPT_NAME $fastcgi_script_name;
|
||||
fastcgi_buffer_size 128k;
|
||||
fastcgi_buffers 256 16k;
|
||||
fastcgi_busy_buffers_size 256k;
|
||||
fastcgi_temp_file_write_size 256k;
|
||||
fastcgi_intercept_errors on;
|
||||
include fastcgi_params;
|
||||
}
|
||||
}
|
||||
@ -0,0 +1,29 @@
|
||||
{
|
||||
"host": "0.0.0.0",
|
||||
"port": 7777,
|
||||
"keyLength": 10,
|
||||
"maxLength": 400000,
|
||||
"staticMaxAge": 86400,
|
||||
"recompressStaticAssets": true,
|
||||
"logging": [
|
||||
{
|
||||
"level": "verbose",
|
||||
"type": "Console",
|
||||
"colorize": false
|
||||
}
|
||||
],
|
||||
"keyGenerator": {
|
||||
"type": "phonetic"
|
||||
},
|
||||
"storage": {
|
||||
"type": "redis",
|
||||
"path": "./data",
|
||||
"host": "{{ vm_master_name }}.{{ vm_local_domain }}",
|
||||
"port": {{ vm_port_redis }},
|
||||
"db": 2,
|
||||
"expire": 2592000
|
||||
},
|
||||
"documents": {
|
||||
"about": "./about.md"
|
||||
}
|
||||
}
|
||||
@ -0,0 +1,4 @@
|
||||
# 2023-09-25
|
||||
---
|
||||
|
||||
# sample kubernetes config
|
||||
@ -0,0 +1,11 @@
|
||||
# 2023-09-25
|
||||
---
|
||||
|
||||
# For configuration options and examples, please see:
|
||||
# https://github.com/benphelps/homepage/wiki/Settings
|
||||
|
||||
headerStyle: boxed
|
||||
language: fr
|
||||
title: Homelab
|
||||
favicon: /images/favicon.png
|
||||
hideVersion: true
|
||||
@ -0,0 +1,9 @@
|
||||
# 2023-09-25
|
||||
|
||||
# For configuration options and examples, please see:
|
||||
# https://github.com/benphelps/homepage/wiki/Information-Widgets
|
||||
|
||||
- resources:
|
||||
cpu: true
|
||||
memory: true
|
||||
disk: false
|
||||
@ -0,0 +1 @@
|
||||
https://github.com/walkxcode/dashboard-icons
|
||||
Binary file not shown.
|
After Width: | Height: | Size: 24 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 13 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 12 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 49 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 13 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 10 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 18 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 4.0 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 7.3 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 4.5 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 18 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 8.8 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 4.4 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 10 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 23 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 130 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 22 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 18 KiB |
Some files were not shown because too many files have changed in this diff Show More
Loading…
Reference in New Issue
Block a user