1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
|
nodes = {
"inazuma": {
"os": "alpine",
# this requires that the ssh user has `permit nopass :wheel/user`
"cmd_wrapper_outer": "doas -n sh -c {}",
"metadata": {
# HACK: this is needed to route host services from containerized traefik
"container_gateway": "10.89.0.1",
"ssh": {
"port": "23022",
},
"tailscale": {
"authkey": "dummy",
},
"www": {
"doyouhavewifi": {
"port": "20100",
},
"gzr-im-preview": {
"port": "20101",
},
"gzr-im": {
"port": "20102",
},
"lhost": {
"port": "20103",
},
"gonca-me": {
"port": "20107",
},
},
"glance": {
"port": "20106",
},
"go-away": { 'port': "20199" },
"go-away-metrics": { 'port': "20198" },
},
"bundles": {
"firewall",
"fail2ban",
"glance",
## containers ##
"authelia",
"golink",
"miniflux",
"prometheus",
"vaultwarden",
# "langtool",
"go-away",
"cal",
## www ##
"doyouhavewifi",
"gzr-im-preview",
"gzr-im",
"lhost",
"gonca-me",
},
},
"shimakaze": {
"os": "alpine",
"cmd_wrapper_outer": "doas -n sh -c {}",
"metadata": {
# HACK: this is needed to route host services from containerized traefik
"container_gateway": "10.89.0.1",
"ssh": {
"port": "22",
},
"tailscale": {
"authkey": "dummy",
}
},
"bundles": {
"hdidle",
"paperless",
"jellyfin",
"immich",
"nfs",
"bitfroest",
},
},
"vast": {
"os": "debian",
"bundles": {
"apt",
"vast-base",
}
},
# "kiso": {
# "os": "macos",
# "bundles": {
# "brew",
# "macos-base",
# }
# }
}
|
