1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
|
nodes = {
"inazuma": {
"os": "alpine",
# this requires that the ssh user has `permit nopass :wheel/user`
"cmd_wrapper_outer": "doas -n sh -c {}",
"metadata": {
# HACK: this is needed to route host services from containerized traefik
"container_gateway": "10.89.0.1",
"ssh": {"port": "23022"},
"tailscale": {"authkey": "dummy"},
"www": {
"doyouhavewifi": {"port": "20100"},
"gzr-im-preview": {"port": "20101"},
"gzr-im": {"port": "20102"},
"lhost": {"port": "20103"},
"gonca-me": {"port": "20107"},
"cgit": {"port": "20108"},
},
"go-away": {"port": "20199"},
"go-away-metrics": {"port": "20198"},
"glance": {"port": "20106"},
},
"bundles": {
# "teitoku",
"firewall",
"fail2ban",
"glance",
## containers ##
"authelia",
"golink",
"miniflux",
"prometheus",
"vaultwarden",
# "langtool",
"go-away",
"cal",
"geopulse",
## www ##
"doyouhavewifi",
"gzr-im-preview",
"gzr-im",
"lhost",
"gonca-me",
"git",
},
},
"shimakaze": {
"os": "alpine",
"cmd_wrapper_outer": "doas -n sh -c {}",
"metadata": {
# HACK: this is needed to route host services from containerized traefik
"container_gateway": "10.89.0.1",
"ssh": {
"port": "22",
},
"tailscale": {
"authkey": "dummy",
},
},
"bundles": {
"hdidle",
"paperless",
"jellyfin",
"immich",
"nfs",
"bitfroest",
"calibre",
# "papra",
# "hass",
},
},
"vast": {
"os": "debian",
"bundles": {
"apt",
"vast-base",
},
},
# "kiso": {
# "os": "macos",
# "bundles": {
# "brew",
# "macos-base",
# }
# }
}
|
