sonny/debian-setup
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Applied ansible-lint fixes

Browse source
This commit is contained in:
Sonny Bakker 2025-12-25 19:48:13 +01:00
parent aa4d106cd3
commit d52ae67f56
33 changed files with 495 additions and 465 deletions
Download patch file Download diff file Expand all files Collapse all files

25
host_vars/fudiggity/forgejo.yml
View file

@ -1,19 +1,20 @@
forgejo_app_dir: '/srv/docker/forgejo'
forgejo_data_dir: '/var/lib/vm/forgejo/data'
forgejo_postgres_dir: '/var/lib/vm/forgejo/postgres'
---
forgejo_app_dir: "/srv/docker/forgejo"
forgejo_data_dir: "/var/lib/vm/forgejo/data"
forgejo_postgres_dir: "/var/lib/vm/forgejo/postgres"
forgejo_image_tag: 'codeberg.org/forgejo/forgejo:11'
forgejo_image_tag: "codeberg.org/forgejo/forgejo:11"
forgejo_postgres_user: forgejo
forgejo_postgres_name: forgejo
# TODO: write to docker secret
forgejo_postgres_password: !vault |
$ANSIBLE_VAULT;1.1;AES256
30303039313766373966373364346539306661376564613530656565313131623635666435333564
6463316365373564383964316635366337376237386134340a353839313761633865646638356165
31306666616235336132363232303639303065343436656233366264333236323435393963373062
3165326331633438620a323064663435396666316266396135633463653335323534616264383965
33383262373831656335363434333938363230373133646436653261346364353463333065303534
66383533646636313662376236373931383065386330663438623363336664353832343263323336
366531643930326636343466343732373036
$ANSIBLE_VAULT;1.1;AES256
30303039313766373966373364346539306661376564613530656565313131623635666435333564
6463316365373564383964316635366337376237386134340a353839313761633865646638356165
31306666616235336132363232303639303065343436656233366264333236323435393963373062
3165326331633438620a323064663435396666316266396135633463653335323534616264383965
33383262373831656335363434333938363230373133646436653261346364353463333065303534
66383533646636313662376236373931383065386330663438623363336664353832343263323336
366531643930326636343466343732373036

19
host_vars/fudiggity/glitchtip.yml
View file

@ -1,14 +1,15 @@
---
glitchtip_image_tag: glitchtip/glitchtip:v4.2
glitchtip_app_dir: /srv/docker/glitchtip
glitchtip_secret_key: !vault |
$ANSIBLE_VAULT;1.1;AES256
37363333306434636331626231663964626631616131326335333832323939363865353431633233
6263363535646132316130373536303466613436656636300a333231383137326634326230343661
63333933363038333865633930663562306163613164623731613866353861616435373865666330
6131663965663836300a636366386432666133343364353763333731376561646338383531613363
32383834646461383562303564663135633932616536646134393632626664376335373136383638
35323934653664666530343562363461396230333435336166343033643732663766383633343337
30303938633939623830363661633936323031373362353363346530363535613363393432666462
37643033336130393166
$ANSIBLE_VAULT;1.1;AES256
37363333306434636331626231663964626631616131326335333832323939363865353431633233
6263363535646132316130373536303466613436656636300a333231383137326634326230343661
63333933363038333865633930663562306163613164623731613866353861616435373865666330
6131663965663836300a636366386432666133343364353763333731376561646338383531613363
32383834646461383562303564663135633932616536646134393632626664376335373136383638
35323934653664666530343562363461396230333435336166343033643732663766383633343337
30303938633939623830363661633936323031373362353363346530363535613363393432666462
37643033336130393166

1
host_vars/fudiggity/jellyfin.yml
View file

@ -1,3 +1,4 @@
---
jellyfin_image_tag: jellyfin/jellyfin:10.10.7
jellyfin_app_dir: /srv/docker/jellyfin
jellyfin_configuration_dir: /home/sonny/.config/jellyfin

11
host_vars/fudiggity/main.yml
View file

@ -1,3 +1,4 @@
---
packages:
- nftables
- syncthing
@ -12,12 +13,12 @@ packages:
- certbot
- unattended-upgrades
vpn_config_dir: '/etc/wireguard'
vpn_config_dir: "/etc/wireguard"
hostname: 'fudiggity'
hostname: "fudiggity"
xdg_config_dir: '/home/sonny/.config'
xdg_data_dir: '/home/sonny/.local/share'
xdg_state_dir: '/home/sonny/.local/state'
xdg_config_dir: "/home/sonny/.config"
xdg_data_dir: "/home/sonny/.local/share"
xdg_state_dir: "/home/sonny/.local/state"
systemd_service_dir: /etc/systemd/system

11
host_vars/fudiggity/mpd.yml
View file

@ -1,6 +1,7 @@
mpd_app_dir: '/srv/docker/mpd'
mpd_music_dir: '/home/sonny/music'
---
mpd_app_dir: "/srv/docker/mpd"
mpd_music_dir: "/home/sonny/music"
mpd_config_dir: '{{ xdg_config_dir }}/mpd'
mpd_playlist_dir: '{{ xdg_data_dir }}/mpd/playlists'
mpd_state_dir: '{{ xdg_state_dir }}/mpd'
mpd_config_dir: "{{ xdg_config_dir }}/mpd"
mpd_playlist_dir: "{{ xdg_data_dir }}/mpd/playlists"
mpd_state_dir: "{{ xdg_state_dir }}/mpd"

29
host_vars/fudiggity/network.yml
View file

@ -1,3 +1,4 @@
---
network_interface: link1
network_mac: 00:1b:21:3b:50:e2
@ -13,22 +14,22 @@ ssh_port: 39901
vpn_listen_address: 10.0.0.1
vpn_prefix: 24
vpn_subnet: '10.0.0.0/{{ vpn_prefix }}'
vpn_subnet: "10.0.0.0/{{ vpn_prefix }}"
vpn_port: 51902
vpn_interface: wg0
vpn_domain: 'vpn.{{ domain_name }}'
vpn_domain: "vpn.{{ domain_name }}"
vpn_media_listen_address: 10.0.1.1
vpn_media_prefix: 24
vpn_media_subnet: '10.0.1.0/{{ vpn_media_prefix }}'
vpn_media_subnet: "10.0.1.0/{{ vpn_media_prefix }}"
vpn_media_port: 51903
vpn_media_interface: wg1
vpn_media_domain: 'media-vpn.{{ domain_name }}'
vpn_media_domain: "media-vpn.{{ domain_name }}"
mpd_domain: 'mpd.{{ domain_name }}'
mpd_domain: "mpd.{{ domain_name }}"
mpd_listen_address: 0.0.0.0
mpd_prefix: 24
mpd_subnet: '172.128.238.0/{{ mpd_prefix }}'
mpd_subnet: "172.128.238.0/{{ mpd_prefix }}"
mpd_port: 21000
mpd_http_stream_port: 8000
mpd_http_mobile_stream_port: 8001
@ -51,31 +52,31 @@ glitchtip_ip: 127.0.0.1
glitchtip_app_port: 7200
glitchtip_domain: glitchtip.fudiggity.nl
syncthing_domain: 'syncthing.{{ domain_name }}'
syncthing_domain: "syncthing.{{ domain_name }}"
syncthing_listen_address: 0.0.0.0
syncthing_prefix: 24
syncthing_subnet: '172.32.238.0/{{ syncthing_prefix }}'
syncthing_subnet: "172.32.238.0/{{ syncthing_prefix }}"
syncthing_gui_port: 8384
syncthing_protocol_port: 22000
syncthing_nginx_ip: 172.32.238.10
syncthing_app_ip: 172.32.238.11
radicale_domain: 'radicale.{{ domain_name }}'
radicale_domain: "radicale.{{ domain_name }}"
radicale_prefix: 24
radicale_subnet: '172.64.238.0/{{ radicale_prefix }}'
radicale_subnet: "172.64.238.0/{{ radicale_prefix }}"
radicale_nginx_ip: 172.64.238.10
radicale_app_port: 5232
radicale_app_ip: 172.64.238.11
transmission_domain: 'transmission.{{ domain_name }}'
transmission_domain: "transmission.{{ domain_name }}"
transmission_prefix: 24
transmission_subnet: '172.16.238.0/{{ transmission_prefix }}'
transmission_subnet: "172.16.238.0/{{ transmission_prefix }}"
transmission_web_port: 9091
transmission_peer_port: 51413
transmission_nginx_ip: 172.16.238.10
jellyfin_domain: 'jellyfin.{{ domain_name }}'
jellyfin_domain: "jellyfin.{{ domain_name }}"
jellyfin_prefix: 24
jellyfin_subnet: '172.8.238.0/{{ jellyfin_prefix }}'
jellyfin_subnet: "172.8.238.0/{{ jellyfin_prefix }}"
jellyfin_web_port: 8096
jellyfin_nginx_ip: 172.8.238.10

49
host_vars/fudiggity/newsreader.yml
View file

@ -1,3 +1,4 @@
---
newsreader_app_name: newsreader
newsreader_app_repository: https://forgejo.fudiggity.nl/sonny/newsreader
newsreader_app_ref: 0.5.3
@ -8,32 +9,32 @@ newsreader_postgres_port: 5432
newsreader_postgres_db: newsreader
newsreader_postgres_user: newsreader
newsreader_postgres_password: !vault |
$ANSIBLE_VAULT;1.1;AES256
65613063373266623636626561646639393263313030386337633737636137363730353561356339
6433646638316465623338396637623732623563643561640a616639393639356533316431663665
30646637363364353062353338303331343234626138653037373661636234373238343264356265
6539643939376662650a613631636531383534666435383763613038393966633031353765323234
62613865373661333661373562366466333732663737643739663862376466646331386133326364
6638366665623036666634616131636634663933323136303334
$ANSIBLE_VAULT;1.1;AES256
65613063373266623636626561646639393263313030386337633737636137363730353561356339
6433646638316465623338396637623732623563643561640a616639393639356533316431663665
30646637363364353062353338303331343234626138653037373661636234373238343264356265
6539643939376662650a613631636531383534666435383763613038393966633031353765323234
62613865373661333661373562366466333732663737643739663862376466646331386133326364
6638366665623036666634616131636634663933323136303334
newsreader_django_settings_module: newsreader.conf.production
newsreader_django_secret_key: !vault |
$ANSIBLE_VAULT;1.1;AES256
65353236663439393937623930623830313365663766663966343661376662366131313838316536
3430633837666138633063333630373338366331653865320a646563663262656464636434323166
63616435356533643735343165363761336537616439303464353164633233626632666263636633
3237613866353131300a653366313635313365623539393438383434653134396137666533353063
63363335643135653535613231653434653566343964363431636264633963326239646633663031
38323266326165303064333666653630316634383864666232376165393362323261363833376334
323636376639353730366332323039633036
$ANSIBLE_VAULT;1.1;AES256
65353236663439393937623930623830313365663766663966343661376662366131313838316536
3430633837666138633063333630373338366331653865320a646563663262656464636434323166
63616435356533643735343165363761336537616439303464353164633233626632666263636633
3237613866353131300a653366313635313365623539393438383434653134396137666533353063
63363335643135653535613231653434653566343964363431636264633963326239646633663031
38323266326165303064333666653630316634383864666232376165393362323261363833376334
323636376639353730366332323039633036
newsreader_sentry_dsn: !vault |
$ANSIBLE_VAULT;1.1;AES256
33323865313232393535336363613261663030656465323734323266303837393561633435613736
3135353435633337346363316262373431393738303033390a333230343037656266366539323366
31373761356431666332396665393564656662396339393531326232366333323861376133653664
3739646664623230630a366239623838393766666237643663626261636237393839646136303931
66396263623432636430643839336463343438383461646165666131633762646438663532313633
66343562376632316665356163633064336530346463636432396537363938363062333861656362
63333832663737396330366430336632376638393632656565376436653839363634373437376261
36313337616533633239
$ANSIBLE_VAULT;1.1;AES256
33323865313232393535336363613261663030656465323734323266303837393561633435613736
3135353435633337346363316262373431393738303033390a333230343037656266366539323366
31373761356431666332396665393564656662396339393531326232366333323861376133653664
3739646664623230630a366239623838393766666237643663626261636237393839646136303931
66396263623432636430643839336463343438383461646165666131633762646438663532313633
66343562376632316665356163633064336530346463636432396537363938363062333861656362
63333832663737396330366430336632376638393632656565376436653839363634373437376261
36313337616533633239

5
host_vars/fudiggity/radicale.yml
View file

@ -1,5 +1,6 @@
radicale_app_dir: '/srv/docker/radicale'
radicale_collection_dir: '{{ radicale_app_dir }}/collections'
---
radicale_app_dir: "/srv/docker/radicale"
radicale_collection_dir: "{{ radicale_app_dir }}/collections"
radicale_version: 3.5.1
radicale_python_version: 3.13

17
host_vars/fudiggity/syncthing.yml
View file

@ -1,13 +1,14 @@
syncthing_app_dir: '/srv/docker/syncthing'
---
syncthing_app_dir: "/srv/docker/syncthing"
syncthing_config_version: 37
syncthing_api_key: !vault |
$ANSIBLE_VAULT;1.1;AES256
31663863326431623139663861316432656264646533323934393033386263613162303266613265
3239613930623264383161363664636232663764616138360a643239393735393862376133313062
63643434636462306663303434393837353230623830323065626432346336363332363063313533
6334633838636664610a323762373839393331653130393136356136303535393662643736643735
30316565373866326337383137633639636566623263333061633830366634666537633765343533
3736383135393238663963353131663733363962343163363539
$ANSIBLE_VAULT;1.1;AES256
31663863326431623139663861316432656264646533323934393033386263613162303266613265
3239613930623264383161363664636232663764616138360a643239393735393862376133313062
63643434636462306663303434393837353230623830323065626432346336363332363063313533
6334633838636664610a323762373839393331653130393136356136303535393662643736643735
30316565373866326337383137633639636566623263333061633830366634666537633765343533
3736383135393238663963353131663733363962343163363539
syncthing_devices:
- name: Desktop

1
host_vars/fudiggity/transip_client.yml
View file

@ -1,3 +1,4 @@
---
transip_client_repository: https://forgejo.fudiggity.nl/sonny/transip-client
transip_client_app_ref: 0.7.0

7
host_vars/fudiggity/transmission.yml
View file

@ -1,5 +1,6 @@
transmission_app_dir: '/srv/docker/tranmission'
transmission_download_dir: '/home/sonny/downloads'
transmission_incomplete_dir: '/home/sonny/downloads/incomplete_downloads'
---
transmission_app_dir: "/srv/docker/tranmission"
transmission_download_dir: "/home/sonny/downloads"
transmission_incomplete_dir: "/home/sonny/downloads/incomplete_downloads"
transmission_ratelimit_ratio: 2

41
host_vars/fudiggity/vpn.yml
View file

@ -1,31 +1,32 @@
vpn_server_public_key_path: '{{ vpn_config_dir }}/keys/public/server.pub'
vpn_server_public_key_source_path: 'files/wireguard/default/server.pub'
vpn_server_key_path: '{{ vpn_config_dir }}/keys/private/server.key'
---
vpn_server_public_key_path: "{{ vpn_config_dir }}/keys/public/server.pub"
vpn_server_public_key_source_path: "files/wireguard/default/server.pub"
vpn_server_key_path: "{{ vpn_config_dir }}/keys/private/server.key"
copy_vpn_configurations: false
vpn_peers:
laptop:
ip: '10.0.0.2'
public_key: 'EbWLf2+7x/RymeeiVuX72nZOBqPvdhu2V9pYhszpQEw='
preshared_key_path: '{{ vpn_config_dir }}/keys/private/preshared-laptop.psk'
preshared_key_source_path: 'files/wireguard/default/preshared-laptop.psk'
ip: "10.0.0.2"
public_key: "EbWLf2+7x/RymeeiVuX72nZOBqPvdhu2V9pYhszpQEw="
preshared_key_path: "{{ vpn_config_dir }}/keys/private/preshared-laptop.psk"
preshared_key_source_path: "files/wireguard/default/preshared-laptop.psk"
desktop:
ip: '10.0.0.3'
public_key: 'izHzmRwh2yzICps6pFI2Bg3TnmTD66/8uH4loJpkuD4='
preshared_key_path: '{{ vpn_config_dir }}/keys/private/preshared-desktop.psk'
preshared_key_source_path: 'files/wireguard/default/preshared-desktop.psk'
ip: "10.0.0.3"
public_key: "izHzmRwh2yzICps6pFI2Bg3TnmTD66/8uH4loJpkuD4="
preshared_key_path: "{{ vpn_config_dir }}/keys/private/preshared-desktop.psk"
preshared_key_source_path: "files/wireguard/default/preshared-desktop.psk"
# has extra key to generate mobile configuration file
mobile:
ip: '10.0.0.4'
ip: "10.0.0.4"
allowed_ips:
- '{{ vpn_subnet }}'
- '{{ transmission_subnet }}'
- '{{ syncthing_subnet }}'
- '{{ radicale_subnet }}'
public_key: '4aBHRiglCOE7qEDLqeFgQ5PMMsKczpPoL4bx4jyAEDY='
preshared_key_path: '{{ vpn_config_dir }}/keys/private/preshared-mobile.psk'
preshared_key_source_path: 'files/wireguard/default/preshared-mobile.psk'
private_key_source_path: 'files/wireguard/default/mobile.key'
- "{{ vpn_subnet }}"
- "{{ transmission_subnet }}"
- "{{ syncthing_subnet }}"
- "{{ radicale_subnet }}"
public_key: "4aBHRiglCOE7qEDLqeFgQ5PMMsKczpPoL4bx4jyAEDY="
preshared_key_path: "{{ vpn_config_dir }}/keys/private/preshared-mobile.psk"
preshared_key_source_path: "files/wireguard/default/preshared-mobile.psk"
private_key_source_path: "files/wireguard/default/mobile.key"

1
host_vars/fudiggity/vpn_media.yml
View file

@ -1,3 +1,4 @@
---
vpn_media_server_public_key_path: "{{ vpn_config_dir }}/keys/public/media_server.pub"
vpn_media_server_public_key_source_path: files/wireguard/media/server.pub
vpn_media_server_key_path: "{{ vpn_config_dir }}/keys/private/media_server.key"

57
host_vars/fudiggity/woodpecker_ci.yml
View file

@ -1,42 +1,43 @@
woodpecker_domain: 'woodpecker.fudiggity.nl'
---
woodpecker_domain: "woodpecker.fudiggity.nl"
woodpecker_image_tag: 'woodpeckerci/woodpecker-server:v2.8.0'
woodpecker_agent_tag: 'woodpeckerci/woodpecker-agent:v2.8.0'
woodpecker_image_tag: "woodpeckerci/woodpecker-server:v2.8.0"
woodpecker_agent_tag: "woodpeckerci/woodpecker-agent:v2.8.0"
woodpecker_postgres_user: woodpecker
woodpecker_postgres_name: woodpecker
woodpecker_app_dir: '/srv/docker/woodpecker'
woodpecker_app_dir: "/srv/docker/woodpecker"
woodpecker_forgejo_url: https://forgejo.fudiggity.nl
woodpecker_forgejo_client: f467d6ee-6095-4c90-9d14-674d60b07183
woodpecker_forgejo_secret: !vault |
$ANSIBLE_VAULT;1.1;AES256
31656532363665313866353961373862363031356437326234623030623235363039643663633662
6139656163646464613166653033663266313264646666620a336465306235336534633038333436
31306630323165646565333466383962626163303433393166326264633566623938366339326662
3261623736656631300a306161363061353463363361636433326431356532333761666637626163
35323065623661363638643062663066306134643035636561346663303138373634643466306161
36643037303932323032613432386230356139333963613038373531316536333461643166306261
613738363231323938653439373262663633
$ANSIBLE_VAULT;1.1;AES256
31656532363665313866353961373862363031356437326234623030623235363039643663633662
6139656163646464613166653033663266313264646666620a336465306235336534633038333436
31306630323165646565333466383962626163303433393166326264633566623938366339326662
3261623736656631300a306161363061353463363361636433326431356532333761666637626163
35323065623661363638643062663066306134643035636561346663303138373634643466306161
36643037303932323032613432386230356139333963613038373531316536333461643166306261
613738363231323938653439373262663633
woodpecker_agent_secret: !vault |
$ANSIBLE_VAULT;1.1;AES256
62306636643432613934633038643363373831346639383635356366333634376337303438386339
3264363234653362646364326263313465356261313738340a616133663630376166653364376363
34353165373663343236336330643365663830393836393264373032666536633733636161663661
3464333936613066630a636166343931306365646334373731383430646233316332313861663838
64663761303237613335613366343731326630386239633061633363666330663336623730303061
38376266636662363834663664643466643361363563396539316234623764363464303336663662
613362623365363563323934653562366138
$ANSIBLE_VAULT;1.1;AES256
62306636643432613934633038643363373831346639383635356366333634376337303438386339
3264363234653362646364326263313465356261313738340a616133663630376166653364376363
34353165373663343236336330643365663830393836393264373032666536633733636161663661
3464333936613066630a636166343931306365646334373731383430646233316332313861663838
64663761303237613335613366343731326630386239633061633363666330663336623730303061
38376266636662363834663664643466643361363563396539316234623764363464303336663662
613362623365363563323934653562366138
woodpecker_postgres_password: !vault |
$ANSIBLE_VAULT;1.1;AES256
33363337656661326362396537336638383036386631643935323136636661363865633763303138
6566643036333166326230366531633062306362636236630a626235323439663231363164366166
34633166313431623236323039643164396130653664393062306334653761663264666636316436
3963646536663863350a633836376238333939313363613932353039353465306330623965633161
37376336353664386166303865373939616434613966393163623536616432623035653235623763
35623063333766636131653065313064383163383261383866626232343335326566316431623233
326434353932373335366636613863666635
$ANSIBLE_VAULT;1.1;AES256
33363337656661326362396537336638383036386631643935323136636661363865633763303138
6566643036333166326230366531633062306362636236630a626235323439663231363164366166
34633166313431623236323039643164396130653664393062306334653761663264666636316436
3963646536663863350a633836376238333939313363613932353039353465306330623965633161
37376336353664386166303865373939616434613966393163623536616432623035653235623763
35623063333766636131653065313064383163383261383866626232343335326566316431623233
326434353932373335366636613863666635