2021-02-20 14:56:54 +00:00
|
|
|
# sophie's miniserver
|
|
|
|
|
|
|
|
nodes['htz-cloud.miniserver'] = {
|
2021-05-14 18:07:55 +00:00
|
|
|
'bundles': {
|
|
|
|
'element-web',
|
2021-09-11 17:47:55 +00:00
|
|
|
'hedgedoc',
|
2021-07-04 14:36:43 +00:00
|
|
|
'matrix-dimension',
|
2021-05-14 18:07:55 +00:00
|
|
|
'matrix-media-repo',
|
|
|
|
'matrix-synapse',
|
|
|
|
'nodejs',
|
2022-10-19 13:24:39 +00:00
|
|
|
'ntfy',
|
2021-05-14 18:07:55 +00:00
|
|
|
'mautrix-telegram',
|
|
|
|
'postgresql',
|
2022-10-23 13:13:13 +00:00
|
|
|
'zfs',
|
2021-05-14 18:07:55 +00:00
|
|
|
},
|
2021-02-20 14:56:54 +00:00
|
|
|
'groups': {
|
2022-02-27 11:44:07 +00:00
|
|
|
'debian-bullseye',
|
2021-02-20 14:56:54 +00:00
|
|
|
'webserver',
|
|
|
|
},
|
|
|
|
'metadata': {
|
|
|
|
'interfaces': {
|
|
|
|
'eth0': {
|
|
|
|
'ips': {
|
|
|
|
'157.90.20.62',
|
|
|
|
'2a01:4f8:c2c:840f::1/64',
|
|
|
|
},
|
|
|
|
'gateway4': '172.31.1.1',
|
|
|
|
'gateway6': 'fe80::1',
|
|
|
|
},
|
|
|
|
},
|
|
|
|
'apt': {
|
|
|
|
'packages': {
|
2021-02-20 17:12:17 +00:00
|
|
|
'mosh': {},
|
2021-02-20 14:56:54 +00:00
|
|
|
'weechat': {},
|
|
|
|
'weechat-core': {},
|
|
|
|
'weechat-curses': {},
|
|
|
|
'weechat-perl': {},
|
|
|
|
'weechat-plugins': {},
|
|
|
|
'weechat-python': {},
|
|
|
|
'weechat-ruby': {},
|
|
|
|
},
|
2021-02-20 17:12:17 +00:00
|
|
|
'repos': {
|
|
|
|
'weechat': {
|
|
|
|
'items': {
|
|
|
|
'deb https://weechat.org/debian {os_release} main',
|
|
|
|
},
|
|
|
|
},
|
|
|
|
},
|
2021-02-20 14:56:54 +00:00
|
|
|
},
|
2021-05-16 17:54:18 +00:00
|
|
|
'backup-client': {
|
|
|
|
'pre-hooks': {
|
|
|
|
'sophie-weechat': \
|
|
|
|
'echo \'core.weechat */layout store\' >> /home/sophie/.weechat/weechat_fifo\n' \
|
|
|
|
'echo \'core.weechat */save\' >> /home/sophie/.weechat/weechat_fifo\n',
|
|
|
|
},
|
2022-01-04 16:29:27 +00:00
|
|
|
'target': "htz-hel.backup-sophie",
|
2021-05-16 17:54:18 +00:00
|
|
|
},
|
2021-02-20 14:56:54 +00:00
|
|
|
'backups': {
|
2021-05-16 17:54:18 +00:00
|
|
|
'paths': {
|
|
|
|
'/home/sophie/.weechat',
|
|
|
|
},
|
2021-02-20 14:56:54 +00:00
|
|
|
},
|
2021-05-14 18:07:55 +00:00
|
|
|
'element-web': {
|
|
|
|
'url': 'chat.sophies-kitchen.eu',
|
2023-04-01 05:08:32 +00:00
|
|
|
'version': 'v1.11.28',
|
2021-05-14 18:07:55 +00:00
|
|
|
'config': {
|
|
|
|
'default_server_config': {
|
|
|
|
'm.homeserver': {
|
|
|
|
'base_url': 'https://matrix.sophies-kitchen.eu',
|
|
|
|
'server_name': 'sophies-kitchen.eu',
|
|
|
|
},
|
|
|
|
},
|
|
|
|
'brand': 'sophies-kitchen.eu',
|
|
|
|
'showLabsSettings': True,
|
2021-07-04 14:36:43 +00:00
|
|
|
'integrations_ui_url': 'https://dimension.sophies-kitchen.eu/riot',
|
|
|
|
'integrations_rest_url': 'https://dimension.sophies-kitchen.eu/api/v1/scalar',
|
2021-05-21 21:37:11 +00:00
|
|
|
'integrations_widgets_urls': {
|
2021-07-04 14:36:43 +00:00
|
|
|
'https://dimension.sophies-kitchen.eu/widgets'
|
2021-05-21 21:37:11 +00:00
|
|
|
},
|
2021-05-14 18:07:55 +00:00
|
|
|
'default_theme': 'dark',
|
|
|
|
'defaultCountryCode': 'DE',
|
|
|
|
'jitsi': {
|
|
|
|
'preferredDomain': 'meet.ffmuc.net',
|
|
|
|
},
|
2022-03-30 20:08:25 +00:00
|
|
|
'map_style_url': "https://api.maptiler.com/maps/openstreetmap/style.json?key=fU3vlMsMn4Jb6dnEIFsx"
|
2021-05-14 18:07:55 +00:00
|
|
|
},
|
|
|
|
},
|
2021-09-11 17:47:55 +00:00
|
|
|
'hedgedoc': {
|
2023-03-03 20:23:02 +00:00
|
|
|
'version': '1.9.7',
|
2021-09-11 17:47:55 +00:00
|
|
|
'config': {
|
|
|
|
'production': {
|
2021-10-26 22:08:27 +00:00
|
|
|
'allowAnonymousEdits': True,
|
2021-09-11 17:47:55 +00:00
|
|
|
'domain': 'pad.sophies-kitchen.eu',
|
|
|
|
},
|
|
|
|
},
|
|
|
|
},
|
2021-02-20 16:32:09 +00:00
|
|
|
'icinga_options': {
|
2021-08-21 05:54:40 +00:00
|
|
|
'pretty_name': 'sophies-kitchen.eu',
|
2021-04-02 11:40:10 +00:00
|
|
|
'vars.notification.sms': False,
|
2021-02-20 16:32:09 +00:00
|
|
|
},
|
2021-02-20 15:50:42 +00:00
|
|
|
'letsencrypt': {
|
|
|
|
'concat_and_deploy': {
|
|
|
|
'sophie-weechat': {
|
|
|
|
'match_domain': 'i.sophies-kitchen.eu',
|
|
|
|
'target': '/home/sophie/.weechat/ssl/relay.pem',
|
|
|
|
'chown': 'sophie:sophie',
|
|
|
|
'chmod': '0440',
|
|
|
|
'commands': [
|
|
|
|
'echo \'core.weechat */relay sslcertkey\' >> /home/sophie/.weechat/weechat_fifo'
|
|
|
|
],
|
|
|
|
},
|
|
|
|
},
|
|
|
|
'domains': {
|
|
|
|
'i.sophies-kitchen.eu': set(),
|
2021-03-13 12:31:28 +00:00
|
|
|
'webdump.sophies-kitchen.eu': set(),
|
2021-05-14 18:07:55 +00:00
|
|
|
'matrix.sophies-kitchen.eu': {
|
|
|
|
'sophies-kitchen.eu',
|
|
|
|
},
|
|
|
|
},
|
|
|
|
},
|
2021-07-04 14:36:43 +00:00
|
|
|
'matrix-dimension': {
|
|
|
|
'url': 'dimension.sophies-kitchen.eu',
|
2021-11-27 14:21:29 +00:00
|
|
|
'version': 'c6d047c', # XXX master is broken as of 2021-11-27
|
2021-07-04 18:44:17 +00:00
|
|
|
'homeserver': {
|
2021-07-04 14:36:43 +00:00
|
|
|
'name': 'sophies-kitchen.eu',
|
2021-07-04 18:58:56 +00:00
|
|
|
'clientServerUrl': 'https://matrix.sophies-kitchen.eu',
|
2021-07-04 14:36:43 +00:00
|
|
|
'accessToken': vault.decrypt('encrypt$gAAAAABg4btB0KGk068ahGZzR0w_Lm1bj1wUbB2WfNNs2bp3PwM4Ftp6MjQnrF-CejZfrF0NjPJw9Z4MrgileHP0sVw04mvgKSHfTf8gv4kTB6WuCIxHeMWHUDx00LTWL73fSlhCK0o1'),
|
|
|
|
},
|
|
|
|
'admins': [
|
|
|
|
'@sophie:sophies-kitchen.eu',
|
|
|
|
],
|
|
|
|
'telegram': {
|
|
|
|
'botToken': vault.decrypt('encrypt$gAAAAABg4bcQVzBF_iXdDtjRQD-O37GHdbHwWXyhCLPOuJLbv3ezUeXKR203hkCXkjfItSHi4NiTEgQPadDZTRkavaRpvAoaQV1a4srCS_Y-NU4RiOmkrVFJ_Xhw6UZvwjQUQ0QPOx9t'),
|
|
|
|
},
|
|
|
|
},
|
2021-05-14 18:07:55 +00:00
|
|
|
'matrix-media-repo': {
|
2023-02-17 04:02:40 +00:00
|
|
|
'version': 'v1.2.13',
|
|
|
|
'sha1': '0915bdf7c461368859180419d1f66717969cbe32',
|
2021-05-14 18:07:55 +00:00
|
|
|
'homeservers': {
|
|
|
|
'sophies-kitchen.eu': {
|
|
|
|
'domain': 'http://[::1]:20080/',
|
|
|
|
'api': 'synapse',
|
|
|
|
},
|
|
|
|
},
|
|
|
|
'admins': {
|
|
|
|
'@sophie:sophies-kitchen.eu',
|
|
|
|
},
|
|
|
|
'upload_max_mb': 500,
|
|
|
|
},
|
|
|
|
'matrix-synapse': {
|
|
|
|
'server_name': 'sophies-kitchen.eu',
|
|
|
|
'baseurl': 'matrix.sophies-kitchen.eu',
|
|
|
|
'admin_contact': 'mailto:foobar@sophies-kitchen.eu',
|
|
|
|
'trusted_key_servers': {
|
|
|
|
'matrix.org',
|
|
|
|
},
|
|
|
|
},
|
|
|
|
'mautrix-telegram': {
|
2023-03-03 20:23:02 +00:00
|
|
|
'version': 'v0.13.0',
|
2021-05-14 18:07:55 +00:00
|
|
|
'homeserver': {
|
|
|
|
'domain': 'sophies-kitchen.eu',
|
|
|
|
'url': 'https://matrix.sophies-kitchen.eu',
|
|
|
|
},
|
|
|
|
'provisioning': {
|
|
|
|
'enabled': False,
|
|
|
|
'shared_secret': '""',
|
|
|
|
},
|
|
|
|
'permissions': {
|
|
|
|
'sophies-kitchen.eu': 'full',
|
|
|
|
"'@sophie:sophies-kitchen.eu'": 'admin',
|
|
|
|
},
|
|
|
|
'telegram': {
|
|
|
|
'api_id': vault.decrypt('encrypt$gAAAAABgnqdXhCTwtCXJhSaCZsiNfHPtjwlYtV1sUAux7JZdejN3xItU9RJLeNu4gUniv36XbBoxKwVtqqyV3RcAs-PgumcfYQ=='),
|
|
|
|
'api_token': vault.decrypt('encrypt$gAAAAABgnqd5IdpYRmW-C4ONBSXQfiJrpTVQX0rP0eKoDnLnVTLg-5olSjcw2gVvEKWLnsGEZIgVcG7yEs-sqYRxeiQLFFpSn-Z4We0mhj0CUeFoD-eXJsp-bAgLv9PJoMv5Gjb8r9i6'),
|
|
|
|
'bot_token': '""',
|
2021-02-20 15:50:42 +00:00
|
|
|
},
|
|
|
|
},
|
2021-07-04 16:48:22 +00:00
|
|
|
'nameservers': {
|
|
|
|
'213.133.98.98',
|
|
|
|
'213.133.99.99',
|
|
|
|
'213.133.100.100',
|
|
|
|
'2a01:4f8:0:1::add:1010',
|
|
|
|
'2a01:4f8:0:1::add:9999',
|
|
|
|
'2a01:4f8:0:1::add:9898',
|
|
|
|
},
|
2021-06-03 11:59:15 +00:00
|
|
|
'nftables': {
|
|
|
|
'rules': {
|
2021-12-14 13:03:13 +00:00
|
|
|
'50-sophie-weechat': [
|
|
|
|
'inet filter input udp dport { 60000-61000 } accept',
|
|
|
|
'inet filter input tcp dport 9001 accept',
|
|
|
|
],
|
2021-06-03 11:59:15 +00:00
|
|
|
},
|
|
|
|
},
|
2021-02-20 14:56:54 +00:00
|
|
|
'nginx': {
|
|
|
|
'vhosts': {
|
2021-07-04 18:58:56 +00:00
|
|
|
'matrix-dimension': {
|
2021-07-04 14:36:43 +00:00
|
|
|
'extras': True,
|
|
|
|
},
|
2021-05-14 18:07:55 +00:00
|
|
|
'sophies-kitchen.eu': {
|
|
|
|
'webroot': '/var/www/sophies-kitchen.eu/_site/',
|
|
|
|
'extras': True,
|
|
|
|
},
|
2021-07-17 10:38:04 +00:00
|
|
|
'matrix-synapse': {
|
|
|
|
'domain': 'matrix.sophies-kitchen.eu',
|
2021-05-14 18:07:55 +00:00
|
|
|
},
|
2021-03-13 12:31:28 +00:00
|
|
|
'webdump.sophies-kitchen.eu': {
|
2021-02-20 16:32:09 +00:00
|
|
|
'webroot_config': {
|
|
|
|
'owner': 'sophie',
|
|
|
|
'group': 'sophie',
|
|
|
|
'mode': '0755',
|
|
|
|
},
|
2021-03-13 12:31:28 +00:00
|
|
|
'extras': True,
|
2021-02-20 14:56:54 +00:00
|
|
|
},
|
2021-09-02 12:24:49 +00:00
|
|
|
'recipes.sophies-kitchen.eu': {
|
|
|
|
'webroot_config': {
|
|
|
|
'owner': 'sophie',
|
|
|
|
'group': 'sophie',
|
|
|
|
'mode': '0755',
|
|
|
|
},
|
|
|
|
},
|
2021-02-20 14:56:54 +00:00
|
|
|
},
|
|
|
|
},
|
2022-11-16 18:19:41 +00:00
|
|
|
'nodejs': {
|
|
|
|
'version': 16,
|
|
|
|
},
|
2022-10-19 13:24:39 +00:00
|
|
|
'ntfy': {
|
2022-10-19 13:38:10 +00:00
|
|
|
'domain': 'ntfy.sophies-kitchen.eu',
|
2023-04-09 10:24:23 +00:00
|
|
|
'allow_unauthorized_write': True,
|
2022-10-19 13:24:39 +00:00
|
|
|
},
|
2022-02-27 11:44:07 +00:00
|
|
|
'postgresql': {
|
|
|
|
'version': '11',
|
|
|
|
},
|
2021-06-04 05:27:49 +00:00
|
|
|
'sysctl': {
|
|
|
|
'options': {
|
|
|
|
# XXX find out if this is really needed
|
|
|
|
'net.ipv4.ip_forward': '1',
|
|
|
|
'net.ipv6.conf.all.forwarding': '1',
|
|
|
|
},
|
|
|
|
},
|
2021-02-20 14:56:54 +00:00
|
|
|
'vm': {
|
|
|
|
'cpu': 2,
|
|
|
|
'ram': 4,
|
2021-03-11 21:27:30 +00:00
|
|
|
},
|
|
|
|
'users': {
|
|
|
|
'sophie': {
|
2021-07-17 09:33:43 +00:00
|
|
|
'enable_linger': True,
|
2021-03-11 21:27:30 +00:00
|
|
|
'ssh_pubkey': [
|
|
|
|
"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDILcYrMQNRVXAm5L+7No1ZumqfCyRc1QZmTY3O7Q8hsE4+fCAvwsWm2aSMfLL3NnIl8Nm1Rixzic5jdYKYNIY3SlX1wvTB+MhGb2eyVSd7c/Y98aCLSlDkQ2sebjpdA1FoJOeGD3qxqDwj0+KckXU2ZaSSQY7CxVsjH65UxCHqVAg+6uLdNbj7j850s1B9NXVXef+sBQ5jUngXxnqQWwNh2Mn8auwumkeEG4SYf96wyFkLvmBitOng/GyLWl9YPnXXHHDnatcVipy7y34qw4CQ4P84anecbA+Bqr9IcxBW6qYmYgRKEnAcmEfjQd+BI1gCLB1BBEmb/qp+mVLd4tOh sophie@carbon"
|
|
|
|
],
|
|
|
|
},
|
|
|
|
},
|
2022-10-23 13:13:13 +00:00
|
|
|
'zfs': {
|
|
|
|
'pools': {
|
|
|
|
'tank': {
|
|
|
|
'when_creating': {
|
|
|
|
'config': [{
|
|
|
|
'devices': {
|
|
|
|
'/dev/disk/by-id/scsi-0HC_Volume_23952298',
|
|
|
|
},
|
|
|
|
}]
|
|
|
|
},
|
|
|
|
},
|
|
|
|
},
|
|
|
|
},
|
2021-02-20 14:56:54 +00:00
|
|
|
},
|
|
|
|
}
|