From a971bf5d3bdab1102d3b356547fdefefd85045c8 Mon Sep 17 00:00:00 2001 From: Franziska Kunsmann Date: Sun, 2 May 2021 20:52:19 +0200 Subject: [PATCH] nodes: add work laptop --- nodes/kunsi-seibert-x1.py | 79 +++++++++++++++++++++++++++++++++++++++ 1 file changed, 79 insertions(+) create mode 100644 nodes/kunsi-seibert-x1.py diff --git a/nodes/kunsi-seibert-x1.py b/nodes/kunsi-seibert-x1.py new file mode 100644 index 0000000..1b58bf2 --- /dev/null +++ b/nodes/kunsi-seibert-x1.py @@ -0,0 +1,79 @@ +# work laptop. Only apply interactively. + +nodes['kunsi-seibert-x1'] = { + 'hostname': '', + 'dummy': True, + 'bundles': { + 'basic', + 'lldp', + 'nfs-client', + 'pacman', + 'openssh', + 'sudo', + 'systemd', + 'systemd-networkd', + 'telegraf', + 'users', + }, + 'groups': set(), + 'metadata': { + 'timezone': 'Europe/Berlin', + 'icinga_options': { + 'exclude_from_monitoring': True, + }, + 'interfaces': { + 'enp0s31f6': { + 'dhcp': True, + 'use_dhcp_domains': True, + 'send_hostname': False, + }, + # there is also wlp0s20f3, but that's managed by netctl + }, + 'locale': { + 'default': 'en_DK.UTF-8', + }, + 'lldp': { + 'hostname': 'fkunsmann-seibertmedia', + }, + 'nfs-client': { + 'mounts': { + 'nas-storage': { + 'mountpoint': '/mnt/nas', + 'serverpath': '172.19.138.20:/storage/nas', + 'mount_options': { + 'retry=0', + 'ro', + }, + }, + }, + }, + 'pacman': { + 'packages': { + 'fish': {}, + }, + }, + 'systemd-networkd': { + 'enable-resolved': True, + }, + 'telegraf': { + 'influxdb_url': 'https://influxdb.kunsmann.eu/', + 'influxdb_token': vault.decrypt('encrypt$gAAAAABgg9Ag632Xyuc6SWXaR1uH2tLOChmVKAoBIikhjntSSD2qJFL_eouVQGXCLH2HEuSbSdEXcTPn2qmhOiA9jmFdoDSbVbQUsp0EID1wLsWYG_Um2KOxZSF-tn9eDZlgShQYySjzO3nQRmdlJpVLUnGHsiwv_sHD2FstXGpfzTPZq5_egUqEc0K2X-aN2J6BTYc2fZAN'), + 'influxdb_org': vault.decrypt('encrypt$gAAAAABgg9hyjz4XtvG8NBw9uYxiumS3v7YKIrtc9tTTABg1f9R22gzn55q8ULP9X3wlsPMUQs_DH7CgGv9neYmvVAriRoyd8g=='), + 'influxdb_bucket': vault.decrypt('encrypt$gAAAAABgg9iMnq0nKpODMiMN4NtUw231iqpbyDXV-O8epOAGDSL4jcf3CaSa2bLZzH2fJFaKWjW-dpVd384x6KqSQU19XpfsWA=='), + }, + 'users': { + 'kunsi': { + 'password': vault.decrypt('encrypt$gAAAAABgLmmuQGRUStrQawoPee-758emIYn2u8-8ebrgzNAFSp7ifeFDdXXvs-zL3QogwNYlCtBHboH2xfy1rSj6OF5bbNO-tg=='), + 'shell': '/usr/bin/fish', + 'ssh_pubkey': { + # work key + 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICYst1HK+gJYhNxzqJGnz4iB73pa89Xz2yH+8wufOcsA', + }, + }, + 'sophie': { + 'delete': True, + }, + }, + }, + 'os': 'arch', +}