nodes['htz-hel.backup-sophie'] = { 'hostname': 'backup.sophies-kitchen.eu', 'bundles': { 'backup-server', 'zfs', }, 'groups': { 'debian-bullseye', }, 'metadata': { 'apt': { 'packages': { 'mosh': {}, 'borgbackup': {}, }, 'unattended-upgrades': { # requires manual apply after reboot to unlock dm-crypt # devices 'reboot_enabled': False, }, }, 'backups': { 'exclude_from_backups': True, }, 'interfaces': { 'ens18': { 'ips': { '2a01:4f9:6b:2d99::c0c0:a/64', }, 'gateway6': '2a01:4f9:6b:2d99::2', }, }, 'icinga_options': { 'pretty_name': 'backup.sophies-kitchen.eu', }, 'vm': { 'cpu': 4, 'ram': 8, }, 'backup-server': { 'zfs-base': 'tank/backups', }, 'nftables': { 'input': { '50-sophie-misc': [ 'udp dport { 60000-61000 } accept', 'tcp dport 5201 accept', ], }, }, 'users': { 'sophie': { 'sudo_commands': { 'ALL', }, }, }, 'zfs': { 'datasets': { 'tank/ejgwthink': { 'mountpoint': '/mnt/backups/ejgwthink', }, 'tank/ejgwdesk': { 'mountpoint': '/mnt/backups/ejgwdesk', }, 'tank/moto-sophie': { 'mountpoint': '/mnt/backups/moto-sophie', }, 'tank/backups': {}, }, 'pools': { 'tank': { 'when_creating': { 'config': [{ 'devices': {'/dev/sdb'}, }], }, }, }, }, }, }