# sophie's miniserver # mostly unmanaged nodes['htz-cloud.miniserver'] = { 'bundles': { 'element-web', 'matrix-media-repo', 'matrix-synapse', 'nodejs', 'mautrix-telegram', 'postgresql', }, 'groups': { 'debian-buster', 'webserver', }, 'metadata': { 'interfaces': { 'eth0': { 'ips': { '157.90.20.62', '2a01:4f8:c2c:840f::1/64', }, 'gateway4': '172.31.1.1', 'gateway6': 'fe80::1', }, }, 'apt': { 'packages': { 'mosh': {}, 'weechat': {}, 'weechat-core': {}, 'weechat-curses': {}, 'weechat-perl': {}, 'weechat-plugins': {}, 'weechat-python': {}, 'weechat-ruby': {}, }, 'repos': { 'weechat': { 'items': { 'deb https://weechat.org/debian {os_release} main', }, }, }, }, 'backup-client': { 'pre-hooks': { 'sophie-weechat': \ 'echo \'core.weechat */layout store\' >> /home/sophie/.weechat/weechat_fifo\n' \ 'echo \'core.weechat */save\' >> /home/sophie/.weechat/weechat_fifo\n', }, }, 'backups': { 'paths': { '/home/sophie/.weechat', }, }, 'element-web': { 'url': 'chat.sophies-kitchen.eu', 'version': 'v1.7.28', 'config': { 'default_server_config': { 'm.homeserver': { 'base_url': 'https://matrix.sophies-kitchen.eu', 'server_name': 'sophies-kitchen.eu', }, }, 'brand': 'sophies-kitchen.eu', 'showLabsSettings': True, #'integrations_ui_url': 'https://dimension.sophies-kitchen.eu/riot', #'integrations_rest_url': 'https://dimension.sophies-kitchen.eu/api/v1/scalar', #'integrations_widgets_urls': { # 'https://dimension.sophies-kitchen.eu/widgets' #}, 'default_theme': 'dark', 'defaultCountryCode': 'DE', 'jitsi': { 'preferredDomain': 'meet.ffmuc.net', }, }, }, 'icinga_options': { 'vars.notification.sms': False, }, 'iptables': { 'custom_rules': [ 'iptables_both -A INPUT -p udp --dport 60000:61000 -j ACCEPT', # mosh 'iptables_both -A INPUT -p tcp --dport 9001 -j ACCEPT', # weechat ], }, 'letsencrypt': { 'concat_and_deploy': { 'sophie-weechat': { 'match_domain': 'i.sophies-kitchen.eu', 'target': '/home/sophie/.weechat/ssl/relay.pem', 'chown': 'sophie:sophie', 'chmod': '0440', 'commands': [ 'echo \'core.weechat */relay sslcertkey\' >> /home/sophie/.weechat/weechat_fifo' ], }, }, 'domains': { 'i.sophies-kitchen.eu': set(), 'webdump.sophies-kitchen.eu': set(), 'matrix.sophies-kitchen.eu': { 'sophies-kitchen.eu', }, }, }, 'matrix-media-repo': { 'version': 'v1.2.8', 'homeservers': { 'sophies-kitchen.eu': { 'domain': 'http://[::1]:20080/', 'api': 'synapse', }, }, 'admins': { '@sophie:sophies-kitchen.eu', }, 'upload_max_mb': 500, }, 'matrix-synapse': { 'server_name': 'sophies-kitchen.eu', 'baseurl': 'matrix.sophies-kitchen.eu', 'admin_contact': 'mailto:foobar@sophies-kitchen.eu', 'trusted_key_servers': { 'matrix.org', }, }, 'mautrix-telegram': { 'version': 'v0.9.0', 'homeserver': { 'domain': 'sophies-kitchen.eu', 'url': 'https://matrix.sophies-kitchen.eu', }, 'provisioning': { 'enabled': False, 'shared_secret': '""', }, 'permissions': { 'sophies-kitchen.eu': 'full', "'@sophie:sophies-kitchen.eu'": 'admin', }, 'telegram': { 'api_id': vault.decrypt('encrypt$gAAAAABgnqdXhCTwtCXJhSaCZsiNfHPtjwlYtV1sUAux7JZdejN3xItU9RJLeNu4gUniv36XbBoxKwVtqqyV3RcAs-PgumcfYQ=='), 'api_token': vault.decrypt('encrypt$gAAAAABgnqd5IdpYRmW-C4ONBSXQfiJrpTVQX0rP0eKoDnLnVTLg-5olSjcw2gVvEKWLnsGEZIgVcG7yEs-sqYRxeiQLFFpSn-Z4We0mhj0CUeFoD-eXJsp-bAgLv9PJoMv5Gjb8r9i6'), 'bot_token': '""', }, }, 'nginx': { 'vhosts': { #'dimension.sophies-kitchen.eu': { # 'extras': True, # 'do_not_set_content_security_headers': True, # 'max_body_size': '50M', # 'proxy': { # '/': { # 'target': 'http://127.0.0.1:8184', # }, # }, #}, 'sophies-kitchen.eu': { 'webroot': '/var/www/sophies-kitchen.eu/_site/', 'extras': True, }, 'matrix.sophies-kitchen.eu': { 'extras': True, }, 'webdump.sophies-kitchen.eu': { 'webroot_config': { 'owner': 'sophie', 'group': 'sophie', 'mode': '0755', }, 'extras': True, }, }, }, 'vm': { 'cpu': 2, 'ram': 4, }, 'users': { 'sophie': { 'ssh_pubkey': [ "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDILcYrMQNRVXAm5L+7No1ZumqfCyRc1QZmTY3O7Q8hsE4+fCAvwsWm2aSMfLL3NnIl8Nm1Rixzic5jdYKYNIY3SlX1wvTB+MhGb2eyVSd7c/Y98aCLSlDkQ2sebjpdA1FoJOeGD3qxqDwj0+KckXU2ZaSSQY7CxVsjH65UxCHqVAg+6uLdNbj7j850s1B9NXVXef+sBQ5jUngXxnqQWwNh2Mn8auwumkeEG4SYf96wyFkLvmBitOng/GyLWl9YPnXXHHDnatcVipy7y34qw4CQ4P84anecbA+Bqr9IcxBW6qYmYgRKEnAcmEfjQd+BI1gCLB1BBEmb/qp+mVLd4tOh sophie@carbon" ], }, }, }, }