56 lines
1.8 KiB
Python
56 lines
1.8 KiB
Python
nodes['home.router'] = {
|
|
'hostname': '172.19.138.10',
|
|
'bundles': {
|
|
'iptables',
|
|
'pppd',
|
|
},
|
|
'groups': set(),
|
|
'metadata': {
|
|
'interfaces': {
|
|
'enp1s0.23': {
|
|
'ips': {
|
|
'172.19.139.10/24',
|
|
},
|
|
},
|
|
'enp1s0.42': {
|
|
'ips': {
|
|
'172.19.138.10/24',
|
|
},
|
|
'gateway4': '172.19.138.1',
|
|
},
|
|
'enp1s0.100': {
|
|
'ignore': True,
|
|
},
|
|
},
|
|
'backups': {
|
|
'exclude_from_backups': True,
|
|
},
|
|
'cron': {
|
|
# Our internet provider resets the connection if you're
|
|
# connected longer than 24 hours. We install this cronjob
|
|
# to make sure we don't get disconnected randomly during the
|
|
# day.
|
|
'restart_pppd': '23 2 * * * root systemctl restart pppoe',
|
|
},
|
|
'iptables': {
|
|
'custom_rules': [
|
|
'iptables_both -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT',
|
|
'iptables_both -A FORWARD -i enp1s0.23 -o enp1s0.42 -j REJECT',
|
|
'iptables_both -A FORWARD -i enp1s0.23 -j ACCEPT',
|
|
'iptables_both -A FORWARD -i enp1s0.42 -j ACCEPT',
|
|
],
|
|
},
|
|
'pppd': {
|
|
'username': vault.decrypt('encrypt$gAAAAABfruZ5AZbgJ3mfMLWqIMx8o4bBRMJsDPD1jElh-vWN_gnhiuZVjrQ1-7Y6zDXNkxXiyhx8rxc2enmvo26axd7EBI8FqknCptXAPruVtDZrBCis4TE='),
|
|
'password': vault.decrypt('encrypt$gAAAAABfruaXEDkaFksFMU8g97ydWyJF8p2KcSDJJBlzaOLDsLL6oCDYjG1kMPVESOzqjn8ThtSht1uZDuMCstA-sATmLS-EWQ=='),
|
|
'interface': 'enp1s0.100',
|
|
},
|
|
'vm': {
|
|
'cpu': 2,
|
|
'ram': 2,
|
|
},
|
|
},
|
|
'os': 'debian',
|
|
'os_version': (10,),
|
|
}
|