bundlewrap/nodes/ovh/icinga2.py
Franziska Kunsmann 374ba3c16a
All checks were successful
bundlewrap/pipeline/head This commit looks good
ovh.icinga2: add bundle:iptables
2020-12-18 18:17:15 +01:00

89 lines
2.4 KiB
Python

nodes['ovh.icinga2'] = {
'bundles': {
'icinga2',
'iptables',
'php',
'postgresql',
'wireguard',
'zfs',
},
'groups': {
'debian-buster',
'webserver',
},
'metadata': {
'interfaces': {
'eth0': {
'ips': {
'51.195.44.8',
'2001:41d0:701:1100::2618/128'
},
'gateway4': '51.195.44.1',
'gateway6': '2001:41d0:701:1100::1'
},
},
'apt': {
'packages': {
'php-imagick': {},
},
},
'icinga2': {
'sipgate_user': vault.decrypt('encrypt$gAAAAABfujAmCUnicSAllq8MskXnPodKp3cGcfA6Abvef-rAYwB2CtCwt9oBRVKFskJPVArDaF1wfjNTfLwgX3gTP7xFutJ1HA=='),
'sipgate_pass': vault.decrypt('encrypt$gAAAAABfui_4B7UmOosI_gsQ-xvmd3X_BUDSl-G2KF_Tg8O6RpUvk0gHexOKsrTb6se1ipXsh7RC9pbZCKMtesW0C6j24LHXDKCOjkqI77oO0ZjnG6SUwfcJqg61biNiRlXy8z-9LCGA'),
},
'iptables': {
'custom_rules': {
# icinga2 api
'iptables -A INPUT -i wg0 -p tcp --dport 5665 -j ACCEPT',
},
},
'nginx': {
'vhosts': {
'icingaweb': {
'domain': 'icinga.kunsmann.eu',
'webroot': '/usr/share/icingaweb2/public',
'extras': True,
},
'icinga_statusmonitor': {
'domain': 'statusmonitor.icinga.kunsmann.eu',
'proxy': {
'/': {
'target': 'http://127.0.0.1:5000/',
}
},
}
},
},
'php': {
'version': '7.4',
'packages': {
'curl',
'gd',
'intl',
'json',
'ldap',
'opcache',
'pgsql',
'readline',
'xml',
},
},
'wireguard': {
'my_ip': '172.19.137.3/32',
'peers': {
'ovh.wireguard': {},
},
},
'zfs': {
'pools': {
'tank': {
'device': '/dev/sdb',
},
},
},
'vm': {
'cpu': 1,
'ram': 2,
},
},
}