bundlewrap/nodes/kunsi-t470.py

82 lines
2.3 KiB
Python

# My own laptop.
nodes['kunsi-t470'] = {
'hostname': 'localhost',
'bundles': {
'lldp',
'nfs-client',
},
'groups': {
'arch',
},
'metadata': {
'timezone': 'Europe/Berlin',
'icinga_options': {
'exclude_from_monitoring': True,
},
'hosts': {
'entries': {
# XXX maybe outdated, verify on next train trip
'10.101.64.10': {
'www.wifionice.de',
'wifionice.de',
},
},
},
'interfaces': {
'enp0s31f6': {
'dhcp': True,
'use_dhcp_domains': True,
'send_hostname': False,
},
# there is also wlp4s0, but that's managed by netctl
},
'firewall': {
'port_rules': {
# For the occasional file-share using `python -m http.server`
'8000': {'*'},
},
},
'locale': {
'default': 'en_DK.UTF-8',
},
'nfs-client': {
'mounts': {
'nas-scansnap': {
'mountpoint': '/mnt/scansnap',
'serverpath': '172.19.138.20:/srv/scansnap',
'mount_options': {
'retry=0',
'rw',
},
},
'nas-storage': {
'mountpoint': '/mnt/nas',
'serverpath': '172.19.138.20:/storage/nas',
'mount_options': {
'retry=0',
'ro',
},
},
},
},
'pacman': {
'install_gui': True,
},
'systemd-networkd': {
'enable-resolved': True,
},
'users': {
'kunsi': {
'password': vault.decrypt('encrypt$gAAAAABgLmmuQGRUStrQawoPee-758emIYn2u8-8ebrgzNAFSp7ifeFDdXXvs-zL3QogwNYlCtBHboH2xfy1rSj6OF5bbNO-tg=='),
'shell': '/usr/bin/fish',
# FIXME move qemu VMs out of /home/kunsi
'home-mode': '0755',
},
'sophie': {
'delete': True,
},
},
},
'os': 'arch',
}