bundlewrap/groups/locations.py
Franziska Kunsmann 14ec3c0ee2
gce: disable ipv6
Because this is "the cloud"™, gce does not support ipv6.
2023-07-13 20:48:04 +02:00

132 lines
2.9 KiB
Python

groups['gce'] = {
'bundles': {
'gce-workaround',
},
'member_patterns': {
r"gce\..*",
},
'metadata': {
'hosts': {
'entries': {
'169.254.169.254': {
'metadata.google.internal',
},
},
},
'location': 'gce',
'nameservers': {
'8.8.8.8',
'8.8.4.4',
},
'postfix': {
# It's fine to do this without authentificating to the relayhost.
# These Systems are not supposed to send mail anywhere else
# than our own domains.
'relayhost': '[rx300.kunbox.net]:2525',
},
'sysctl': {
'options': {
'net.ipv6.conf.all.disable_ipv6': '1',
'net.ipv6.conf.default.disable_ipv6': '1',
},
},
},
}
groups['htz'] = {
'subgroup_patterns': {
r'htz\-.+',
},
}
groups['htz-cloud'] = {
'member_patterns': {
r"htz\-cloud\..*",
},
'metadata': {
'apt': {
'packages': {
'cryptsetup-bin': {
'installed': False,
},
'cryptsetup-run': {
'installed': False,
},
'cryptsetup-initramfs': {
'installed': False,
},
},
},
'location': 'htz-cloud',
},
}
groups['htz-hel'] = {
'member_patterns': {
r'htz\-hel\..+',
},
'metadata': {
'location': 'htz-hel',
},
}
groups['home'] = {
'member_patterns': {
r"home\..*",
},
'bundles': {
'lldp',
},
'metadata': {
'location': 'home',
'icinga_options': {
'also_affected_by': {
'home.router',
},
'vars.notification.sms': False,
'show_on_statuspage': False,
},
'postfix': {
# It's fine to do this without authentificating to the relayhost.
# These Systems are not supposed to send mail anywhere else
# than our own domains.
'relayhost': '[rx300.kunbox.net]:2525',
},
},
}
groups['ovh'] = {
'member_patterns': {
r"ovh\..*",
},
'metadata': {
'location': 'ovh',
'postfix': {
'relayhost': '[rx300.kunbox.net]:2525',
},
'users': {
'debian': {
'delete': True,
},
},
},
}
groups['voc'] = {
'member_patterns': {
r"voc\..*",
},
'metadata': {
'apt': {
# Move patchday to somewhere where the possibility of
# clashing with actual events is less likely.
'unattended-upgrades': {
'day': 1,
},
},
'icinga_options': {
'show_on_statuspage': False,
},
'location': 'voc',
},
}