bundlewrap/nodes/htz-cloud/luther.py
Franziska Kunsmann 90a84fc9da
All checks were successful
bundlewrap/pipeline/head This commit looks good
htz-cloud: add wireguard node, add internal network to nodes
2021-04-24 08:53:20 +02:00

97 lines
2.8 KiB
Python

nodes['htz-cloud.luther'] = {
'bundles': {
'php',
'postgresql',
'zfs',
},
'groups': {
'debian-buster',
'webserver',
},
'metadata': {
'interfaces': {
'eth0': {
'ips': {
'195.201.136.20',
'2a01:4f8:c2c:fc3b::1/64',
},
'gateway4': '172.31.1.1',
'gateway6': 'fe80::1',
},
'ens10': {
'ips': {
'172.19.137.4/32',
},
'routes': {
# VPN
'172.19.136.0/22': {
'via': '172.19.137.1',
},
},
},
},
'apt': {
'packages': {
'php-apcu': {},
'php-uploadprogress': {},
},
},
'cron': {
'luther-ps': vault.decrypt('encrypt$gAAAAABfnUqTXXpUYCA2DxllTKgbKg6YguCBbguJ0rerFGi9UNxEuTO6eqReqraS9FzNmLl81S_20bYwXM5W8pNwV5I5i6BVz1M37TxdsMCAxMG-9G0ZHFXeE4K5a4MWxuyYkrVPtK_hNFOciwxDDwPYT8tH_Jahdqmr8fZcCcsICzsSOxycn89VEm2ODnfH24Azrj6mVq5cPMc_xkdWnn-dSMCvPXpjjg==').format_into('*/10 * * * * www-data /usr/bin/curl -s {}'),
},
'icinga_options': {
'vars.notification.sms': False,
},
'nginx': {
'vhosts': {
'luther-ps': {
'domain': 'luther-ps.kunsmann.eu',
'php': True,
'extras': True,
'website_check_path': '/user/login',
'website_check_string': 'Username',
},
},
},
'php': {
'version': '7.4',
'packages': {
'curl',
'gd',
'json',
'mbstring',
'pgsql',
'xml',
},
},
'postgresql': {
'users': {
'luther-ps': {
# can't use password_for() here, application is unmanaged
'password': vault.decrypt('encrypt$gAAAAABfnSxJtRTeWRTO_ubSqpBbH8L-khPamKtSiUYbuMIoyJnoF_oSfUlMpTpQsmdDh61F3JQEH0xfYOkzkiCGZONRHyYdqkTjWV4Ku1Avdb0SL74VG6NihUJOpZlhOKnuniopCwuW'),
},
},
'databases': {
'luther-ps': {
'owner': 'luther-ps',
},
},
},
'zfs': {
'pools': {
'tank': {
'device': '/dev/sdb',
},
},
'datasets': {
'tank/luther-website': {
'mountpoint': '/var/www/luther-ps',
},
},
},
'vm': {
'cpu': 1,
'ram': 2,
},
},
}