🚀: move inventory to its own directory

inventory/group_vars/all/python.yml

@@ -0,0 +1,2 @@
+---
+ansible_python_interpreter: /usr/bin/python3

inventory/group_vars/all/restic.yml

@@ -0,0 +1,11 @@
+---
+
+restic_aws_access_key_id: "backup"
+restic_aws_secret_access_key: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          64613131346563323262316264306363636261313535353565333231316433313539653634303737
+          3766666137633637666265663230323937663239396534310a313330333163396664643830643934
+          38623061653733653634623230616532383830626335653362333331353065353737323935326365
+          6638643861633038330a613832336463376535326461633832646238336663333537346461386534
+          31373734303133623363393837613437313066656532623832333335663666353039
+restic_s3_url: "http://backup.mateu.be:9000/backup"

inventory/group_vars/all/smtprelay.yml

@@ -0,0 +1,14 @@
+---
+
+smtprelay_origin: "mateu.be"
+smtprelay_host: "smtp.libertus.eu"
+smtprelay_port: 587
+
+smtprelay_login: "smtp.relay"
+smtprelay_pass: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          35333033346637663866393736623536313961396638323230616463356432376265303362636438
+          3666363439646139633439383233363036383136306266370a636631316261653635323538643964
+          39343134646635326465316239313334353232666361343733613166643363373962633538646163
+          6663623433343233350a633463346664376563313830646539343439313436623365336463353463
+          65393733353432376464306536663135623663613232326139306333363461313463

inventory/group_vars/garage_prd_cluster.yml

@@ -0,0 +1,25 @@
+---
+
+garage_rpc_secret: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          32333730663466323761393665316263316565393964323664306633316137333831666239646230
+          3034373435356334313237366130663566353536623732310a653263343538666332333666663661
+          38326633633036633630633166326437383864376665316137336461616665666665343639666462
+          3731646134616562320a356530346166616137643465613636643232376138623436666233613836
+          35393731313835383334313335393462383238343738313539663631356635373032643735623261
+          39663439303466613337376162646131373863666632626638653837386432633339326235376634
+          34303565306134316464363931633933336139323933613133346665313836356634663139353061
+          66386436626362316531
+
+garage_admin_token: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          31636535366661383466393334393333653631623766666666323433636661303534336361393633
+          3437306665333564346461386661313833313935376331330a613566623835373066613338346363
+          62333832633164353837666266643161643463366462366134363734363634643430393231653363
+          6136393434646630380a643635366337356363643435333666303033623361356437373537346435
+          36623933623737313163353737346130636632626364353035623036333561356662386264353031
+          35343564306362386263333433396535363830313864346462383438633462316661613065633232
+          63643366313239306231346433623366646634633131326133356331353237623163323636333834
+          63643061313734353338
+
+garage_root_domain: ".garage.mateu.be"

inventory/group_vars/mastodonservers.yml

@@ -0,0 +1,3 @@
+---
+
+mastodon_home: "/srv/mastodon"

inventory/group_vars/nsdservers.yml

@@ -0,0 +1,27 @@
+---
+
+zones:
+  - name: giteu.be
+    parking: true
+  - name: libertus.eu
+  - name: mateu.be
+  - name: monder.ch
+    parking: true
+  - name: nintendojo.fr
+  - name: nintendojofr.com
+  - name: nouvelempire.net
+    parking: true
+  - name: nupes.social
+    parking: true
+  - name: pipoworld.fr
+    parking: true
+  - name: sebicomics.com
+
+tsig_key: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          34333338336531313232313563373263613731636432653236646333376137646563316565613634
+          6665663431626165343534633336633635333337623135610a393664343735323733393063366362
+          35343766636266316263343733373937626436626264636434363138643765656436643231353963
+          3966363066353538300a666139663039323163306430373335663332366230313463623462373633
+          66373062316665346665376539316331633635626336303037643165626462383638333261363036
+          3535326630636437316638383663356136363566653865316239

inventory/group_vars/nut.yml

@@ -0,0 +1,9 @@
+---
+
+nut_pass: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          64313965633338626466633664393139313833623763363964666633666335393331643239343933
+          6463336166376161306539353335366630613363623734380a353935656234313032393862323063
+          65376235613531306163313730363262313061346338353635626335333961646330316562343038
+          6238386332613761610a393739366561646336343030336363613365623336383735353838623266
+          3862

inventory/group_vars/peertuberunners.yml

@@ -0,0 +1,10 @@
+---
+
+peertube_runner_token: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          32653563393232666430313330373861396232323037343165303138333664623835656331343164
+          3061313466396463326461663739393832313737623935640a613535343336353766613938366431
+          35313536343934346232626561363965363463353138343733383866353432343339366633396230
+          3634383433613263390a616162613530393330313539343136386531396666616263363936303939
+          33656330663962326435626430646536336162373664303265373262616162343437333737646361
+          6536643161333732343661396364666233393865316261616239

inventory/group_vars/phpservers.yml

@@ -0,0 +1,9 @@
+---
+
+php_versions:
+  Debian:
+    "10": 7.3
+    "11": 7.4
+    "12": 8.2
+
+php_version: "{{ php_versions[ansible_os_family][ansible_distribution_major_version] }}"

inventory/host_vars/baybay-ponay.mateu.be.yml

@@ -0,0 +1,8 @@
+---
+restic_backup_path:
+  - /home
+  - /etc
+restic_backup_excluded_path:
+  - /home/.snapshots
+restic_backup_hour: 19
+restic_backup_minute: 30

inventory/host_vars/bt.dmz.mateu.be.yml

@@ -0,0 +1,28 @@
+---
+web_hostname:
+  - sonarr.mateu.be
+  - jackett.mateu.be
+  - bt.mateu.be
+  - btf.mateu.be
+nginx_extra_mods:
+  - fancyindex
+
+restic_backup_path:
+  - /etc
+  - /var/lib/transmission-daemon
+  - /opt/Jackett
+
+transmission_user: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          62636132623037373065646530633937316131303534653734373635313564623430316662383934
+          3333643265343962653862346432353063323666633964640a393537376666656237333132326539
+          32343832386139633235363737353163623838643463333131666336396235346464396233643431
+          6663383134396266310a373564303863326239613062613561636530363866646264363637316263
+          6362
+transmission_pass: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          63303937333233653763626137313833306134396236336630316161346566363962373863396635
+          3431396631363036343236613538316161646465643938380a646334386535346661656361666661
+          35616537346334346637303638366462333062393237376533633265363437333136313337326461
+          3861383133613763310a353563383237303434666637346263636161313265653033643234633162
+          31613932356364396566626334326237356339633734343763653161353432613335

inventory/host_vars/dns1.dmz.mateu.be.yml

@@ -0,0 +1,2 @@
+---
+natted_ipv4: 82.66.135.228

inventory/host_vars/frederica.dmz.mateu.be.yml

@@ -0,0 +1,22 @@
+---
+restic_backup_path:
+  - /mnt/tank
+restic_backup_excluded_path:
+  - /mnt/tank/s3/.minio.sys
+  - /mnt/tank/iocage
+restic_backup_hour: 6
+restic_backup_minute: 45
+
+ansible_python_interpreter: /usr/local/bin/python3
+
+restic_aws_access_key_id: "SCW0VAFXE5MN9N8KVHTQ"
+restic_aws_secret_access_key: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          33656263333731333833613461336230626332666534376235643735373862663530393433396130
+          6161343663633037663033613135333232393364643533320a383630363938313435356261396662
+          36303063616264383530643638366332323061333835376131323666633234313833353662626438
+          3235353961303739390a323332376235363734373838613632376232383861613761616437316564
+          61333532656135333731313561663062323133613662373061666266383031343964623838336264
+          3936393838396163626438303962313931333165386363666139
+restic_s3_url: "https://s3.fr-par.scw.cloud/backup-libertus"
+restic_exe_group: "wheel"

inventory/host_vars/garage1.dmz.mateu.be.yml

@@ -0,0 +1,16 @@
+---
+web_hostname:
+  - garage.mateu.be
+  - mastodon-ndfr.garage.mateu.be
+  - medias.m.nintendojo.fr
+  - nextcloud-libertus.garage.mateu.be
+  - peertube-videos-ndfr.garage.mateu.be
+  - videos.p.nintendojo.fr
+  - peertube-playlists-ndfr.garage.mateu.be
+  - playlists.p.nintendojo.fr
+  - peertube-original-ndfr.garage.mateu.be
+  - original.p.nintendojo.fr
+
+restic_backup_path:
+  - /etc
+  - /var/lib/private/garage

inventory/host_vars/jabber.dmz.mateu.be.yml

@@ -0,0 +1,9 @@
+---
+web_hostname:
+  - libertus.eu
+  - upload.libertus.eu
+  - xmpp.libertus.eu
+
+restic_backup_path:
+  - /etc
+  - /var/lib/prosody

inventory/host_vars/mail.dmz.mateu.be.yml

@@ -0,0 +1,9 @@
+---
+web_hostname:
+  - imap.libertus.eu
+  - smtp.libertus.eu
+
+restic_backup_path:
+  - /home
+  - /etc
+  - /var/lib/mailman

inventory/host_vars/masto1.dmz.mateu.be.yml

@@ -0,0 +1,80 @@
+---
+web_hostname:
+  - m.nintendojo.fr
+
+restic_backup_path:
+  - /srv
+  - /etc
+  - /var/lib/oolatoocs
+
+oolatoocs_mastodon_client_id: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          33376330656465393935313536363662303237613035633333303230353565386463336230383537
+          3866613233303031333362313964346262333638656332380a396334306266386464643765663931
+          34363661653835346465383834303263373235363834623333336163626333303932333162653933
+          3836663461363334320a613461393030353363373036633638333765353966326365613161633736
+          36353661376664613564376137343833633433663231633631333638616533366366326330616363
+          3535393939396462306335373661353766306564333463306363
+
+oolatoocs_mastodon_client_secret: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          32656635353435643736373365333833336563356166343466653536333832366533303665383736
+          6431376435653639626334653766363439383334646432640a363237323338313134303637656262
+          33616131363237316435346130386661623062636133623266353736366639626537616237323466
+          3136396635393730640a326265373031373334616466346130303162353561663037313761303863
+          39333064386333626463613962613337313337383539613064376238613535663261326638656666
+          6637363263653363353632633135306465646638643030373031
+
+oolatoocs_mastodon_token: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          33373734653834616330386266303939353133646231643862363136353739316462633264316433
+          3163666133306239333939663162393336656261313239640a313562383865333433613737613330
+          66623733633031616564343034376566633137323266356162633464643633623231383064343565
+          3965653432336431320a666634666634366365653633643233623934653536666538656662626364
+          65313464303962396564313964393035316134643438346465613863646531633166613735656635
+          3430333662323936363534666262383262646337306164616162
+
+oolatoocs_twitter_consumer_key: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          39336135396530353337663333303932393364323464326563386235346531663134346262326138
+          3932323863363530663932353534633934313139653366360a386332663936313064376265356330
+          62623264356335646531303962333639616134353834616134346261393561353938643361313762
+          6565383866373431650a323732363239663738613836373139356131303637346666633235356565
+          37393433336132636439663933323363336563363065336436623330386565393132
+
+oolatoocs_twitter_consumer_secret: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          64656462613334336538626561613565306231636430316334323935303534656135616534633839
+          6631626534346136323337656235656663656232333464640a653436386130363532356135616431
+          66366232353935313961346263363338613530613131633065383538303963303136616366626633
+          6566653330343335660a646330626430653839643865386233646331313430386135363433643232
+          39656239353136363566333332396135663432303030303833393339323434663063303136636463
+          39316262313639653432646464633064656338313132343634346564646539363263353462323964
+          333435616436623866343134363964623466
+
+oolatoocs_twitter_oauth_token: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          38313835353262373936663664353165643233343264396562666665303632383364306261666333
+          3034383364633531336235313134323237353038363730650a653837383232376564333164633236
+          38306161613839336164306364303638373335663564313164346637373138356536323164333163
+          3564376438363366640a626133366335613433386135316539666231356262663339346637633964
+          31636333646166343966303937373336366532356539303834343861313234356466343135373337
+          65646134346436633539303337303233633431653661623236376665646130643366393333373236
+          393363623662303263356336396230343836
+
+oolatoocs_twitter_oauth_token_secret: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          63666439666134613630633831346132373936376635626563613363386438396236396530353761
+          3464613266313435386133656133336638656666333565340a333966313936616666383032343533
+          65373133336530356163336138376365653534643665393461636664383136643033373266346537
+          3065633330653431380a356536356531653935626666303939633834633430313431613933666365
+          65383032316164363533393262386436663831353837323935623561393961663335373763666166
+          3066346462636339373936383935333431633533336563636136
+
+oolatoocs_bluesky_password: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          36663061363036393565333636356336633361376563383630323632323635636465633231333532
+          6365636533323431356234616533373735373566336135320a336662643231343233653162663464
+          61393633393634653232303732623133383339386264346433363739306363653262656237393237
+          6261613730396365390a363633626533666364623961393035376232353366373863326631373166
+          35303632363436323563613434393663633533653635653330343261363664363138

inventory/host_vars/munin.dmz.mateu.be.yml

@@ -0,0 +1,50 @@
+---
+web_hostname:
+  - munin.mateu.be
+
+mikrotik_unitary_scripts:
+  - mikrotikcpu_
+  - mikrotikmemory_
+
+mikrotik_periface_scripts:
+  - mikrotikifrate_
+
+mikrotik_hosts:
+  - name: garreg-mach.mateu.be
+    ifaces:
+      - ether1
+      - ether2
+      - ether3
+      - ether4
+      - ether5
+      - ether6
+      - ether7
+      - ether8
+      - ether9
+      - ether10
+      - ether11
+      - ether12
+      - ether13
+      - ether14
+      - ether15
+      - ether16
+      - ether17
+      - ether18
+      - ether19
+      - ether20
+      - ether21
+      - ether22
+      - ether23
+      - ether24
+      - sfp-sfpplus1
+      - sfp-sfpplus2
+      - sfp-sfpplus3
+      - sfp-sfpplus4
+  - name: derdriu.mateu.be
+    ifaces:
+      - Port1
+      - Port2
+      - Port3
+      - Port4
+      - Port5
+      - SFP

inventory/host_vars/muse-HP-EliteBook-820-G2.home.arpa.yml

@@ -0,0 +1,6 @@
+---
+restic_backup_path:
+  - /home
+  - /etc
+restic_backup_hour: 21
+restic_backup_minute: 0

inventory/host_vars/nsd-master1.ext.mateu.be.yml

@@ -0,0 +1,2 @@
+---
+master: true

inventory/host_vars/pinkypie.home.arpa.yml

@@ -0,0 +1,8 @@
+---
+restic_backup_path:
+  - /home
+  - /etc
+restic_backup_excluded_path:
+  - /home/.snapshots
+restic_backup_hour: 18
+restic_backup_minute: 30

inventory/host_vars/pt1.dmz.mateu.be.yml

@@ -0,0 +1,3 @@
+---
+web_hostname:
+  - p.nintendojo.fr

inventory/host_vars/voice1.dmz.mateu.be.yml

@@ -0,0 +1,4 @@
+---
+restic_backup_path:
+  - /etc
+  - /var/lib/mumble-server

inventory/host_vars/voice3.dmz.mateu.be.yml

@@ -0,0 +1,3 @@
+---
+web_hostname:
+  - radio.nintendojo.fr

inventory/host_vars/web1.dmz.mateu.be.yml

@@ -0,0 +1,21 @@
+---
+php_modules: ['opcache', 'pgsql', 'mbstring', 'gd', 'intl', 'curl', 'gettext', 'imap', 'zip', 'apcu', 'imagick', 'bcmath', 'gmp']
+php_memory_limit: "512M"
+
+web_hostname:
+  - fav.libertus.eu
+  - rss.libertus.eu
+  - o.libertus.eu
+  - blog.libertus.eu
+  - mail.libertus.eu
+  - perso.nintendojo.fr
+  - perso.libertus.eu
+  - r.mateu.be
+
+mariadb_root_pass: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          66643966366639636466333561363734623563323936613063623133323466393630393135636238
+          3663396465366630333630353563653166623461623935390a613362376538333239343532386231
+          61363465343165366430323033373730356636356462623332616364323265613934383664393461
+          6266393162633761340a613835393138353438656136643132353966646536316563646439336534
+          3064

inventory/host_vars/web2.dmz.mateu.be.yml

@@ -0,0 +1,28 @@
+---
+php_modules: ['opcache', 'mysql', 'mbstring', 'gd', 'intl', 'xml', 'bcmath', 'curl', 'imagick']
+
+web_hostname:
+  - nintendojo.fr
+  - www.nintendojo.fr
+  - wwwdev.nintendojo.fr
+  - forum.nintendojo.fr
+  - nintendojofr.com
+  - www.nintendojofr.com
+  - forum.nintendojofr.com
+
+mariadb_root_pass: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          31613236623530306638633935303936393634313565333932373831626161316438626439303165
+          3135326262613532356330373166353439373738336337320a383561613432313763616563366537
+          39396636346563346135313431373630643536363838333964353636373437653166633761363664
+          3437653064323138310a663363373736623931336432376466316666616234356133383263373136
+          31343534663063663134306464306234366430323762656165653930333134326231
+
+webapps_htpasswd_editeurs: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          63663638356139373663646639633762393761333536393331363066353039393266306638326336
+          3235353238666261373032363633626333646662343461330a393534633530353330323637386239
+          63336532646235663732623561333963643436353165633165663430313132626561363361333736
+          6662313535333063390a386532313335663836393562656564306633303933633234393139316131
+          61376332373961303961303963656565633639333130346565386361313338346235623434616239
+          6637613630333963363963646465633939663863356633373264

inventory/host_vars/web3.dmz.mateu.be.yml

@@ -0,0 +1,17 @@
+---
+php_modules: ['opcache', 'mysql', 'mbstring', 'gd', 'intl', 'xml', 'bcmath', 'curl', 'imagick']
+
+web_hostname:
+  - sebicomics.com
+  - www.sebicomics.com
+
+mariadb_root_pass: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          66613630653961396639336136333837343866646263353135303233383336356166663466623438
+          6438653832313536363631336363306337366165616561370a316466353535313164623934626563
+          65343238333661333765636131323962316637613036393366343161343162393337376232633432
+          3233653232353534370a393962663766623237313166333638343561306134663062333230333635
+          63343339363833626136646134353365393734346561613262633531386135366634
+
+# 283M of base memory + 20MB/connection -> 1267M of RAM max
+mariadb_max_connections: 50

inventory/production.yml

@@ -0,0 +1,173 @@
+---
+router:
+  hosts:
+    machinbox.mateu.be:
+
+hypervisors:
+  hosts:
+    serenor.dmz.mateu.be:
+
+resticservers:
+  hosts:
+    baybay-ponay.mateu.be:
+    bt.dmz.mateu.be:
+    es1.dmz.mateu.be:
+    frederica.dmz.mateu.be:
+    garage1.dmz.mateu.be:
+    jabber.dmz.mateu.be:
+    mail.dmz.mateu.be:
+    masto1.dmz.mateu.be:
+    muse-HP-EliteBook-820-G2.home.arpa:
+    pinkypie.home.arpa:
+    pt1.dmz.mateu.be:
+    voice1.dmz.mateu.be:
+    web[1:3].dmz.mateu.be:
+
+nsdservers:
+  hosts:
+    dns1.dmz.mateu.be:
+    nsd-master1.ext.mateu.be:
+
+garageservers:
+  children:
+    garage_prd_cluster:
+      hosts:
+        garage1.dmz.mateu.be:
+
+elasticsearchservers:
+  hosts:
+    es1.dmz.mateu.be:
+
+nut:
+  children:
+    nut_client:
+      hosts:
+        serenor.dmz.mateu.be:
+    nut_server:
+      hosts:
+        serenor.dmz.mateu.be:
+
+webservers:
+  hosts:
+    bt.dmz.mateu.be:
+    garage1.dmz.mateu.be:
+    jabber.dmz.mateu.be:
+    mail.dmz.mateu.be:
+    masto1.dmz.mateu.be:
+    pt1.dmz.mateu.be:
+    voice3.dmz.mateu.be:
+    munin.dmz.mateu.be:
+    web1.dmz.mateu.be:
+    web2.dmz.mateu.be:
+    web3.dmz.mateu.be:
+
+peertubeservers:
+  hosts:
+    pt1.dmz.mateu.be:
+
+peertuberunners:
+  hosts:
+    pt-runner1.ext.mateu.be:
+
+phpservers:
+  hosts:
+    web[1:3].dmz.mateu.be:
+
+mariadbservers:
+  hosts:
+    web[2:3].dmz.mateu.be:
+
+pgsqlservers:
+  hosts:
+    masto1.dmz.mateu.be:
+    pt1.dmz.mateu.be:
+    web1.dmz.mateu.be:
+
+mastodonservers:
+  hosts:
+    masto1.dmz.mateu.be:
+
+rorservers:
+  hosts:
+    masto1.dmz.mateu.be:
+
+mailservers:
+  hosts:
+    mail.dmz.mateu.be:
+
+xmppservers:
+  hosts:
+    jabber.dmz.mateu.be:
+
+loadbalancers:
+  hosts:
+    haproxy.dmz.mateu.be:
+
+transmission:
+  hosts:
+    bt.dmz.mateu.be:
+
+mumbleservers:
+  hosts:
+    voice1.dmz.mateu.be:
+
+icecastservers:
+  hosts:
+    voice3.dmz.mateu.be:
+
+rsyslogservers:
+  hosts:
+    syslog.dmz.mateu.be:
+
+muninservers:
+  hosts:
+    munin.dmz.mateu.be:
+
+disabled_loadbalanced_webservers:
+  hosts:
+
+disabled_system:
+  hosts:
+    baybay-ponay.mateu.be:
+    frederica.dmz.mateu.be:
+    machinbox.mateu.be:
+    muse-HP-EliteBook-820-G2.home.arpa:
+    pinkypie.home.arpa:
+
+disabled_munin:
+  hosts:
+    baybay-ponay.mateu.be:
+    frederica.dmz.mateu.be:
+    muse-HP-EliteBook-820-G2.home.arpa:
+    pinkypie.home.arpa:
+    nsd-master1.ext.mateu.be:
+    pt-runner1.ext.mateu.be:
+
+disabled_syslog:
+  hosts:
+    baybay-ponay.mateu.be:
+    frederica.dmz.mateu.be:
+    machinbox.mateu.be:
+    muse-HP-EliteBook-820-G2.home.arpa:
+    nsd-master1.ext.mateu.be:
+    pinkypie.home.arpa:
+    pt-runner1.ext.mateu.be:
+
+# Those are not servers and should not be configured as such
+disabled_server_conf:
+  hosts:
+    baybay-ponay.mateu.be:
+    muse-HP-EliteBook-820-G2.home.arpa:
+    pinkypie.home.arpa:
+
+ftpservers:
+  hosts:
+    ftp.dmz.mateu.be:
+
+domservers:
+  hosts:
+    dom.dmz.mateu.be:
+
+unifiservers:
+  hosts:
+    unifi.dmz.mateu.be: