♻️: refactor allowlist

inventory/host_vars/bt.dmz.mateu.be.yml

@@ -1,9 +1,20 @@
 ---
 web_hostname:
-  - sonarr.mateu.be
-  - jackett.mateu.be
-  - bt.mateu.be
-  - btf.mateu.be
+  - host: sonarr.mateu.be
+  - host: jackett.mateu.be
+  - host: bt.mateu.be
+  - host: btf.mateu.be
+    allowlistv4:
+      - 88.175.123.77/32
+    allowlistv6:
+      - 2a01:e0a:9bd:2811::/64
+      - 2a01:e0a:9bd:2810::/64
+      - 2a01:e0a:fc:ebc0::/64
+      - 2a01:cb00:8a0a:b700::/64
+      - 2a01:e0a:d19:ef90::/64
+      - 2001:910:13c8::/48
+      - 2a01:e0a:bde:d350::/64
+      - 2a01:cb00:f55:2d00::/64
 nginx_extra_mods:
   - fancyindex
 

inventory/host_vars/garage1.dmz.mateu.be.yml

@@ -1,15 +1,15 @@
 ---
 web_hostname:
-  - garage.mateu.be
-  - mastodon-ndfr.garage.mateu.be
-  - medias.m.nintendojo.fr
-  - nextcloud-libertus.garage.mateu.be
-  - peertube-videos-ndfr.garage.mateu.be
-  - videos.p.nintendojo.fr
-  - peertube-playlists-ndfr.garage.mateu.be
-  - playlists.p.nintendojo.fr
-  - peertube-original-ndfr.garage.mateu.be
-  - original.p.nintendojo.fr
+  - host: garage.mateu.be
+  - host: mastodon-ndfr.garage.mateu.be
+  - host: medias.m.nintendojo.fr
+  - host: nextcloud-libertus.garage.mateu.be
+  - host: peertube-videos-ndfr.garage.mateu.be
+  - host: videos.p.nintendojo.fr
+  - host: peertube-playlists-ndfr.garage.mateu.be
+  - host: playlists.p.nintendojo.fr
+  - host: peertube-original-ndfr.garage.mateu.be
+  - host: original.p.nintendojo.fr
 
 restic_backup_path:
   - /etc

inventory/host_vars/jabber.dmz.mateu.be.yml

@@ -1,8 +1,8 @@
 ---
 web_hostname:
-  - libertus.eu
-  - upload.libertus.eu
-  - xmpp.libertus.eu
+  - host: libertus.eu
+  - host: upload.libertus.eu
+  - host: xmpp.libertus.eu
 
 restic_backup_path:
   - /etc

inventory/host_vars/mail.dmz.mateu.be.yml

@@ -1,7 +1,7 @@
 ---
 web_hostname:
-  - imap.libertus.eu
-  - smtp.libertus.eu
+  - host: imap.libertus.eu
+  - host: smtp.libertus.eu
 
 restic_backup_path:
   - /home

inventory/host_vars/masto1.dmz.mateu.be.yml

@@ -1,6 +1,6 @@
 ---
 web_hostname:
-  - m.nintendojo.fr
+  - host: m.nintendojo.fr
 
 restic_backup_path:
   - /srv

inventory/host_vars/munin.dmz.mateu.be.yml

@@ -1,6 +1,6 @@
 ---
 web_hostname:
-  - munin.mateu.be
+  - host: munin.mateu.be
 
 mikrotik_unitary_scripts:
   - mikrotikcpu_

inventory/host_vars/pt1.dmz.mateu.be.yml

@@ -1,3 +1,3 @@
 ---
 web_hostname:
-  - p.nintendojo.fr
+  - host: p.nintendojo.fr

inventory/host_vars/voice3.dmz.mateu.be.yml

@@ -1,3 +1,3 @@
 ---
 web_hostname:
-  - radio.nintendojo.fr
+  - host: radio.nintendojo.fr

inventory/host_vars/web1.dmz.mateu.be.yml

@@ -3,14 +3,14 @@ php_modules: ['opcache', 'pgsql', 'mbstring', 'gd', 'intl', 'curl', 'gettext', '
 php_memory_limit: "512M"
 
 web_hostname:
-  - fav.libertus.eu
-  - rss.libertus.eu
-  - o.libertus.eu
-  - blog.libertus.eu
-  - mail.libertus.eu
-  - perso.nintendojo.fr
-  - perso.libertus.eu
-  - r.mateu.be
+  - host: fav.libertus.eu
+  - host: rss.libertus.eu
+  - host: o.libertus.eu
+  - host: blog.libertus.eu
+  - host: mail.libertus.eu
+  - host: perso.nintendojo.fr
+  - host: perso.libertus.eu
+  - host: r.mateu.be
 
 mariadb_root_pass: !vault |
           $ANSIBLE_VAULT;1.1;AES256

inventory/host_vars/web2.dmz.mateu.be.yml

@@ -2,13 +2,13 @@
 php_modules: ['opcache', 'mysql', 'mbstring', 'gd', 'intl', 'xml', 'bcmath', 'curl', 'imagick']
 
 web_hostname:
-  - nintendojo.fr
-  - www.nintendojo.fr
-  - wwwdev.nintendojo.fr
-  - forum.nintendojo.fr
-  - nintendojofr.com
-  - www.nintendojofr.com
-  - forum.nintendojofr.com
+  - host: nintendojo.fr
+  - host: www.nintendojo.fr
+  - host: wwwdev.nintendojo.fr
+  - host: forum.nintendojo.fr
+  - host: nintendojofr.com
+  - host: www.nintendojofr.com
+  - host: forum.nintendojofr.com
 
 mariadb_root_pass: !vault |
           $ANSIBLE_VAULT;1.1;AES256

inventory/host_vars/web3.dmz.mateu.be.yml

@@ -2,8 +2,8 @@
 php_modules: ['opcache', 'mysql', 'mbstring', 'gd', 'intl', 'xml', 'bcmath', 'curl', 'imagick']
 
 web_hostname:
-  - sebicomics.com
-  - www.sebicomics.com
+  - host: sebicomics.com
+  - host: www.sebicomics.com
 
 mariadb_root_pass: !vault |
           $ANSIBLE_VAULT;1.1;AES256