mates
f91234c8fb
roles/netbird/tasks/main.yml: - apt balicek 'netbird' (oficialni NetBird Linux klient) - neni Docker, neni sluzba - je to VPN klient roles/netbird/defaults/main.yml: - odebrano netbird_run_as_system_service (nepotreba) - pridana poznamka o instalaci playbook priprav-novy-server.yml: - hlavicka: 'NetBird (mesh VPN klient - apt balicek, NE Docker)' group_vars/all.yml.example: - pridana dokumentace https://docs.netbird.io/get-started/install - komentare rikaji, ze to neni Docker sluzba README.md: - tabulka roli: 'apt balicek, ne Docker' - krok 8: 'NetBird (mesh VPN klient - apt balicek)' Postup instalace: - Linux server: ansible role -> apt install netbird - macOS workstation: brew install --cask netbird (v Brewfile) - Windows: instalator z netbird.io - Registrace: netbird up --setup-key <key> (z app.netbird.io)
95 lines
2.6 KiB
Plaintext
95 lines
2.6 KiB
Plaintext
---
|
|
# Spolecne promenne pro vsechny playbooky
|
|
# Zkopiruj na group_vars/all.yml a dopln
|
|
|
|
# ============================================
|
|
# DEPLOY USER (UID 1000)
|
|
# ============================================
|
|
deploy_user: deploy
|
|
deploy_uid: 1000
|
|
deploy_groups:
|
|
- docker
|
|
- sudo
|
|
- adm
|
|
- systemd-journal
|
|
|
|
# Verejne SSH klice pro deploy uzivatele
|
|
# Pridej sve klice (verejnou cast z `cat ~/.ssh/id_ed25519.pub`)
|
|
deploy_ssh_public_keys:
|
|
- "ssh-ed25519 AAAAC3Nz... hermes@mac" # <-- nahrad svym klicem
|
|
|
|
# ============================================
|
|
# NETBIRD (mesh VPN - samostatna aplikace)
|
|
# ============================================
|
|
# NetBird je WireGuard-based mesh VPN klient.
|
|
# Ne Docker sluzba - instaluje se jako apt balicek (Linux) nebo brew cask (mac).
|
|
# Dokumentace: https://docs.netbird.io/get-started/install
|
|
#
|
|
# Setup key z NetBird dashboardu: https://app.netbird.io/ -> Setup Keys
|
|
# Napr: AAAA-BBBB-CCCC-DDDD-EEEE
|
|
#
|
|
# Pokud je prazdne, NetBird se pouze nainstaluje - registraci provedes rucne:
|
|
# sudo netbird up --setup-key <tvuj-key>
|
|
#
|
|
netbird_setup_key: ""
|
|
netbird_management_url: "https://api.netbird.io"
|
|
|
|
# ============================================
|
|
# DOCKER
|
|
# ============================================
|
|
docker_compose_version: "v2.27.0"
|
|
docker_daemon_config:
|
|
log-driver: json-file
|
|
log-opts:
|
|
max-size: "10m"
|
|
max-file: "3"
|
|
storage-driver: overlay2
|
|
live-restore: true
|
|
userland-proxy: false
|
|
|
|
# Sluzby k nasazeni (seznam nazvu adresaru v docker-services/)
|
|
services_to_deploy:
|
|
- portainer
|
|
- nginx-proxy-manager
|
|
- vaultwarden
|
|
- gitea
|
|
- jotty
|
|
- nextcloud-aio
|
|
- rustdesk
|
|
- audiobookshelf
|
|
- calibre-web
|
|
- plex
|
|
- erugo
|
|
- jswiki
|
|
- speedtest
|
|
- watchtower
|
|
|
|
# ============================================
|
|
# NETWORK / FIREWALL
|
|
# ============================================
|
|
# POZNAMKA: firewall (UFW) se nenastavuje automaticky.
|
|
# Pokud chces firewall, nastav ho rucne (Cloudflare Tunnel,
|
|
# security group na VPS, docker-network oddeleni, ...).
|
|
# Tato promenna zustava pro pripadnou budouci konfiguraci.
|
|
ssh_port: 22
|
|
allowed_ports:
|
|
- { port: 22, proto: tcp, comment: "SSH" }
|
|
- { port: 80, proto: tcp, comment: "HTTP" }
|
|
- { port: 443, proto: tcp, comment: "HTTPS" }
|
|
|
|
# ============================================
|
|
# SECURITY (fail2ban)
|
|
# ============================================
|
|
fail2ban_maxretry: 5
|
|
fail2ban_bantime: 3600
|
|
|
|
# ============================================
|
|
# SLUZBY (credentials po prvnim spusteni)
|
|
# ============================================
|
|
npm_default_email: admin@example.com
|
|
npm_default_password: changeme
|
|
|
|
gitea_admin_user: admin
|
|
gitea_admin_password: changeme
|
|
gitea_admin_email: admin@example.com
|