DerLinkman
30f3e9a4c6
- replace inventory/dmc12.yml with cloudlorean.yml (+ group_vars) and update all README/AGENTS call examples and the inventory table - move admin_password hash into encrypted vault.yml; remove plaintext copies from roles/bootstrap/defaults and group_vars/external.yml - bootstrap.yml loads vault.yml via vars_files (same pattern as monitoring) - monitoring: PSK config/registration updates, docker role defaults, os-updates logging/reboot refinements, ansible.cfg/execute.sh tweaks - add .project-wiki knowledge base and .github agent instructions
23 lines
1.1 KiB
YAML
23 lines
1.1 KiB
YAML
---
|
|
# SSH authorized keys for admin user
|
|
# Format: key and optional comment
|
|
admin_authorized_keys:
|
|
- key: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL/XwF0Na+YH7lRqGtwEcyIMVGTQZetNDrC9sZ8ofjC5 niklas@Linkman-PC"
|
|
comment: "Niklas - Linkman-PC"
|
|
- key: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA+EvtGavPlXfv7b00jSYsXX2+IEsqFWupEs6Rzf5z9q root@ansible"
|
|
comment: "Generic Ansible Key"
|
|
|
|
# admin_password lives encrypted in vault.yml (loaded via vars_files in
|
|
# bootstrap.yml); no plaintext fallback per repository vault policy.
|
|
|
|
monitoring_zabbix_passive_servers: ["2a01:4f8:1c1e:62dd::1"]
|
|
|
|
# Zabbix server API (password lives in vault.yml as monitoring_zabbix_api_password)
|
|
monitoring_zabbix_api_url: "https://mon.cloudlorean.de/api_jsonrpc.php"
|
|
monitoring_zabbix_api_user: Admin
|
|
monitoring_zabbix_api_validate_certs: true
|
|
|
|
# Host registration defaults for the home inventory
|
|
monitoring_zabbix_host_groups: ["Linux servers", "Cloudlorean"]
|
|
monitoring_zabbix_templates: ["Linux by Zabbix agent"]
|
|
monitoring_zabbix_docker_templates: ["Docker by Zabbix agent 2"] |