Initial VPS operations handbook

2026-08-03 12:26:42 +08:00
commit b73125e5bc
97 changed files with 3641 additions and 0 deletions
@@ -0,0 +1,74 @@
+---
+# Sanitized control-plane inventory. Canonical human-readable facts remain
+# in ../../inventory/hosts.md and ../../hosts/*.md. No passwords, keys, tokens,
+# repository URLs, or private material belong here.
+all:
+  vars:
+    ansible_user: windy
+    ansible_ssh_common_args: >-
+      -o BatchMode=yes -o ConnectTimeout=10 -o AddressFamily=inet
+    ansible_become: true
+    ansible_become_method: sudo
+  children:
+    managed:
+      hosts:
+        mx2:
+          ansible_host: mx2.windy.me
+          ansible_host_ipv4: 194.163.160.244
+          service_role: mailcow
+          compose_project_dir: /opt/mail
+          healthcheck_profile: mailcow
+        us2:
+          ansible_host: us2.wsvc.info
+          ansible_host_ipv4: 193.9.44.165
+          service_role: vaultwarden
+          compose_project_dir: /opt/vaultwarden
+          healthcheck_profile: vaultwarden
+        hk2:
+          ansible_host: hk2.chans.xyz
+          ansible_host_ipv4: 154.36.174.161
+          service_role: powerdns
+          compose_project_dir: /opt/pdns
+          healthcheck_profile: pdns
+    mailcow:
+      hosts:
+        mx2:
+    vaultwarden:
+      hosts:
+        us2:
+    powerdns:
+      hosts:
+        hk2:
+    docker_hosts:
+      children:
+        mailcow:
+        vaultwarden:
+        powerdns:
+    # Matrix is a dedicated K3s node and intentionally remains outside the
+    # Docker-oriented managed group.
+    k3s_servers:
+      hosts:
+        matrix_vps:
+          ansible_host: 169.58.86.13
+          ansible_host_ipv4: 169.58.86.13
+          service_role: matrix_k3s
+          matrix_server_name: chans.xyz
+          matrix_synapse_host: synapse.chans.xyz
+          matrix_element_host: chat.chans.xyz
+          matrix_mas_host: account.chans.xyz
+          matrix_admin_host: admin.chans.xyz
+          matrix_rtc_host: mrtc.chans.xyz
+          matrix_backup_path: /var/backups/matrix
+          matrix_bootstrap_dir: /etc/matrix-bootstrap
+          matrix_stack_enabled: false
+          # ESS OCI chart configuration
+          matrix_stack_chart_ref: oci://ghcr.io/element-hq/ess-helm/matrix-stack
+          matrix_stack_chart_version: 26.7.2
+          matrix_stack_release_name: ess
+          matrix_namespace: ess
+    matrix:
+      children:
+        k3s_servers:
+    matrix_production:
+      children:
+        matrix: