windyboy
b03d7019c4
- Add dns.windy.lan to Ansible inventory (adguardhome group/profile) with a read-only healthcheck template, systemd timer, and on-demand report parity with the other active hosts; verified green on the host. - Add synapse.chans.xyz to the AGENTS.md active-host quick map. - Remove plans/; migrate decisions/verification to a Linear vps project doc and file the remaining gaps as W1N-46..49 with blocking edges. - Retire scripts/check-mx2.sh; point mailcow health/update runbooks and the mx2 host file at the Ansible health report. - Trim us2 stub software to verified running services; note dormant dirs. - Normalize repo docs to English; drop the non-existent CONTEXT.md/ADR claim and remove docs/agents/domain.md.
118 lines
3.8 KiB
YAML
118 lines
3.8 KiB
YAML
---
|
|
# Sanitized control-plane inventory. Canonical human-readable facts remain
|
|
# in ../../inventory/hosts.md and ../../hosts/*.md. No passwords, keys, tokens,
|
|
# repository URLs, or private material belong here.
|
|
all:
|
|
vars:
|
|
ansible_user: windy
|
|
ansible_ssh_common_args: >-
|
|
-o BatchMode=yes -o ConnectTimeout=10 -o AddressFamily=inet
|
|
ansible_become: true
|
|
ansible_become_method: sudo
|
|
children:
|
|
managed:
|
|
hosts:
|
|
mx2:
|
|
ansible_host: mx2.windy.me
|
|
ansible_host_ipv4: 194.163.160.244
|
|
service_role: mailcow
|
|
compose_project_dir: /opt/mail
|
|
healthcheck_profile: mailcow
|
|
service_reconcile_services:
|
|
all:
|
|
compose_args: [--force-recreate]
|
|
us2:
|
|
ansible_host: us2.wsvc.info
|
|
ansible_host_ipv4: 193.9.44.165
|
|
service_role: vaultwarden
|
|
compose_project_dir: /opt/vaultwarden
|
|
healthcheck_profile: vaultwarden
|
|
service_reconcile_services:
|
|
vaultwarden:
|
|
compose_args: [--force-recreate]
|
|
service_reconcile_traefik_restart_targets: [vaultwarden]
|
|
hk2:
|
|
ansible_host: hk2.chans.xyz
|
|
ansible_host_ipv4: 154.36.174.161
|
|
service_role: powerdns
|
|
compose_project_dir: /opt/pdns
|
|
healthcheck_profile: pdns
|
|
service_reconcile_services:
|
|
auth:
|
|
compose_args: [--force-recreate]
|
|
poweradmin:
|
|
compose_args: [--no-deps, --force-recreate]
|
|
backup:
|
|
compose_args: [--no-deps, --force-recreate]
|
|
service_reconcile_traefik_restart_targets: [poweradmin]
|
|
us4:
|
|
ansible_host: us4.wsvc.info
|
|
ansible_host_ipv4: 185.201.226.122
|
|
service_role: wireguard
|
|
compose_project_dir: /opt/wireguard
|
|
healthcheck_profile: wireguard
|
|
wireguard_image: >-
|
|
lscr.io/linuxserver/wireguard@sha256:ac43e1226878d2611315172d6ea357a95cb326ee73124b91108118efc8666889
|
|
service_reconcile_services:
|
|
wireguard:
|
|
compose_args: [--no-deps, --force-recreate]
|
|
dns_windy_lan:
|
|
ansible_host: 192.168.66.36
|
|
ansible_host_ipv4: 192.168.66.36
|
|
service_role: adguardhome
|
|
compose_project_dir: /opt/adguardhome
|
|
healthcheck_profile: adguardhome
|
|
service_reconcile_services:
|
|
adguardhome:
|
|
compose_args: [--no-deps, --force-recreate]
|
|
mailcow:
|
|
hosts:
|
|
mx2:
|
|
vaultwarden:
|
|
hosts:
|
|
us2:
|
|
powerdns:
|
|
hosts:
|
|
hk2:
|
|
wireguard:
|
|
hosts:
|
|
us4:
|
|
adguardhome:
|
|
hosts:
|
|
dns_windy_lan:
|
|
docker_hosts:
|
|
children:
|
|
mailcow:
|
|
vaultwarden:
|
|
powerdns:
|
|
wireguard:
|
|
adguardhome:
|
|
# Matrix is a dedicated K3s node and intentionally remains outside the
|
|
# Docker-oriented managed group.
|
|
k3s_servers:
|
|
hosts:
|
|
matrix_vps:
|
|
ansible_host: 169.58.86.13
|
|
ansible_host_ipv4: 169.58.86.13
|
|
service_role: matrix_k3s
|
|
matrix_server_name: chans.xyz
|
|
matrix_synapse_host: synapse.chans.xyz
|
|
matrix_element_host: chat.chans.xyz
|
|
matrix_mas_host: account.chans.xyz
|
|
matrix_admin_host: admin.chans.xyz
|
|
matrix_rtc_host: mrtc.chans.xyz
|
|
matrix_backup_path: /var/backups/matrix
|
|
matrix_bootstrap_dir: /etc/matrix-bootstrap
|
|
matrix_stack_enabled: false
|
|
# ESS OCI chart configuration
|
|
matrix_stack_chart_ref: oci://ghcr.io/element-hq/ess-helm/matrix-stack
|
|
matrix_stack_chart_version: 26.7.2
|
|
matrix_stack_release_name: ess
|
|
matrix_namespace: ess
|
|
matrix:
|
|
children:
|
|
k3s_servers:
|
|
matrix_production:
|
|
children:
|
|
matrix:
|