Initialise repository structure and placeholder files. Generic functionality works i guess, need to come up with a better solution for compose templates

2026-07-08 10:29:51 +01:00
commit 53695f4fff
@@ -0,0 +1,7 @@
+# Host Variables
+
+Create one file per VM, for example `host_vars/media-01.yml`.
+
+Use host variables for hostnames, service enablement, storage paths, and port
+assignments. Keep credentials and TLS private material outside Git.
+
@@ -0,0 +1,29 @@
+---
+nbops_hostname: cloud
+nbops_fqdn: cloud.example.internal
+nbops_roles:
+  - base
+  - ssh
+  - ufw
+  - updates
+  - docker
+  - mtls
+  - monitoring
+  - traefik
+  - ocis
+
+nbops_service_routing_mode: traefik
+nbops_traefik_entrypoint: web
+nbops_traefik_tls: false
+
+# Bind this to the VM's internal/LAN address in production.
+traefik_bind_address: "0.0.0.0"
+traefik_publish_entrypoints: true
+traefik_domain: apps-01.example.internal
+traefik_forwarded_headers_trusted_ips:
+  - 10.0.0.0/8
+  - 172.16.0.0/12
+  - 192.168.0.0/16
+
+ocis_url: https://files.example.internal
+
@@ -0,0 +1,31 @@
+---
+nbops_hostname: edge
+nbops_fqdn: edge.example.invalid
+nbops_roles:
+  - base
+  - ssh
+  - ufw
+  - updates
+  - docker
+  - mtls
+  - monitoring
+  - traefik
+  - authentik
+  - authentik_rac
+  - authentik_ldap
+  - authentik_worker
+
+nbops_service_routing_mode: traefik
+nbops_service_domain_suffix: example.invalid
+nbops_traefik_entrypoint: websecure
+nbops_traefik_tls: true
+
+traefik_bind_address: "0.0.0.0"
+traefik_publish_entrypoints: true
+traefik_domain: example.invalid
+traefik_acme_email: admin@example.invalid
+
+authentik_domain: auth.example.invalid
+authentik_http_port: 9000
+authentik_https_port: 9443
+
@@ -0,0 +1,57 @@
+---
+nbops_hostname: apps-01
+nbops_fqdn: apps-01.example.internal
+nbops_roles:
+  - base
+  - ssh
+  - ufw
+  - updates
+  - docker
+  - mtls
+  - monitoring
+  - traefik
+  - gitea
+  - immich
+  - ocis
+  - arr
+
+nbops_service_routing_mode: traefik
+nbops_traefik_entrypoint: web
+nbops_traefik_tls: false
+
+# Bind this to the VM's internal/LAN address in production.
+traefik_bind_address: "0.0.0.0"
+traefik_publish_entrypoints: true
+traefik_domain: apps-01.example.internal
+traefik_forwarded_headers_trusted_ips:
+  - 10.0.0.0/8
+  - 172.16.0.0/12
+  - 192.168.0.0/16
+
+gitea_domain: git.example.internal
+gitea_publish_ssh: true
+immich_domain: photos.example.internal
+ocis_url: https://files.example.internal
+
+arr_services:
+  prowlarr:
+    image: lscr.io/linuxserver/prowlarr:latest
+    port: 9696
+    domain: prowlarr.example.internal
+  sonarr:
+    image: lscr.io/linuxserver/sonarr:latest
+    port: 8989
+    domain: sonarr.example.internal
+  radarr:
+    image: lscr.io/linuxserver/radarr:latest
+    port: 7878
+    domain: radarr.example.internal
+  lidarr:
+    image: lscr.io/linuxserver/lidarr:latest
+    port: 8686
+    domain: lidarr.example.internal
+  bazarr:
+    image: lscr.io/linuxserver/bazarr:latest
+    port: 6767
+    domain: bazarr.example.internal
+
@@ -0,0 +1,15 @@
+---
+nbops_hostname: pelican-node-01
+nbops_fqdn: pelican-node-01.example.internal
+nbops_roles:
+  - base
+  - ssh
+  - ufw
+  - updates
+  - docker
+  - pelican_server
+
+pelican_server_daemon_port: 8080
+pelican_server_sftp_port: 2022
+pelican_server_allocation_ports:
+  - { port: "25565:25575", proto: tcp }
@@ -0,0 +1,29 @@
+---
+nbops_hostname: cloud
+nbops_fqdn: cloud.example.internal
+nbops_roles:
+  - base
+  - ssh
+  - ufw
+  - updates
+  - docker
+  - mtls
+  - monitoring
+  - traefik
+  - ocis
+
+nbops_service_routing_mode: traefik
+nbops_traefik_entrypoint: web
+nbops_traefik_tls: false
+
+# Bind this to the VM's internal/LAN address in production.
+traefik_bind_address: "0.0.0.0"
+traefik_publish_entrypoints: true
+traefik_domain: apps-01.example.internal
+traefik_forwarded_headers_trusted_ips:
+  - 10.0.0.0/8
+  - 172.16.0.0/12
+  - 192.168.0.0/16
+
+ocis_url: https://files.example.internal
+