128 lines
3.3 KiB
YAML
128 lines
3.3 KiB
YAML
---
|
|
all:
|
|
vars:
|
|
hypervisor:
|
|
type: "proxmox"
|
|
url: "pve01.example.com"
|
|
username: "root@pam"
|
|
password: "CHANGE_ME"
|
|
host: "pve01"
|
|
storage: "local-lvm"
|
|
boot_iso: "local:iso/archlinux-x86_64.iso"
|
|
children:
|
|
proxmox:
|
|
hosts:
|
|
app01.example.com:
|
|
ansible_host: 10.0.0.10
|
|
system:
|
|
filesystem: "btrfs"
|
|
type: "virtual"
|
|
os: "archlinux"
|
|
name: "app01.example.com"
|
|
id: 100
|
|
cpus: 2
|
|
memory: 4096
|
|
balloon: 0
|
|
network: "vmbr0"
|
|
ip: 10.0.0.10
|
|
prefix: 24
|
|
gateway: 10.0.0.1
|
|
dns:
|
|
servers:
|
|
- 1.1.1.1
|
|
- 1.0.0.1
|
|
search:
|
|
- example.com
|
|
disks:
|
|
- size: 40
|
|
- size: 80
|
|
mount:
|
|
path: /data
|
|
fstype: xfs
|
|
label: DATA
|
|
opts: defaults
|
|
user:
|
|
name: "ops"
|
|
password: "CHANGE_ME"
|
|
key: "ssh-ed25519 AAAA..."
|
|
root:
|
|
password: "CHANGE_ME"
|
|
packages:
|
|
- jq
|
|
- tmux
|
|
features:
|
|
cis:
|
|
enabled: false
|
|
selinux:
|
|
enabled: true
|
|
firewall:
|
|
enabled: true
|
|
backend: "firewalld"
|
|
toolkit: "nftables"
|
|
ssh:
|
|
enabled: true
|
|
zstd:
|
|
enabled: true
|
|
swap:
|
|
enabled: true
|
|
banner:
|
|
motd: true
|
|
sudo: true
|
|
chroot:
|
|
tool: "arch-chroot"
|
|
db01.example.com:
|
|
ansible_host: 10.0.0.11
|
|
rhel_iso: "local:iso/rhel-9.4-x86_64-dvd.iso"
|
|
system:
|
|
filesystem: "xfs"
|
|
type: "virtual"
|
|
os: "rhel"
|
|
version: "9"
|
|
name: "db01.example.com"
|
|
id: 101
|
|
cpus: 4
|
|
memory: 8192
|
|
network: "vmbr0"
|
|
ip: 10.0.0.11
|
|
prefix: 24
|
|
gateway: 10.0.0.1
|
|
dns:
|
|
servers: "1.1.1.1,1.0.0.1"
|
|
disks:
|
|
- size: 80
|
|
- size: 200
|
|
mount:
|
|
path: /srv/data
|
|
fstype: ext4
|
|
user:
|
|
name: "dbadmin"
|
|
password: "CHANGE_ME"
|
|
key: "ssh-ed25519 AAAA..."
|
|
root:
|
|
password: "CHANGE_ME"
|
|
luks:
|
|
enabled: true
|
|
passphrase: "CHANGE_ME"
|
|
method: "keyfile"
|
|
keysize: 128
|
|
features:
|
|
cis:
|
|
enabled: true
|
|
selinux:
|
|
enabled: false
|
|
firewall:
|
|
enabled: false
|
|
backend: "firewalld"
|
|
toolkit: "nftables"
|
|
ssh:
|
|
enabled: true
|
|
zstd:
|
|
enabled: true
|
|
swap:
|
|
enabled: true
|
|
banner:
|
|
motd: true
|
|
sudo: true
|
|
chroot:
|
|
tool: "arch-chroot"
|