From 2b5bffe2bec16f55ed0fe6e705b74a2cd9a8cc31 Mon Sep 17 00:00:00 2001 From: Christoph Date: Fri, 13 Nov 2026 18:14:18 +0100 Subject: [PATCH] Add host 'sftp-nd.oopen.de' and activate backups. --- host_vars/backup.oopen.de/backup-common.yml | 1 + host_vars/oolm-db.oopen.de | 1 + host_vars/sftp-nd.oopen.de/sftp-nd-common.yml | 159 ++++++++++++++++++ .../sftp-nd.oopen.de/sftp-nd-ipt-server.yml | 18 ++ hosts | 4 + 5 files changed, 183 insertions(+) create mode 120000 host_vars/oolm-db.oopen.de create mode 100644 host_vars/sftp-nd.oopen.de/sftp-nd-common.yml create mode 100644 host_vars/sftp-nd.oopen.de/sftp-nd-ipt-server.yml diff --git a/host_vars/backup.oopen.de/backup-common.yml b/host_vars/backup.oopen.de/backup-common.yml index c147bec..7f15c26 100644 --- a/host_vars/backup.oopen.de/backup-common.yml +++ b/host_vars/backup.oopen.de/backup-common.yml @@ -351,6 +351,7 @@ default_user: - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID82UUUkYKYFbJdmTcMYu+vl3M0FVQznXFbngqPoumP+ root@prometheus-nd' - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIObY/MOgF4QVWROrQCaKCfBOfAwKVcja3q7Ngwo1MEDt root@psono-ndm' - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJU5HzfGYZwWeaoAGGFF7/3VQP19ce6Rgn5wcOR98Q3o root@server26' + - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJDP8BKMAiOCh2owFXl/sb6hOt+52Se1uBHeaiHLJFfg root@sftp-nd' - '#ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBRfCFz6mPdn3TKVCgffHQAKt3LN/0srS/gBsMoOyZpi root@shop-agr' - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHbeMf/CvAYIU/4UW8Ql59FgPo/3vcZ3vI3QzK2kOadE root@srv-cityslang' - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINiVJ2QVuGz0bLlrJVa3CJ+DtwOv0pt6M53ipkGbW1JQ root@stolpersteine' diff --git a/host_vars/oolm-db.oopen.de b/host_vars/oolm-db.oopen.de new file mode 120000 index 0000000..ec075f0 --- /dev/null +++ b/host_vars/oolm-db.oopen.de @@ -0,0 +1 @@ +o21.oopen.de \ No newline at end of file diff --git a/host_vars/sftp-nd.oopen.de/sftp-nd-common.yml b/host_vars/sftp-nd.oopen.de/sftp-nd-common.yml new file mode 100644 index 0000000..2f5dc69 --- /dev/null +++ b/host_vars/sftp-nd.oopen.de/sftp-nd-common.yml @@ -0,0 +1,159 @@ +--- + + +# --- +# vars used by roles/ansible_dependencies +# --- + + +# --- +# vars used by roles/ansible_user +# --- + + +# --- +# vars used by roles/common/tasks/basic.yml +# --- + + +# --- +# vars used by roles/common/tasks/sshd.yml +# --- + + +# --- +# vars used by roles/common/tasks/apt.yml +# --- + + +# --- +# vars used by roles/common/tasks/systemd-resolved.yml +# --- + +systemd_resolved: false + +# CyberGhost - Schnelle Verbindung mit Keine-Logs-Datenschutzrichtlinie +# Primäre DNS-Adresse: 38.132.106.139 +# Sekundäre DNS-Adresse: 194.187.251.67 +# +# Cloudflare (USA) Bester kostenloser DNS-Server für Gaming mit zuverlässigen Verbindungen +# primäre DNS-Adresse +# IPv4: 1.1.1.1 +# IPv6: 2606:4700:4700::1111 +# sekundäre DNS-Adresse +# IPv4: 1.0.0.1 +# IPv6: 2606:4700:4700::1001 +# +# Google (USA) Public DNS - Großartige Kombination aus Geschwindigkeit und Sicherheit +# primäre DNS-Adresse +# IPv4: 8.8.8.8 +# IPv6: 2001:4860:4860::8888 +# sekundäre DNS-Adresse +# IPv4: 8.8.4.4 +# IPv6: 2001:4860:4860::8844 +# +# Quad9 (CH) - Blockiert mühelos schädliche Seiten und verhindert Phishing-Betrug +# primäre DNS-Adresse +# IPv4: 9.9.9.9 +# IPv6: 2620:fe::fe +# sekundäre DNS-Adresse +# IPv4: 149.112.112.112 +# IPv6: 2620:fe::9 +# +# OpenNIC - https://www.opennic.org/ +# IPv4: 195.10.195.195 - ns31.de +# IPv4: 94.16.114.254 - ns28.de +# IPv4: 51.254.162.59 - ns9.de +# IPv4: 194.36.144.87 - ns29.de +# IPv6: 2a00:f826:8:2::195 - ns31.de +# +# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS) +# IPv4: 5.1.66.255 +# IPv6: 2001:678:e68:f000:: +# Servername für DNS-over-TLS: dot.ffmuc.net +# IPv4: 185.150.99.255 +# IPv6: 2001:678:ed0:f000:: +# Servername für DNS-over-TLS: dot.ffmuc.net +# für iOS 14+: DoT-Server-Konfiguration (unsigniert, vom PrHdb) +resolved_nameserver: + - 185.12.64.1 + - 2a01:4ff:ff00::add:2 + - 185.12.64.2 + - 2a01:4ff:ff00::add:1 + +# search domains +# +# If there are more than one search domains, then specify them here in the order in which +# the resolver should also search them +# +# resolved_domains: [] +resolved_domains: + - ~. + - oopen.de + +resolved_dnssec: false + +# dns.as250.net: 194.150.168.168 +# +resolved_fallback_nameserver: + - 194.150.168.168 + + +# --- +# vars used by roles/common/tasks/cron.yml +# --- + +cron_env_entries: + - name: PATH + job: /root/bin/admin-stuff;/root/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin + + - name: SHELL + job: /bin/bash + insertafter: PATH + + +cron_user_entries: + + - name: "Check if SSH service is running. Restart service if needed." + minute: '*/5' + hour: '*' + job: /root/bin/monitoring/check_ssh.sh + + +# --- +# vars used by roles/common/tasks/users.yml +# --- + + +# --- +# vars used by roles/common/tasks/users-systemfiles.yml +# --- + + +# --- +# vars used by roles/common/tasks/webadmin-user.yml +# --- + + +# --- +# vars used by roles/common/tasks/sudoers.yml +# --- +# +# see: roles/common/tasks/vars + + +# --- +# vars used by roles/common/tasks/caching-nameserver.yml +# --- + + +# ============================== + + +# --- +# vars used by scripts/reset_root_passwd.yml +# --- + +root_user: + name: root + password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq. diff --git a/host_vars/sftp-nd.oopen.de/sftp-nd-ipt-server.yml b/host_vars/sftp-nd.oopen.de/sftp-nd-ipt-server.yml new file mode 100644 index 0000000..4347282 --- /dev/null +++ b/host_vars/sftp-nd.oopen.de/sftp-nd-ipt-server.yml @@ -0,0 +1,18 @@ +--- +# ipt-firewall configuration for o44.oopen.de +# Generated by extract-fw-host-vars.py - review before committing! +# Place in: host_vars//-ipt-server.yml + +fw_manage_config: true + +# --- Network +fw_ext_interfaces: + - "eth0" +fw_ext_ips_v4: + - "148.251.194.37" +fw_ext_ips_v6: + - "2a01:4f8:211:f89::37" + +# --- Munin +munin_remote_ipv4: 37.27.121.227 +munin_remote_ipv6: "2a01:4f9:3070:2bda::227" diff --git a/hosts b/hosts index d73c249..3b71044 100644 --- a/hosts +++ b/hosts @@ -283,6 +283,7 @@ test-nd.oopen.de # o44 - ND cloud o44.oopen.de cl-nd.oopen.de +sftp-nd.oopen.de # o45 - mm matomom h.mc o45.oopen.de @@ -508,6 +509,7 @@ test-nd.oopen.de # o44 - ND cloud o44.oopen.de cl-nd.oopen.de +sftp-nd.oopen.de # o45 - mm matomom h.mc o45.oopen.de @@ -1721,6 +1723,7 @@ test-nd.oopen.de # o44 - ND cloud cl-nd.oopen.de +sftp-nd.oopen.de # o45 - ND mm-nd.oopen.de @@ -1964,6 +1967,7 @@ test-nd.oopen.de # o44 - ND cloud o44.oopen.de cl-nd.oopen.de +sftp-nd.oopen.de # o45 - mm matomom h.mc o45.oopen.de