Inventory cleanup; add ipt-server host_vars for all ipt hosts.
- hosts: remove unreachable/decommissioned hosts (file-ah-neu, file-ah-alt, file-km-neu, ga-al-gw-neu, gw-opp-neu, zapata-neu, zapata-alt, bbb-server, ki-fm, server28, ...) and duplicate aliases (etherpad = b.ns, cl-irights-neu = cl-irights, oolm-db = o21, devel-ruby = devel-todo). - host_vars: add <short>-ipt-server.yml (fw_manage_config: false) for all hosts running the ipt-server firewall, generated by extract-fw-host-vars.py. - host_vars: move/remove obsolete host directories, replace alias directories by symlinks (cl-lubax -> o32, cl-vbrg -> o34, oolm-db -> o21). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
Claude Opus 5.5
+28
-22
@@ -20,14 +20,15 @@ network_interface_required_packages:
|
||||
|
||||
network_interfaces:
|
||||
|
||||
- device: eth0
|
||||
headline: eth0 - LAN - Uplink static line (radio) to Stockausen
|
||||
- device: lan2
|
||||
headline: lan2 - LAN - Uplink static line (radio) to Stockausen
|
||||
auto: true
|
||||
family: inet
|
||||
method: static
|
||||
address: 172.16.111.253
|
||||
netmask: 24
|
||||
post-up:
|
||||
# Network Telefons Stockhausen
|
||||
# - /sbin/ip route add 172.16.211.0/24 via 172.16.111.254
|
||||
# User Networks Stockhausen
|
||||
- /sbin/ip route add 192.168.11.0/24 via 172.16.111.254
|
||||
@@ -63,6 +64,8 @@ network_interfaces:
|
||||
- /sbin/ip route add 10.10.111.0/24 via 172.16.111.254
|
||||
# VPN Netz Stockhausen - Novalishaus (Schlechtenwegen)
|
||||
- /sbin/ip route add 10.2.81.0/24 via 172.16.111.254
|
||||
# VPN Netz Stockhausen - Georgshaus
|
||||
- /sbin/ip route add 10.2.85.0/24 via 172.16.111.254
|
||||
# VPN Home Stockhausen
|
||||
- /sbin/ip route add 10.0.11.0/24 via 172.16.111.254
|
||||
# - FritzBoxen Stockhausen
|
||||
@@ -77,8 +80,8 @@ network_interfaces:
|
||||
- /sbin/ip route add 172.16.85.0/24 via 172.16.111.254
|
||||
|
||||
|
||||
- device: eth1
|
||||
headline: eth1 - Uplink DSL Altenschlirf via (static) line to Fritz!Box 7590
|
||||
- device: lan0
|
||||
headline: lan0 - Uplink DSL Altenschlirf via (static) line to Fritz!Box 7590
|
||||
auto: true
|
||||
family: inet
|
||||
method: static
|
||||
@@ -91,8 +94,8 @@ network_interfaces:
|
||||
# search: ga.netz
|
||||
|
||||
|
||||
- device: eth2
|
||||
headline: eth2 - LAN main network Altenschlirf
|
||||
- device: lan1
|
||||
headline: lan1 - LAN main network Altenschlirf
|
||||
auto: true
|
||||
family: inet
|
||||
method: static
|
||||
@@ -100,19 +103,19 @@ network_interfaces:
|
||||
netmask: 24
|
||||
post-up:
|
||||
# - VLAN 221 (Ubiquiti UniFi Accesspoints)
|
||||
- /sbin/ip link add link eth2 name eth2.221 type vlan id 221
|
||||
- /sbin/ip link add link eth2 name eth2.231 type vlan id 231
|
||||
- /sbin/ip link add link lan1 name lan1.221 type vlan id 221
|
||||
- /sbin/ip link add link lan1 name lan1.231 type vlan id 231
|
||||
|
||||
- device: eth2:ns
|
||||
headline: eth2:ns - Alias on eth2 (Nameserver)
|
||||
- device: lan1:ns
|
||||
headline: lan1:ns - Alias on lan1 (Nameserver)
|
||||
auto: true
|
||||
family: inet
|
||||
method: static
|
||||
address: 192.168.10.1
|
||||
netmask: 32
|
||||
|
||||
- device: eth2:ap
|
||||
headline: eth2:ap - Alias on eth2 (Network Accesspoints)
|
||||
- device: lan1:ap
|
||||
headline: lan1:ap - Alias on lan1 (Network Accesspoints)
|
||||
auto: true
|
||||
family: inet
|
||||
method: static
|
||||
@@ -137,9 +140,9 @@ network_interfaces:
|
||||
- /sbin/ip route add 10.123.14.0/24 via 10.122.1.14
|
||||
- /sbin/ip route add 10.123.15.0/24 via 10.122.1.15
|
||||
|
||||
- device: eth2.221
|
||||
- device: lan1.221
|
||||
# use only once per device (for the first device entry)
|
||||
headline: eth2 - VLAN 221 (Ubiquiti UniFi Accesspoints Guest NET)
|
||||
headline: lan1 - VLAN 221 (Ubiquiti UniFi Accesspoints Guest NET)
|
||||
|
||||
# auto & allow are only used for the first device entry
|
||||
allow: [] # array of allow-[stanzas] eg. allow-hotplug
|
||||
@@ -157,8 +160,8 @@ network_interfaces:
|
||||
mtu:
|
||||
scope:
|
||||
|
||||
- device: eth2.231
|
||||
headline: eth2 - VLAN 231 (Ubiquiti UniFi Accesspoints private NET)
|
||||
- device: lan1.231
|
||||
headline: lan1 - VLAN 231 (Ubiquiti UniFi Accesspoints private NET)
|
||||
auto: true
|
||||
family: inet
|
||||
method: static
|
||||
@@ -217,7 +220,7 @@ network_interfaces:
|
||||
|
||||
# optional vlan settings | vlan: {}
|
||||
# vlan: {}
|
||||
# raw-device: 'eth0'
|
||||
# raw-device: 'lan2'
|
||||
vlan: {}
|
||||
|
||||
# inline hook scripts
|
||||
@@ -229,8 +232,8 @@ network_interfaces:
|
||||
post-down: [] # post-down script lines
|
||||
|
||||
|
||||
- device: eth4
|
||||
headline: eth4 - Management Network Altenschlirf
|
||||
- device: lan4
|
||||
headline: lan4 - Management Network Altenschlirf
|
||||
auto: true
|
||||
family: inet
|
||||
method: static
|
||||
@@ -238,8 +241,8 @@ network_interfaces:
|
||||
netmask: 24
|
||||
|
||||
|
||||
- device: eth5
|
||||
headline: eth5 - Network Telefons Altenschlirf
|
||||
- device: lan5
|
||||
headline: lan5 - Network Telefons Altenschlirf
|
||||
auto: true
|
||||
family: inet
|
||||
method: static
|
||||
@@ -426,7 +429,7 @@ ssh_keypair_backup_client:
|
||||
target: backup.oopen.de
|
||||
|
||||
default_user:
|
||||
|
||||
|
||||
- name: chris
|
||||
password: $y$j9T$rDrvWa/KInzTe601YYf9./$WjDlaItCrgX7gu4nCs481y8WLxiRaNJCC/MgFgKuzg3
|
||||
shell: /bin/bash
|
||||
@@ -586,6 +589,9 @@ git_other_repositories:
|
||||
repo: https://git.oopen.de/backup/borg2-binaries
|
||||
dest: /usr/local/src/borg2-binaries
|
||||
|
||||
- name: borg2-backup
|
||||
repo: https://git.oopen.de/backup/borg2-backup
|
||||
dest: /root/bin/borg2-backup
|
||||
|
||||
# ==============================
|
||||
|
||||
Reference in New Issue
Block a user