Add network configuration and DNS settings for various hosts

- Created a new configuration file for ga-al-gw-neu with detailed network interface settings and routing rules.
- Updated existing configurations for ga-al-gw, ga-gh-gw, ga-nh-gw, ga-st-gw-ersatz, ga-st-gw, and ga-st-mail to include additional DNS servers and correct domain controller IPs.
- Disabled systemd-resolved for ga-st-mail to prevent conflicts with DNS settings.
- Added user definitions and SSH key configurations for default users across multiple hosts.

host_vars/ga-al-gw.oopen.de/ga-al-gw-common.yml

@@ -28,7 +28,7 @@ network_interfaces:
     address: 172.16.111.253
     netmask: 24
     post-up:
-      - /sbin/ip route add 172.16.211.0/24 via 172.16.111.254
+      # - /sbin/ip route add 172.16.211.0/24 via 172.16.111.254
       # User Networks Stockhausen
       - /sbin/ip route add 192.168.11.0/24 via 172.16.111.254
       - /sbin/ip route add 192.168.78.0/24 via 172.16.111.254
@@ -36,9 +36,9 @@ network_interfaces:
       # - /sbin/ip route add 192.168.72.0/24 via 172.16.111.254
       # - /sbin/ip route add 192.168.73.0/24 via 172.16.111.254
       # User Network Novalishaus
-      - /sbin/ip route add 192.168.81.0/24 via 172.16.111.254
+      # - /sbin/ip route add 192.168.81.0/24 via 172.16.111.254
       # User Network Georgshaus
-      - /sbin/ip route add 192.168.85.0/24 via 172.16.111.254
+      # - /sbin/ip route add 192.168.85.0/24 via 172.16.111.254
       # Management Network Stockhausen
       - /sbin/ip route add 10.10.11.0/24 via 172.16.111.254
       # Depreated Management Network Stokhausen
@@ -321,8 +321,12 @@ systemd_resolved: true
 #    IPv6: 2001:678:ed0:f000::
 #    Servername für DNS-over-TLS: dot.ffmuc.net
 #    für iOS 14+: DoT-Server-Konfiguration (unsigniert, vom PrHdb)
+# Note: systemd-resolved uses 'FallbackDNS' only if no 'DNS' is configured at all. So
+#       the other (internal) nameserver gateways are listed here as additional DNS servers.
 resolved_nameserver:
   - 127.0.0.1
+  - 192.168.11.1
+  - 192.168.81.1
 
 # search domains
 #
@@ -341,6 +345,7 @@ resolved_dnssec: false
 #
 resolved_fallback_nameserver:
   - 192.168.11.1
+  - 192.168.81.1
 
 
 # ---
@@ -420,6 +425,60 @@ ssh_keypair_backup_client:
     pub_key_dest: /root/.ssh/id_ed25519.pub
     target: backup.oopen.de
 
+default_user:
+  
+  - name: chris
+    password: $y$j9T$rDrvWa/KInzTe601YYf9./$WjDlaItCrgX7gu4nCs481y8WLxiRaNJCC/MgFgKuzg3
+    shell: /bin/bash
+    ssh_keys:
+      - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO90culn3sicU2chTHn40ytcTay0nUIHap0uF/5fVM6P chris@sol'
+      - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOQHMUKlDh2ufno5pZOhUY5xFljC1R5zQ/GjOHDkS58D root@sol'
+
+  - name: maadmin
+    password: $y$j9T$LCkYWvykWzrpFxIlmSUB01$e1ROfZxXAU53UdAwZAECzED4iV4LS02Q4IPQ2fycv51
+    shell: /bin/bash
+    ssh_keys:
+      - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHCQRRXy0+9D+mhLniRlUpZZ3kZdZcQKXBsGnlsFYaRi maadmin@ga-st-lsx1'
+
+  - name: wadmin
+    password: $6$sLWIXKTW$i/STlSS0LijkrnGR/XMbaxJsEbrRdDYgqyCqIr.muLN5towes8yHDCXsyCYDjuaBNKPHXyFpr8lclg5DOm9OF1
+    shell: /bin/bash
+    ssh_keys:
+      - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF5GDIFA6/i6lzkr+EP/EZM9glrK0eSR0nmrEFgUJ4n8 wadmin@ga-st-lsx1'
+      - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID17MN6fUg0D1dMSgVYIBpIy+sDBBmiaHmXRXU63TXJA wadmin@ga-st-li1303'
+      - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKtK8/rxHL1MKX5AHrgAzUYu0kV+1iYCmknpTQ7F0ham wadmin@wolf-debtest'
+      - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIcaDFxj0pYjOv/ohFVxVY2RKvy6ACZFPX9UkrUPHkbN wadmin@wolf-x1'
+
+  - name: sysadm
+    user_id: 1050
+    group_id: 1050
+    group: sysadm
+    password: $y$j9T$awYUu9oRvV39ojITZOC7D1$czTh5HHIE32PXb0vl40ayAarm39txR4jaH1QzBscqfC
+    shell: /bin/bash
+    ssh_keys:
+      - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO90culn3sicU2chTHn40ytcTay0nUIHap0uF/5fVM6P chris@sol'
+      - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOQHMUKlDh2ufno5pZOhUY5xFljC1R5zQ/GjOHDkS58D root@sol'
+      - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHCQRRXy0+9D+mhLniRlUpZZ3kZdZcQKXBsGnlsFYaRi maadmin@ga-st-lsx1'
+      - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF5GDIFA6/i6lzkr+EP/EZM9glrK0eSR0nmrEFgUJ4n8 wadmin@ga-st-lsx1'
+      - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID17MN6fUg0D1dMSgVYIBpIy+sDBBmiaHmXRXU63TXJA wadmin@ga-st-li1303'
+      - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKtK8/rxHL1MKX5AHrgAzUYu0kV+1iYCmknpTQ7F0ham wadmin@wolf-debtest'
+      - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIcaDFxj0pYjOv/ohFVxVY2RKvy6ACZFPX9UkrUPHkbN wadmin@wolf-x1'
+
+  - name: back
+    user_id: 1060
+    group_id: 1060
+    group: back
+    password: $y$j9T$wpg8hlvMpO4PAWSVdLoJq/$dgpQh4cEnbUOQkkZzKUM4S8XzNS/Md5gMmMuNTqec74
+    shell: /bin/bash
+    ssh_keys:
+      - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO90culn3sicU2chTHn40ytcTay0nUIHap0uF/5fVM6P chris@sol'
+
+sudo_users:
+  - chris
+  - sysadm
+  - maadmin
+  - wadmin
+
 
 # ---
 # vars used by roles/common/tasks/users-systemfiles.yml
@@ -462,7 +521,7 @@ bind9_gateway_acl:
       - '# Nameserver Gateway Stockhausen'
       - 192.168.11.1
       - '# Domain Controller Stockhausen'
-      - 192.168.10.3
+      - 192.168.11.3
       - '# Nameserver Gateway Altenschlirf'
       - 192.168.10.1
       - '# Domain Controller Altenschlirf'
@@ -518,6 +577,16 @@ git_firewall_repository:
   repo: https://git.oopen.de/firewall/ipt-gateway
   dest: /usr/local/src/ipt-gateway
 
+git_other_repositories:
+  - name: check_net
+    repo: https://git.oopen.de/routing/check_net
+    dest: /usr/local/src/check_net
+
+  - name: borg2-binaries
+    repo: https://git.oopen.de/backup/borg2-binaries
+    dest: /usr/local/src/borg2-binaries
+
+
 # ==============================