mirror of
https://github.com/dredx/prole.git
synced 2026-09-23 10:13:58 +00:00
- Remove GitLab hostname/storage config from k3s.cfg; GitLab is gone. - Update GITEA_HOSTNAME git-internal → git.prole.org - Fix MONITORING_STORAGE_CLASS local-path → merlin-local-iscsi-prometheus - Kong: route git.prole.org → gitea-http.gitea:3000 - Add svc-knoe-ingress.yaml as source-of-truth for the prole ingress (was missing; live object named svc-knoe-ingress, routes git.prole.org through Traefik → Kong → Gitea) - DNS: add git.prole.org A record → 73.15.20.166 (public front-door) - monitoring/kps-values-k3s.yaml: fix storage class for Prometheus/Alertmanager Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
227 lines
9.1 KiB
INI
227 lines
9.1 KiB
INI
; Knoe Master Configuration File
|
|
; Generated by install.py on 2026-05-04 02:15:57
|
|
; This file is used as input for Ansible deployment and k8s cluster creation.
|
|
|
|
[User]
|
|
; User-editable values; derived values below reference these by default.
|
|
KNOE_HOME = /Users/chrisfu/dev/prole
|
|
|
|
[Inputs]
|
|
; Screen-scoped inputs used for unattended replays (-S)
|
|
argocd.node_selector =
|
|
build.deploy_env = Dev
|
|
build.run_build = false
|
|
database_options.distribution = percona
|
|
database_options.ext.dblink = true
|
|
database_options.ext.pg_buffercache = true
|
|
database_options.ext.pg_cron = true
|
|
database_options.ext.pg_freespacemap = true
|
|
database_options.ext.pg_repack = true
|
|
database_options.ext.pg_stat_monitor = true
|
|
database_options.ext.pg_stat_statements = true
|
|
database_options.ext.pg_tde = true
|
|
database_options.ext.pgaudit = true
|
|
database_options.ext.pgbadger = true
|
|
database_options.ext.pgcrypto = true
|
|
database_options.ext.pgrowlocks = true
|
|
database_options.ext.pgvector = true
|
|
database_options.ext.postgis = true
|
|
database_options.ext.postgres_fdw = true
|
|
database_options.version_type = v18
|
|
dependencies.auto_install_missing = true
|
|
dependencies.brew.install = true
|
|
dependencies.containerd.install = true
|
|
dependencies.docker-buildx.install = true
|
|
dependencies.docker.install = true
|
|
dependencies.gcloud.install = true
|
|
dependencies.k3d.install = true
|
|
dependencies.kubectl.install = true
|
|
dependencies.kubectx.install = true
|
|
dependencies.op.install = true
|
|
dependencies.opentofu.install = true
|
|
dependencies.python.install = true
|
|
dependencies.verify_all = false
|
|
disk_selection.disk_type = local
|
|
disk_selection.local_path = /Users/chrisfu/dev/prole/knoe-tools-app/dist
|
|
disk_selection.removable_mount =
|
|
env_setup.CLUSTER_NAME = ${CLUSTER_NAME}
|
|
env_setup.DATABASE_NAMESPACE = ${DATABASE_NAMESPACE}
|
|
env_setup.KNOE_CONF = /Users/chrisfu/dev/prole/conf
|
|
env_setup.KNOE_HOME = /Users/chrisfu/dev/prole
|
|
env_setup.KNOE_SERVICE = /Users/chrisfu/dev/prole/etc
|
|
env_setup.PROLE_DATA = /Users/chrisfu/dev/prole/data
|
|
env_setup.PROLE_LOGS = /Users/chrisfu/dev/prole/logs
|
|
gitops.git_provider = Gitea
|
|
gitops.node_selector =
|
|
init_cluster.argocd_enabled = true
|
|
init_cluster.at_rest_encryption_enabled = true
|
|
init_cluster.cluster_env = dev
|
|
init_cluster.deployment_target = knoe-dev-cluster
|
|
init_cluster.gitops_enabled = false
|
|
init_cluster.k3s_server_url = https://myrddin.prole.org:6443
|
|
init_cluster.k3s_token = ${KNOE_SECRET:v1:-cslrAhG8WhxxJLY:vAx5MGOBcU1NBMjf4U-3y1djMDmwwOjiWkrutxPa4Li5P8RBjCBhEOCEdGP2CiPJJ6UQK-ietX-mu_5nO3yNNjpwDququT4U6lWHPEInSvUNH6ImU-HzPvm_diL2FwJtZm3sY5HgecIy2dwXB_vLnYaA_7VXt9zf0T70rw==}
|
|
init_cluster.kerberos_enabled = true
|
|
init_cluster.mode = k3d
|
|
init_cluster.start_cluster = true
|
|
init_cluster.supabase_enabled = false
|
|
init_cnpg_deploy.force_rollout = false
|
|
init_cnpg_deploy.run_deploy = true
|
|
init_db_build.run_build = true
|
|
init_password.cluster_name = ${CLUSTER_NAME}
|
|
init_password.db_host_port = 5432
|
|
init_password.db_namespace = ${DATABASE_NAMESPACE}
|
|
init_password.db_password = ${KNOE_SECRET:v1:v00gnU0lZjZUF__L:3tlFaJnbjpK1_Ufggmfp8T91VSuq1uMO}
|
|
init_password.db_password_confirm = ${KNOE_SECRET:v1:v00gnU0lZjZUF__L:3tlFaJnbjpK1_Ufggmfp8T91VSuq1uMO}
|
|
init_password.db_username = root
|
|
init_password.generate_ssh_key = true
|
|
init_scripts.run_scripts = true
|
|
kerberos_config.enabled = true
|
|
kerberos_config.kdc = 10.0.0.3
|
|
kerberos_config.password = ${KNOE_SECRET:v1:b3l7OBzEaKrOf04_:HQL8wPSazmkCgAjevoW0eNjsoOUkPi11OxZSQyOqvcD347WCoUKcztiyqubQwMj5}
|
|
kerberos_config.realm = PROLE.ORG
|
|
kerberos_config.test_connection = true
|
|
kerberos_config.user = administrator
|
|
network_scan.run = true
|
|
ollama_config.model =
|
|
ollama_config.server_host =
|
|
ollama_config.server_port = 11434
|
|
supabase_config.pv_base_dir = /synology/d005
|
|
supabase_config.pv_node =
|
|
|
|
[Global]
|
|
; Variables used by name in more than one place or assumed global scope
|
|
ARGOCD_NAMESPACE = argocd
|
|
CLUSTER_ENV = dev
|
|
CLUSTER_NAME = knoe-db
|
|
CNPG_PLACEMENT_PLAN_FILE = /Users/chrisfu/dev/prole/conf/cnpg-placement/knoe-system-knoe-db.json
|
|
CNPG_PLACEMENT_PLAN_HASH = 965d2fde4035059f
|
|
CNPG_PLACEMENT_PLAN_ID = cnpg-placement-965d2fde4035059f
|
|
DATABASE_NAMESPACE = knoe-db
|
|
DB_HOST_PORT = 5432
|
|
DB_PASSWORD = ${KNOE_SECRET:v1:UHU7cGaV3F206SiN:iWT-KbxciZyijyU2W3d_toKCoTRyCKfp}
|
|
DEPLOYMENT_MODE = k3d
|
|
DEPLOYMENT_TARGET = knoe-dev-cluster
|
|
DOCKER_PRELOAD = false
|
|
K3S_SERVER = https://myrddin.prole.org:6443
|
|
K3S_TOKEN = ${KNOE_SECRET:v1:-cslrAhG8WhxxJLY:vAx5MGOBcU1NBMjf4U-3y1djMDmwwOjiWkrutxPa4Li5P8RBjCBhEOCEdGP2CiPJJ6UQK-ietX-mu_5nO3yNNjpwDququT4U6lWHPEInSvUNH6ImU-HzPvm_diL2FwJtZm3sY5HgecIy2dwXB_vLnYaA_7VXt9zf0T70rw==}
|
|
KNOE_DB_USER = root
|
|
KNOE_HOME = /Users/chrisfu/dev/prole
|
|
KUBECONTEXT = k3d-knoe-dev-cluster
|
|
OPENTOFU_URL = http://127.0.0.1:8080
|
|
OPTIONAL_WORKLOADS_MIN_READY_SCHEDULABLE_NODES = 2
|
|
PROLE_K3S_SERVER = https://myrddin.prole.org:6443
|
|
PROLE_K3S_TOKEN = ${KNOE_SECRET:v1:-cslrAhG8WhxxJLY:vAx5MGOBcU1NBMjf4U-3y1djMDmwwOjiWkrutxPa4Li5P8RBjCBhEOCEdGP2CiPJJ6UQK-ietX-mu_5nO3yNNjpwDququT4U6lWHPEInSvUNH6ImU-HzPvm_diL2FwJtZm3sY5HgecIy2dwXB_vLnYaA_7VXt9zf0T70rw==}
|
|
PROLE_OPENTOFU_URL = http://127.0.0.1:8080
|
|
REGISTRY_NAMESPACE = knoe-system
|
|
SERVICE_NAMESPACE = knoe-system
|
|
SUPABASE_PV_BASE = /synology/d005
|
|
SUPABASE_PV_BASE_DIR = /synology/d005
|
|
|
|
[Welcome]
|
|
; No configuration values captured yet for this section.
|
|
|
|
[Dependencies]
|
|
STATUS = All installed
|
|
|
|
[Network]
|
|
AD_DC_HOST = myrddin.prole.org
|
|
AD_DC_IP = 10.0.0.3
|
|
ANSIBLE_INFRASTRUCTURE = $HOME/dev/prole/infrastructure
|
|
ANSIBLE_INVENTORY = $HOME/dev/prole/infrastructure/inventory
|
|
ANSIBLE_TOPOLOGY = {"domain":"","realm":"","internal_records":{},"ad_dc":{"host":"myrddin.prole.org","ip":"10.0.0.3"},"k3s":{"server_url":"https://myrddin.prole.org:6443","server_host":"myrddin.prole.org","token_present":false},"groups":{"iscsi":["pi.prole.org","raspberry.prole.org","myrddin.prole.org","retropie.prole.org","merlin.prole.org","gandalf.prole.org"],"pihole":["pi.prole.org","raspberry.prole.org"],"ad_dc":["myrddin.prole.org"],"k3s_servers":["myrddin.prole.org"],"k3s_agents":["merlin.prole.org","gandalf.prole.org"],"k3s_hosts:children":["k3s_servers","k3s_agents"],"linux_hosts":["pi.prole.org","raspberry.prole.org","myrddin.prole.org","retropie.prole.org","merlin.prole.org","gandalf.prole.org"],"ssl_hosts":["myrddin.prole.org"],"mariadb_primary":["merlin.prole.org"],"mariadb_replica":["raspberry.prole.org"],"mariadb:children":["mariadb_primary","mariadb_replica"],"merlin_bootstrap":["merlin"]},"hosts":{},"unmapped_hosts":["gandalf.prole.org","k3s_agents","k3s_servers","mariadb_primary","mariadb_replica","merlin","merlin.prole.org","myrddin.prole.org","pi.prole.org","raspberry.prole.org","retropie.prole.org"]}
|
|
KDC_ANSIBLE_DETECTED = 10.0.0.3
|
|
KDC_AUTO_DETECTED = 10.0.0.3
|
|
KERBEROS_AUTO_ENABLED = True
|
|
|
|
[Port Forwards]
|
|
; No configuration values captured yet for this section.
|
|
|
|
[System Environment]
|
|
KNOE_CONF = $HOME/dev/prole/conf
|
|
KNOE_HOME = $HOME/dev/prole
|
|
KNOE_SERVICE = $HOME/dev/prole/etc
|
|
PROLE_DATA = $HOME/dev/prole/data
|
|
PROLE_LOGS = $HOME/dev/prole/logs
|
|
|
|
[Monitoring]
|
|
GRAFANA_ADMIN_PASSWORD = ${KNOE_SECRET:v1:KjciJR7E96MaNboA:dLAYw8xx0bQt9qoh7CYqnbOUUCwFU4bY}
|
|
|
|
[Kerberos Authentication]
|
|
AD_PORT_FORWARD = 1
|
|
AD_PROXY_HOST_NETWORK = 1
|
|
AD_PROXY_IMAGE = alpine/socat
|
|
AD_PROXY_SERVICE = knoe-kerberos-ad-dc
|
|
AD_TCP_PORTS = 88 389 445 464 636
|
|
AD_UDP_PORTS = 88 464
|
|
ENABLED = True
|
|
KDC = 10.0.0.3
|
|
PASSWORD = ${KNOE_SECRET:v1:LRsb2eBOIlB3CksO:73aNgprchcwifxIEiaGBLLj-kZCpry1v34DADJIfUaA4ltfVQc2V6kvoBmznYBmH}
|
|
REALM = PROLE.ORG
|
|
SERVER = 10.0.0.3
|
|
STATUS = Attempted
|
|
USER = administrator
|
|
|
|
[Ollama]
|
|
OLLAMA_SERVERS = fairyland.prole.org:11434,k3d.localhost:11434,morgoth.prole.org:11434
|
|
|
|
[Optional Features]
|
|
ARGOCD_ENABLED = True
|
|
AT_REST_ENCRYPTION_ENABLED = True
|
|
GITOPS_ENABLED = False
|
|
KERBEROS_ENABLED = True
|
|
SUPABASE_ENABLED = False
|
|
|
|
[GitOps]
|
|
; No configuration values captured yet for this section.
|
|
|
|
[Database Creation]
|
|
APP_CLUSTER_NAME = knoe-dev-0
|
|
DB_CLUSTER_NAME = knoe-dev-cnpg-0
|
|
DB_USER = root
|
|
|
|
[Initialize Cluster]
|
|
ENVIRONMENT = dev
|
|
K3S_SERVER_URL = https://myrddin.prole.org:6443
|
|
K3S_TOKEN = ${KNOE_SECRET:v1:-cslrAhG8WhxxJLY:vAx5MGOBcU1NBMjf4U-3y1djMDmwwOjiWkrutxPa4Li5P8RBjCBhEOCEdGP2CiPJJ6UQK-ietX-mu_5nO3yNNjpwDququT4U6lWHPEInSvUNH6ImU-HzPvm_diL2FwJtZm3sY5HgecIy2dwXB_vLnYaA_7VXt9zf0T70rw==}
|
|
|
|
[Dev Cluster (k3d)]
|
|
CLUSTER_ENV = dev
|
|
DISPLAY_NAME = knoe-dev-cluster
|
|
KUBECTL_CONTEXT = k3d-knoe-dev-cluster
|
|
MODE = k3d
|
|
|
|
[Service Cluster (k3s)]
|
|
CLUSTER_ENV = knoe-service-cluster
|
|
DISPLAY_NAME = knoe-service-cluster
|
|
K3S_SERVER_URL = https://myrddin.prole.org:6443
|
|
K3S_TOKEN = ${KNOE_SECRET:v1:-cslrAhG8WhxxJLY:vAx5MGOBcU1NBMjf4U-3y1djMDmwwOjiWkrutxPa4Li5P8RBjCBhEOCEdGP2CiPJJ6UQK-ietX-mu_5nO3yNNjpwDququT4U6lWHPEInSvUNH6ImU-HzPvm_diL2FwJtZm3sY5HgecIy2dwXB_vLnYaA_7VXt9zf0T70rw==}
|
|
MODE = k3s
|
|
PIPELINE_URL = http://127.0.0.1:8080
|
|
|
|
[GCP]
|
|
BILLING_ACCOUNT = 01193C-25783B-3211AD
|
|
BILLING_PROJECT = plenary-truck-485623-p7
|
|
ORG_ID = 584001916389
|
|
PROJECT_ID = plenary-truck-485623-p7
|
|
|
|
[Prod Cluster (k8s)]
|
|
ARTIFACTS_DIR = $HOME/dev/prole/data/staging
|
|
CLUSTER_ENV = knoe-prod-cluster
|
|
DISPLAY_NAME = knoe-prod-cluster
|
|
MODE = k8s
|
|
PIPELINE_URL = http://127.0.0.1:8080
|
|
|
|
[Docker Build]
|
|
LOCAL_REGISTRY = localhost:5000
|
|
LOCAL_REGISTRY_INTERNAL = k3d-knoe-registry.localhost:5000
|
|
|
|
[Initialization Scripts]
|
|
STATUS = Completed
|
|
|
|
[Deployment]
|
|
MODE = k3d
|
|
TARGET = knoe-dev-cluster
|
|
|
|
[Install]
|
|
STATUS = Failed
|