mirror of
https://github.com/dredx/prole.git
synced 2026-09-24 15:04:31 +00:00
86990af9c8
- New acme role: installs acme.sh, issues certs for myrddin/merlin/gandalf via DNS-01 (name.com API), installs cert files to /etc/ssl/certs/prole/, sets up renewal cron. rc=2 (already valid) treated as ok. - New playbooks/acme.yml: runs acme role on myrddin (issues all 3 host certs) - New playbooks/certmgr.yml: cert-manager and letsencrypt-prod ClusterIssuer (HTTP-01/Traefik) for external endpoints (db/svc/api.prole.org) - Add vault references for name.com API creds to group_vars/all/vars.yml - Add prole_ssl_src_dir and prole_ssl_files to myrddin/merlin/gandalf host_vars Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
43 lines
1.0 KiB
YAML
43 lines
1.0 KiB
YAML
---
|
|
hostname: gandalf
|
|
fqdn: gandalf.prole.org
|
|
ansible_host: 10.0.0.7
|
|
ansible_user: ansible
|
|
|
|
k3s_enabled: true
|
|
k3s_role: agent
|
|
k3s_cluster_init: false
|
|
k3s_server_url: "https://myrddin.prole.org:6443"
|
|
|
|
k3s_service_node_labels:
|
|
- "prole.org/node-role=general"
|
|
k3s_node_taints: []
|
|
|
|
k3s_rancher_mount_required: true
|
|
k3s_rancher_mount_src: /external/rancher
|
|
k3s_rancher_mount_fstype: none
|
|
k3s_rancher_mount_opts: bind
|
|
k3s_rancher_mount_passno: 0
|
|
|
|
k3s_required_mounts:
|
|
- /var/lib/rancher
|
|
- /synology/d005
|
|
|
|
iscsi_portal: 10.0.0.203:3260
|
|
|
|
iscsi_targets:
|
|
# PROLE-DATA-5
|
|
- iqn: "iqn.2000-01.com.synology:synology.Target-14.292d45194a1"
|
|
chap_user: "prole"
|
|
chap_password: "{{ vault_iscsi_prole_password }}"
|
|
mounts:
|
|
- name: d005
|
|
path: /synology/d005
|
|
device: /dev/disk/by-path/ip-10.0.0.203:3260-iscsi-iqn.2000-01.com.synology:synology.Target-14.292d45194a1-lun-1-part1
|
|
fstype: ext4
|
|
opts: "_netdev,noatime,nofail"
|
|
|
|
prole_ssl_src_dir: /etc/ssl/certs/prole
|
|
prole_ssl_files:
|
|
- gandalf.crt
|
|
- gandalf.key |