Enable UFW; add more pkgs; diff encrypted pass per user; add backports by def; add more sysctls; install docker; auto-configure borg, tailscale

2024-01-06 22:32:19 +05:30
parent bda495537a
commit 630724be56
10 changed files with 363 additions and 104 deletions
--- a/host_vars/eu/healthchecks.yaml
+++ b/host_vars/eu/healthchecks.yaml
@@ -1,11 +1,14 @@
 $ANSIBLE_VAULT;1.1;AES256
-61353335333766313361356562623335303363653831383165636530333234383030303962613931
-6131353234313634623166333539326635643939343030370a326435323338343535303030393233
-34333764386332663139353665613935623230343335336235643634666362356339313165663132
-3335633432303033390a326564346637363534383239333031313361333234653136653231373363
-38663465656539653864313330313238383861373065356562373231613930653931306239356230
-63363130323235346162316361383639386531303661313531373535313563623531376161356435
-64363730663430343737353331323061303434363263313435363033613435313735333835393863
-36363861353835356238643739633139313136343830613564623764646230323566353236636666
-31626338313336616330333866326534306331373666663430313438383163643837376166316633
-3263366236656464623063636333323465363338326366663838
+64373361323136313936333662343963373332633633363033346335646639616561386261376263
+6662326539303839633939663066626465383939626139380a663763336132396536373761373938
+33363034343334313566356639313631323931643863363363373265303164306538323638356132
+6234633666303737650a643135613166313963656234336266643731376431626432626662313535
+38646363656566366637336639613766636333383436313566666462303837393338343565306139
+37626530633733386231633031623362653433353163666431626661386261343632646632636231
+39663161323139623065326361663737623431343765643565653636623839306662393832643237
+66663934653161363939373966306233346561623138353462383437623230363265626536346139
+39366365343331653232663465343630393434326437393033633864343636623437366139383730
+32373939643531376231356364353438376539626339306134353738363135303436666536393835
+33663432643764333830373337376365613332383061386461653662356237326266643466633836
+31393662323363653232326134303365323339323366396161656538663565336565343466363365
+3634
--- a/host_vars/eu/misc.yaml
+++ b/host_vars/eu/misc.yaml
@@ -0,0 +1,51 @@
+---
+ufw_allow_rules:
+  - port: 22
+    proto: tcp
+  - port: 80
+    proto: tcp
+  - port: 443
+    proto: tcp
+  - port: 443
+    proto: udp
+  - port: 53
+    proto: udp
+  - port: 53
+    proto: tcp
+  - port: 25
+    proto: tcp
+  - port: 5201
+    proto: tcp
+  - port: 6697
+    proto: tcp
+  - port: 1965
+    proto: tcp
+  - port: 51820
+    proto: udp
+  - port: 5202
+    proto: tcp
+  - port: 3389
+    proto: tcp
+bkp_source_directories:
+  - /configs
+  - /var
+  - /home
+  - /boot
+  - /usr
+  - /root
+  - /opt
+  - /zfspool
+  - /etc
+bkp_exclude_patterns:
+  - /var/log
+  - /var/lib/docker/buildkit
+  - /var/lib/docker/containers
+  - /var/lib/docker/image
+  - /var/lib/docker/overlay2
+  - /var/lib/docker/plugins
+  - /var/lib/docker/runtimes
+  - /var/lib/docker/swarm
+  - /var/lib/docker/tmp
+  - /var/lib/docker/trust
+bkp_postgresql_databases:
+  - name: invidious