Add host variable files for various hosts and update DNS configurations

- Created `wiki-common.yml` for wiki.cadus.org with DNS settings and git repository configurations. - Added `www-common.yml` for www.oopen.de including SFTP group creation and root user password. - Introduced `zapata-alt-common.yml` for zapata-alt.opp.netz with network interface configurations, Samba user reorganize 'host_vars'
2026-07-17 18:26:32 +02:00
parent ed8887e5be
commit ef7c88f64d
221 changed files with 190 additions and 2869 deletions
@@ -0,0 +1,126 @@
+---
+# ---
+# vars used by roles/common/tasks/basic.yml
+# ---
+
+# ---
+# vars used by roles/common/tasks/sshd.yml
+# ---
+
+sshd_permit_root_login: !!str "prohibit-password"
+
+# ---
+# vars used by apt.yml
+# ---
+
+# ---
+# vars used by roles/common/tasks/systemd-resolved.yml
+# ---
+
+systemd_resolved: true
+
+resolved_nameserver:
+  - 185.12.64.2
+  - 185.12.64.1
+  - 2a01:4ff:ff00::add:2
+  - 2a01:4ff:ff00::add:1
+
+resolved_domains:
+  - ~.
+  - oopen.de
+
+resolved_dnssec: false
+
+resolved_fallback_nameserver:
+  - 194.150.168.168
+
+# ---
+# vars used by roles/common/tasks/cron.yml
+# ---
+
+cron_env_entries:
+  - name: PATH
+    job: /root/bin/admin-stuff:/root/bin:/usr/local/apache2/bin:/usr/local/php/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+
+  - name: SHELL
+    job: /bin/bash
+    insertafter: PATH
+
+cron_user_special_time_entries:
+  - name: "Restart DNS Cache service 'systemd-resolved'"
+    special_time: reboot
+    job: "sleep 5 ; /bin/systemctl restart systemd-resolved"
+    insertafter: PATH
+
+cron_user_entries:
+  - name: "Check if webservices sre running. Restart if necessary"
+    minute: "*/5"
+    hour: "*"
+    job: /root/bin/monitoring/check_webservice_load.sh
+
+  - name: "Check if SSH service is running. Restart service if needed."
+    minute: "*/5"
+    hour: "*"
+    job: /root/bin/monitoring/check_ssh.sh
+
+  - name: "Check if Postfix Mailservice is up and running?"
+    minute: "*/15"
+    hour: "*"
+    job: /root/bin/monitoring/check_postfix.sh
+
+  - name: "Check Postfix E-Mail LOG file for 'fatal' errors.."
+    minute: "*/5"
+    hour: "*"
+    job: /root/bin/postfix/check-postfix-fatal-errors.sh
+
+  - name: "Optimize mysql tables"
+    minute: "53"
+    hour: "04"
+    job: /root/bin/mysql/optimize_mysql_tables.sh
+
+  - name: "Flush query cache for mysql tables"
+    minute: "27"
+    hour: "04"
+    job: /root/bin/mysql/flush_query_cache.sh
+
+  - name: "Flush Host cache"
+    minute: "17"
+    hour: "05"
+    job: /root/bin/mysql/flush_host_cache.sh
+
+  - name: "Run occ file:scan for each cloud account"
+    minute: "02"
+    hour: "23"
+    job: /root/bin/nextcloud/occ_maintenance.sh -s cloud-test.ndhosting.de
+
+  - name: "Background job for nextcloud instance 'cloud-test.ndhosting.de"
+    minute: "*/15"
+    hour: "*"
+    job: sudo -u "www-data" /usr/local/php/bin/php  -f /var/www/cloud-test.ndhosting.de/htdocs/cron.php
+
+  - name: "Generate/Renew Let's Encrypt Certificates if needed (using dehydrated script)"
+    minute: "23"
+    hour: "05"
+    job: /var/lib/dehydrated/cron/dehydrated_cron.sh
+
+  - name: "Check whether all certificates are included in the VHOST configurations"
+    minute: "33"
+    hour: "05"
+    job: /var/lib/dehydrated/tools/update_ssl_directives.sh
+
+# ---
+# vars used by roles/common/tasks/users.yml
+# ---
+
+sudo_users:
+  - chris
+  - sysadm
+  - localadmin
+
+# ---
+# vars used by roles/common/tasks/sudoers.yml
+# ---
+
+sudoers_file_user_privileges:
+  - name: back
+    entry: "ALL=(www-data) NOPASSWD: /usr/local/php/bin/php"
@@ -0,0 +1,24 @@
+---
+# ipt-firewall configuration for a.mx.oopen.de
+# Generated by extract-fw-host-vars.py - review before committing!
+# Place in: host_vars/<hostname>/ipt_firewall.yml
+
+fw_manage_config: true
+
+# --- Network
+fw_ext_interfaces:
+  - "eth0"
+fw_ext_ips_v4:
+  - "135.181.90.132"
+fw_ext_ips_v6:
+  - "2a01:4f9:c014:1ba8::1"
+
+# --- Munin
+munin_remote_ipv4: 37.27.121.227
+munin_remote_ipv6: "2a01:4f9:3070:2bda::227"
+
+# --- HTTP
+fw_http_server_ips: $ext_1_ip
+
+# --- Mail
+fw_mail_client_ips: $ext_1_ip