blob: 49fcc3ba012318157a019428285f6e6bed30b46d (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
|
---
network_interface: "eth0"
network_ipv4_address: "10.0.0.254"
network_ipv4_gateway: "10.0.0.1"
network_ipv6_address: "fd5c:fd8b:2b8c::254/64"
network_ipv6_gateway: "fd5c:fd8b:2b8c::1"
# TOTP generator: `openssl rand -base64 32 | head -c "20" | base32`
pihole_totp_secret: "CHANGEME"
pihole_password: "{{ ('changeme' | hash('sha256') | hash('sha256'))[:64] }}"
pihole_interface: "{{ network_interface }}"
pihole_dhcp_enabled: true
pihole_dhcp_start: "10.0.0.100"
pihole_dhcp_end: "10.0.0.199"
pihole_dhcp_router: "{{ network_ipv4_address }}"
pihole_dhcp_hosts:
- "ff:ff:ff:ff:ff:fe, 10.0.0.252,TV"
- "ff:ff:ff:ff:ff:ff, 10.0.0.253,Printer"
wireguard_autostart_connection: "vpn2"
wireguard_connections:
# All wireguard config files are prefixed (internally) with wg-
# The following connection/interface will be named wg-vpn2
vpn2: |
[Interface]
PrivateKey = your_private_key_here
Address = 10.2.0.2/32
DNS = 10.2.0.1
[Peer]
PublicKey = server_public_key
AllowedIPs = 0.0.0.0/0
Endpoint = vpn.com:51820
gateway_enabled: true
gateway_router_interface: "{{ network_interface }}"
gateway_local_ipv4_subnet: "10.0.0.0/24"
prometheus_host: "localhost"
prometheus_port: 9090
prometheus_retention: "15d"
prometheus_scrape_interval: "15s"
prometheus_node_exporter_port: 9100
grafana_port: 3000
grafana_admin_user: "admin"
grafana_admin_password: "changeme"
grafana_database_type: "sqlite3"
grafana_dashboards:
- id: 1860
revision: 37
name: "node-exporter-full"
datasource_mappings:
- key: "000000001"
value: "prometheus"
- id: 3662
revision: 2
name: "prometheus-overview"
datasource_mappings:
- key: "${DS_THEMIS}"
value: "prometheus"
- id: 11074
revision: 9
name: "node-exporter-prometheus"
datasource_mappings:
- key: "${DS__VICTORIAMETRICS}"
value: "prometheus"
|
