blob: f93bc08ed6fac43510dfdadf3d6dfc05dba812f8 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
|
---
network_interface: "eth0"
network_ipv4_address: "10.0.0.254"
network_ipv4_gateway: "10.0.0.1"
network_ipv6_address: "2a02:0000:0000:0000::254/64"
network_ipv6_gateway: "fe00::0000:0000:0000:0001"
pihole_hostname: "dns.home.arpa"
wg_portal_hostname: "vpn.home.arpa"
grafana_hostname: "monitor.home.arpa"
prometheus_hostname: "metrics.home.arpa"
# TOTP generator: `openssl rand -base64 32 | head -c "20" | base32`
pihole_totp_secret: "CHANGEME"
pihole_password: "{{ ('changeme' | hash('sha256') | hash('sha256'))[:64] }}"
pihole_interface: "{{ network_interface }}"
pihole_dhcp_enabled: true
pihole_dhcp_start: "10.0.0.100"
pihole_dhcp_end: "10.0.0.199"
pihole_dhcp_router: "{{ network_ipv4_address }}"
pihole_dhcp_hosts:
- "ff:ff:ff:ff:ff:fe, 10.0.0.252,TV"
- "ff:ff:ff:ff:ff:ff, 10.0.0.253,Printer"
pihole_dns_hosts:
- "{{ network_ipv4_address }} {{ pihole_hostname }}"
- "{{ network_ipv4_address }} {{ wg_portal_hostname }}"
- "{{ network_ipv4_address }} {{ grafana_hostname }}"
- "{{ network_ipv4_address }} {{ prometheus_hostname }}"
wireguard_autostart_connection: "vpn2"
wireguard_connections:
# All wireguard config files are prefixed (internally) with wg-
# The following connection/interface will be named wg-vpn2
vpn2: |
[Interface]
PrivateKey = your_private_key_here
Address = 10.2.0.2/32
DNS = 10.2.0.1
[Peer]
PublicKey = server_public_key
AllowedIPs = 0.0.0.0/0
Endpoint = vpn.com:51820
gateway_enabled: true
gateway_router_interface: "{{ network_interface }}"
gateway_local_ipv4_subnet: "10.0.0.0/24"
gateway_local_ipv6_subnet: "2a02:0000:0000:0000::/64"
prometheus_host: "localhost"
prometheus_port: 9090
prometheus_retention: "15d"
prometheus_scrape_interval: "15s"
prometheus_node_exporter_port: 9100
prometheus_extra_scrape_configs:
- name: "garage"
targets: ["localhost:{{ garage_admin_port }}"]
metrics_path: "/metrics"
grafana_port: 3000
grafana_admin_user: "admin"
grafana_admin_password: "changeme"
grafana_database_type: "sqlite3"
grafana_dashboards:
- name: "node-exporter-full"
url: "https://grafana.com/api/dashboards/1860/revisions/45/download"
datasource_mappings:
- key: "000000001"
value: "prometheus"
- name: "prometheus-overview"
url: "https://grafana.com/api/dashboards/3662/revisions/2/download"
datasource_mappings:
- key: "${DS_THEMIS}"
value: "prometheus"
- name: "node-exporter-prometheus"
url: "https://grafana.com/api/dashboards/11074/revisions/9/download"
datasource_mappings:
- key: "${DS__VICTORIAMETRICS}"
value: "prometheus"
- name: "garage"
# yamllint disable-line rule:line-length
url: "https://git.deuxfleurs.fr/Deuxfleurs/garage/raw/branch/main/script/telemetry/grafana-garage-dashboard-prometheus.json"
datasource_mappings:
- key: "${DS_prometheus}"
value: "prometheus"
backup_device: "PARTLABEL=backup"
garage_rpc_secret: "changeme"
garage_access_key_id: "GK_changeme"
garage_secret_access_key: "changeme"
garage_bucket: "restic"
garage_data_dir: "/backup/garage/data"
garage_meta_dir: "/backup/garage/meta"
|
