mirror of
https://github.com/fscotto/infra.git
synced 2026-10-03 13:29:58 +00:00
4bd6aafb53
* Design gated Atlas iCloudPD migration target * Target Atlas iCloudPD photos to Photobook * Record isolated iCloudPD Photobook ACL validation * Record Aegis iCloudPD source audit gap * Verify iCloudPD backup source scope and Borg access * Record Atlas iCloudPD deployment gate checks * Pin iCloudPD photo file and directory modes * Validate inactive iCloudPD Quadlet on Atlas generator * Keep iCloudPD in Archive and reserve Photobook for Immich * Prepare guarded Aegis iCloudPD retirement * Declare inactive Atlas iCloudPD storage and Quadlet * Retire Aegis iCloudPD from desired state * Clear retired Aegis iCloudPD failed-unit state * Remove completed iCloudPD retirement tasks from Aegis * Record initial Atlas iCloudPD service start * Manage Atlas iCloudPD config from Vault * Fix Atlas iCloudPD traceroute startup and config drift * Use Atlas Vault key for iCloudPD Apple ID * Add HEIC decoding to Fedora desktops * Record completed iCloudPD ingestion and remaining recovery checks
45 lines
1.5 KiB
YAML
45 lines
1.5 KiB
YAML
---
|
|
ansible_host: aegis
|
|
ansible_connection: ssh
|
|
ansible_user: pi
|
|
ansible_become: true
|
|
ansible_python_interpreter: /usr/bin/python3
|
|
# Avoid PTY framing around module JSON on this remote Fedora IoT host.
|
|
ansible_ssh_use_tty: false
|
|
|
|
aegis_lan_subnet: 192.168.178.0/24
|
|
aegis_adguard_web_port: 80
|
|
aegis_network_connection_name: FRITZ!Box 7530 NR
|
|
aegis_network_connection_uuid: a52fda3d-3eb6-351f-bf04-753edcb76944
|
|
aegis_host_dns_servers:
|
|
- 192.168.178.1
|
|
aegis_host_dns_search_domains:
|
|
- fritz.box
|
|
|
|
# Aegis is the internal WireGuard endpoint and NAT gateway for the LAN.
|
|
wireguard_overlay_enabled: true
|
|
wireguard_address: 10.0.0.2/24
|
|
wireguard_enable_ipv4_forwarding: true
|
|
wireguard_reload_rootful_podman_networks: true
|
|
wireguard_forwarding_policies:
|
|
- name: aegis-wireguard-to-lan
|
|
ingress_zone: wireguard
|
|
egress_zone: public
|
|
source: 10.0.0.0/24
|
|
destination: "{{ aegis_lan_subnet }}"
|
|
masquerade: true
|
|
wireguard_peers:
|
|
- name: prometheus
|
|
host: prometheus
|
|
endpoint: "{{ hostvars['prometheus']['ansible_host'] }}:{{ hostvars['prometheus']['wireguard_listen_port'] }}"
|
|
allowed_ips:
|
|
- 10.0.0.0/24
|
|
persistent_keepalive: 25
|
|
aegis_ssh_authorized_keys:
|
|
- name: ikaros
|
|
key: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINrIxXjA3ffPwziKGR5gzc4gAoBehQPlnEMcXF4Wl0ZS ikaros"
|
|
- name: nymph
|
|
key: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEH/7GJfGt0ZVmKeEzceoFkFkeCXFryKK9vAbaip+HCx nymph"
|
|
- name: siren
|
|
key: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA95wYlzpfN3rjUhpMeP4KHn8I6ZrjQXoDTgwgRIa++b siren"
|