machine_setup/ansible/environments/colo/host_vars/mrmanager

os_flavor: "freebsd"
zfs_snapshot_datasets:
  - path: zroot/freebsd/main/be
  - path: zdata/vm
  - path: zdata/vm/poudriere/disk0
    include: false
  - path: zdata/k8spersistent
sshd_enabled: true
loader_conf: "mrmanager_loader.conf"
rc_conf: "mrmanager_rc.conf"
network_rc: "mrmanager_network.conf"
routing_rc: "mrmanager_routing.conf"
pf_config: "mrmanager_pf.conf"
pflog_conf:
  - name: 0
    dev: pflog0
cputype: "amd"
hwpstate: true
etc_hosts: {}
wireguard_directory: mrmanager
enabled_wireguard:
  - colo
jail_zfs_dataset: zdata/jail
jail_zfs_dataset_mountpoint: /jail
jail_canmount: "on"
jail_list:
  - name: nat_dhcp
    enabled: true
    conf:
      src: nat_dhcp
  - name: admin_git
    enabled: true
    conf:
      src: admin_git
  - name: public_dns
    enabled: true
    conf:
      src: public_dns
bhyve_dataset: zdata/vm
bhyve_canmount: "on"
# efi_dev: /dev/gpt/EFI
devfs_rules: "mrmanager_devfs.rules"
users:
  talexander:
    initialize: true
    uid: 11235
    gid: 11235
    groups:
      - name: wheel
    authorized_keys:
      - yubikey
      - main_fido
      - backup_fido
  mole:
    initialize: true
    authorized_keys:
      - mole
Minimal shell setup for colo server. 2023-05-27 23:10:44 -04:00			`os_flavor: "freebsd"`
			`zfs_snapshot_datasets:`
Support omitting datasets from automatic snapshotting. 2023-08-20 23:12:09 -04:00			`- path: zroot/freebsd/main/be`
			`- path: zdata/vm`
			`- path: zdata/vm/poudriere/disk0`
			`include: false`
			`- path: zdata/k8spersistent`
Minimal shell setup for colo server. 2023-05-27 23:10:44 -04:00			`sshd_enabled: true`
Add the base role to mrmanager. 2023-05-28 13:18:56 -04:00			`loader_conf: "mrmanager_loader.conf"`
			`rc_conf: "mrmanager_rc.conf"`
Switch to a lagg interface. This is to avoid depending on the ethernet cable being plugged into a specific port. 2023-05-28 14:22:49 -04:00			`network_rc: "mrmanager_network.conf"`
			`routing_rc: "mrmanager_routing.conf"`
Add firewall to mrmanager. 2023-05-28 16:01:02 -04:00			`pf_config: "mrmanager_pf.conf"`
			`pflog_conf:`
			`- name: 0`
			`dev: pflog0`
Add AMD cpu role for mrmanager. 2023-05-28 16:51:17 -04:00			`cputype: "amd"`
Set up multiple sound server options for FreeBSD. 2024-05-18 09:52:18 -04:00			`hwpstate: true`
Add the ntp, nvme, hosts, and build roles. 2023-05-28 17:30:41 -04:00			`etc_hosts: {}`
Add wireguard configs for mrmanager. 2023-05-28 17:51:09 -04:00			`wireguard_directory: mrmanager`
			`enabled_wireguard:`
			`- colo`
Set up the nat_dhcp jail for mrmanager. 2023-05-28 22:36:31 -04:00			`jail_zfs_dataset: zdata/jail`
Migrate to abbreviated jail folder structure. 2024-06-29 15:21:27 -04:00			`jail_zfs_dataset_mountpoint: /jail`
Set up the nat_dhcp jail for mrmanager. 2023-05-28 22:36:31 -04:00			`jail_canmount: "on"`
			`jail_list:`
			`- name: nat_dhcp`
			`enabled: true`
			`conf:`
			`src: nat_dhcp`
Add admin_git jail. 2023-06-17 16:28:43 -04:00			`- name: admin_git`
			`enabled: true`
			`conf:`
			`src: admin_git`
Add a public_dns jail. This jail will host the authoritative zone for my domains. 2023-06-18 13:45:45 -04:00			`- name: public_dns`
			`enabled: true`
			`conf:`
			`src: public_dns`
Set up bhyve for mrmanager. 2023-05-28 23:09:36 -04:00			`bhyve_dataset: zdata/vm`
			`bhyve_canmount: "on"`
Set up the nat_dhcp jail for mrmanager. 2023-05-28 22:36:31 -04:00			`# efi_dev: /dev/gpt/EFI`
			`devfs_rules: "mrmanager_devfs.rules"`
Add mole to mrmanager. 2023-08-02 18:15:22 -04:00			`users:`
			`talexander:`
			`initialize: true`
			`uid: 11235`
			`gid: 11235`
			`groups:`
			`- name: wheel`
			`authorized_keys:`
			`- yubikey`
			`- main_fido`
			`- backup_fido`
			`mole:`
			`initialize: true`
			`authorized_keys:`
			`- mole`