machine_setup/ansible/environments/home/host_vars/homeserver

80 lines
1.7 KiB
Plaintext
Raw Normal View History

os_flavor: "freebsd"
2024-04-22 21:23:20 +00:00
custom_repo: "https://freebsdpkg.fizz.buzz/repo/14broadwell-default-computer"
pkgbase_url: "https://freebsdpkg.fizz.buzz/pkgbase/14broadwell-repo/FreeBSD:14:amd64/latest"
zfs_snapshot_datasets:
2023-08-21 04:25:33 +00:00
- path: zroot/freebsd/computer/be
- path: zmass/encrypted/vm
2024-04-22 21:23:20 +00:00
users:
talexander:
initialize: true
uid: 11235
gid: 11235
groups:
- name: wheel
- name: video
- name: u2f
- name: operator # To be able to shutdown without root
- name: webcamd
gid: 145
authorized_keys:
- yubikey
- main_fido
- backup_fido
- homeassistant
gitconfig: "gitconfig_home"
2022-10-12 03:51:42 +00:00
sshd_enabled: true
2022-10-12 04:01:57 +00:00
sshd_conf: "sshd_config"
pf_config: "homeserver_pf.conf"
2022-10-13 02:11:39 +00:00
pflog_conf:
- name: 0
dev: pflog0
2022-10-14 05:29:40 +00:00
network_rc: "homeserver_network.conf"
2022-10-14 05:55:15 +00:00
rc_conf: "homeserver_rc.conf"
2022-10-14 05:59:15 +00:00
loader_conf: "homeserver_loader.conf"
2022-10-15 23:51:54 +00:00
cputype: "intel"
hwpstate: false
2023-11-24 15:25:16 +00:00
devfs_rules: "homeserver_devfs.rules"
2022-11-03 04:07:44 +00:00
jail_zfs_dataset: zmass/encrypted/jails
jail_zfs_dataset_mountpoint: /jail
jail_canmount: "on"
jail_bemount: "on"
2022-11-03 04:07:44 +00:00
jail_list:
- name: nat_dhcp
dataset: zmass/unencrypted/jails
enabled: true
conf:
src: nat_dhcp
2022-11-03 04:07:44 +00:00
- name: cloak
conf:
src: cloak
- name: dagger
conf:
src: dagger
2024-06-30 20:18:55 +00:00
- name: olddagger
conf:
src: olddagger
2024-06-30 03:32:36 +00:00
- name: sftp
conf:
src: sftp
2024-07-01 03:02:23 +00:00
fstab: sftp_fstab
2024-07-02 02:01:07 +00:00
- name: bastion
conf:
src: bastion
fstab: fstab_bastion
- name: certificate
conf:
src: certificate
2024-06-30 16:30:46 +00:00
# - name: mumble
# conf:
# src: mumble
# persist:
# - name: mumbledb
# mount: /var/db/murmur
2022-11-03 04:07:44 +00:00
bhyve_dataset: zmass/encrypted/vm
bhyve_list: []
bhyve_canmount: "on"
bhyve_bemount: "on"
2022-12-04 07:37:20 +00:00
wireguard_directory: homeserver
enabled_wireguard:
- wgh