machine_setup/ansible/environments/home/host_vars/homeserver

os_flavor: "freebsd"
zfs_snapshot_datasets:
  - path: zroot/freebsd/computer/be
  - path: zmass/encrypted/vm
sshd_enabled: true
sshd_conf: "sshd_config"
pf_config: "homeserver_pf.conf"
pflog_conf:
  - name: 0
    dev: pflog0
network_rc: "homeserver_network.conf"
rc_conf: "homeserver_rc.conf"
loader_conf: "homeserver_loader.conf"
netgraph_config: "setup_netgraph_homeserver"
cputype: "intel"
cpu_opt: broadwell
hwpstate: false
build_user:
  name: talexander
  group: talexander
jail_zfs_dataset: zmass/encrypted/jails
jail_zfs_dataset_mountpoint: /jail/main
jail_canmount: "on"
jail_bemount: "on"
jail_list:
  - name: nat_dhcp
    dataset: zmass/unencrypted/jails
    enabled: true
    conf:
      src: nat_dhcp
  - name: cloak
    conf:
      src: cloak
  - name: dagger
    conf:
      src: dagger
  - name: mumble
    conf:
      src: mumble
    persist:
      - name: mumbledb
        mount: /var/db/murmur
bhyve_dataset: zmass/encrypted/vm
bhyve_list: []
bhyve_canmount: "on"
bhyve_bemount: "on"
wireguard_directory: homeserver
enabled_wireguard:
  - wgh
Configure passwordless sudo for wheel group. 2022-10-09 23:14:55 -04:00			`os_flavor: "freebsd"`
Start of zrepl role. Currently only doing FreeBSD. 2022-10-10 22:31:22 -04:00			`zfs_snapshot_datasets:`
Snapshot the VMs on homeserver. 2023-08-21 00:25:33 -04:00			`- path: zroot/freebsd/computer/be`
			`- path: zmass/encrypted/vm`
Start an sshd role. 2022-10-11 23:51:42 -04:00			`sshd_enabled: true`
Copy over sshd config. 2022-10-12 00:01:57 -04:00			`sshd_conf: "sshd_config"`
Create a firewall role that installs a pf.conf on FreeBSD. Does not yet configure pflog nor does it do anything on Linux. 2022-10-12 21:23:40 -04:00			`pf_config: "homeserver_pf.conf"`
Add pflog configuration. 2022-10-12 22:11:39 -04:00			`pflog_conf:`
			`- name: 0`
			`dev: pflog0`
Add a FreeBSD network role. 2022-10-14 01:29:40 -04:00			`network_rc: "homeserver_network.conf"`
Add copying of rc.conf. 2022-10-14 01:55:15 -04:00			`rc_conf: "homeserver_rc.conf"`
Add loader.conf. 2022-10-14 01:59:15 -04:00			`loader_conf: "homeserver_loader.conf"`
Add netgraph config for the homeserver. 2022-11-04 00:33:37 -04:00			`netgraph_config: "setup_netgraph_homeserver"`
Import the FreeBSD cpu role. 2022-10-15 19:51:54 -04:00			`cputype: "intel"`
Add a FreeBSD build role. 2022-10-15 21:40:41 -04:00			`cpu_opt: broadwell`
Add support for speedshift (hardware p-states). 2022-10-15 20:54:58 -04:00			`hwpstate: false`
Add a FreeBSD build role. 2022-10-15 21:40:41 -04:00			`build_user:`
			`name: talexander`
			`group: talexander`
Start migrating jails to fileserver. 2022-11-03 00:07:44 -04:00			`jail_zfs_dataset: zmass/encrypted/jails`
			`jail_zfs_dataset_mountpoint: /jail/main`
Make canmount configurable for bhyve and jails. 2022-11-12 17:04:25 -05:00			`jail_canmount: "on"`
			`jail_bemount: "on"`
Start migrating jails to fileserver. 2022-11-03 00:07:44 -04:00			`jail_list:`
Move the nat_dhcp jail to an unencrypted dataset so it can be available at boot. 2022-12-02 22:13:32 -05:00			`- name: nat_dhcp`
			`dataset: zmass/unencrypted/jails`
			`enabled: true`
			`conf:`
			`src: nat_dhcp`
Start migrating jails to fileserver. 2022-11-03 00:07:44 -04:00			`- name: cloak`
			`conf:`
			`src: cloak`
			`- name: dagger`
			`conf:`
			`src: dagger`
Add mumble jail and switch to new wifi adapter. 2022-11-11 21:30:47 -05:00			`- name: mumble`
			`conf:`
			`src: mumble`
			`persist:`
			`- name: mumbledb`
			`mount: /var/db/murmur`
Start migrating jails to fileserver. 2022-11-03 00:07:44 -04:00			`bhyve_dataset: zmass/encrypted/vm`
			`bhyve_list: []`
Make canmount configurable for bhyve and jails. 2022-11-12 17:04:25 -05:00			`bhyve_canmount: "on"`
			`bhyve_bemount: "on"`
Add homeserver wireguard config. 2022-12-04 02:37:20 -05:00			`wireguard_directory: homeserver`
			`enabled_wireguard:`
			`- wgh`