all: vars: # Environment-wide data external_domain: aninix.net replica_domain: "MSN0.AniNIX.net" time_zone: "America/Chicago" # Services used by all router: 10.0.1.1 netmask: 24 dhcprange: '10.0.1.224,10.0.1.254,255.255.255.0,12h' staticrange: '10.0.1.1,10.0.1.223,255.255.255.0,12h' dns: "10.0.1.2" logserver: "10.0.1.16" webfront: "10.0.1.3" mirroruri: "http://Maat.MSN0.AniNIX.net:9129/repo/archlinux/$repo/os/$arch" # Standards daemon_shell: /sbin/nologin user_shell: /bin/bash ansible_become_method: sudo ansible_become_user: root static: false wireless_ssid: 'Shadowfeed' ansible_python_interpreter: auto_silent ldap: server: "10.0.1.3" orgdn: "dc=aninix,dc=net" binduser: 'binduser' userou: 'ou=People' organization: # Information about the group admin: 'DarkFeather' email: 'ircs://irc.aninix.net:6697/DarkFeather' displayname: 'AniNIX' gpgkey: '904DE6275579CB589D85720C1CC1E3F4ED06F296' ssl: # Standard SSL cryptographic standards identity: 'aninix.net-0001' # The Let's Encrypt identity to use ciphersuite: "!NULL:!SSLv2:!SSLv3:!TLSv1:EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH" children: managed: children: physical: # 10.0.1.0/28 hosts: Nazara: ipinterface: eth0 ip: 10.0.1.2 mac: B8:27:EB:B6:AA:0C static: true Node1: ipinterface: enp1s0 ip: 10.0.1.5 mac: FA:EC:43:87:4D:2D tap: true ups: 'aps' Node2: ipinterface: enp1s0 ip: 10.0.1.7 mac: 56:02:ef:2c:1f:7c tap: true ups: 'cyberpower' Node3: ipinterface: enp1s0 ip: 10.0.1.8 mac: B2:C6:2C:02:B2:6E tap: true Nodelet0: ipinterface: eth0 ip: 10.0.1.9 mac: b8:27:eb:9a:73:dd static: true k3s_primary: true Nodelet1: ipinterface: eth0 ip: 10.0.1.10 mac: E4:5F:01:01:FF:9C static: true Nodelet2: ipinterface: eth0 ip: 10.0.1.11 mac: E4:5F:01:01:FF:D5 static: true Nodelet3: ipinterface: eth0 ip: 10.0.1.12 mac: E4:5F:01:01:FF:96 static: true Nodelet4: ipinterface: eth0 ip: 10.0.1.13 mac: E4:5F:01:01:FF:E4 static: true virtual: # 10.0.1.16/28 vars: hosts: Sharingan: node: Node2 ip: 10.0.1.16 ipinterface: ens3 mac: 00:15:5D:01:02:10 cores: 4 memory: 4 vnc: 8 bridge: br0 uefi: true siem: true disks: - '-drive format=raw,index=0,media=disk,file=/dev/sdc' # On hold because of https://aninix.net/DarkFeather/MSN0/issues/6 holdpkg: "elasticsearch graylog mongodb44-bin mongodb-tools-bin" DarkNet: node: Node2 ipinterface: ens3 ip: 10.0.1.17 mac: 00:15:5D:01:02:05 cores: 4 memory: 4 vnc: 9 bridge: br0 disks: - '-drive format=raw,index=0,media=disk,file=/dev/sdb' wolfpack_config: 'gitea@foundation.aninix.net:DarkFeather/WolfPack-Config.git' Maat: node: Node2 ip: 10.0.1.18 ipinterface: ens3 mac: 00:15:5d:01:02:07 cores: 2 memory: 2 bridge: br0 vnc: 7 disks: - '-drive format=qcow2,l2-cache-size=8M,file=/mnt/cage2/vm/Maat.qcow2' Yggdrasil: node: Node1 ipinterface: enp1s0f0 ip: 10.0.1.3 mac: 00:25:90:0d:6e:86 static: true sslidentity: aninix.net-0001 secdetection: true iptv_location: "Milwaukee|Madison" aether_source: true cores: 8 memory: 16 bridge: br0 vnc: 1 disks: - '-drive format=raw,index=0,media=disk,file=/dev/sda' - '-drive format=raw,index=0,media=disk,file=/dev/sdb' - '-drive format=raw,index=0,media=disk,file=/dev/sdc' - '-drive format=raw,index=0,media=disk,file=/dev/sdd' geth_hubs: # 10.0.1.32/28 vars: motion_enabled: yes hosts: Geth-Hub-1: ip: 10.0.1.32 mac: 84:16:F9:14:15:C5 rotate: 0 remote: NS-RC4NA-14 Geth-Hub-2: ip: 10.0.1.33 mac: 84:16:F9:13:B6:E6 motion_enabled: no rotate: 180 remote: NS-RC4NA-14 Geth-Hub-3: ip: 10.0.1.34 mac: b8:27:eb:60:73:68 rotate: 90 remote: LG-AKB73715608 unmanaged: children: # Both OVA groups are in the same subnet -- test_ovas aren't monitored ovas: # 10.0.1.48/28 hosts: Geth: node: Node2 ip: 10.0.1.49 mac: DE:8B:9E:19:55:1E cores: 2 memory: 2 vnc: 6 bridge: br0 uefi: true disks: - '-drive format=qcow2,l2-cache-size=8M,file=/mnt/cage2/vm/hassos_ova-5.13.qcow2' test_ovas: # 10.0.1.48/28 hosts: TDS-Jump: node: Node2 ip: 10.0.1.48 mac: 00:15:5d:01:02:08 cores: 2 memory: 2 vnc: 4 bridge: br0 disks: - '-drive format=qcow2,l2-cache-size=8M,file=/mnt/cage2/vm/TDSJump.qcow2' DedNet: ip: 10.0.1.50 mac: 00:15:5d:01:02:09 cores: 2 memory: 2 vnc: 3 bridge: br0 disks: - '-drive format=qcow2,l2-cache-size=8M,file=/mnt/cage2/vm/DedNet.qcow2' - '-cdrom /srv/maat/iso/kali-linux.iso -boot order=d' Aether: ip: 10.0.1.51 mac: 00:15:5d:01:02:11 cores: 2 memory: 2 vnc: 5 bridge: br0 disks: - '-drive if=none,id=disk0,cache=none,format=raw,aio=native,file=/dev/sdc' - '-cdrom /srv/maat/iso/archlinux.iso -boot order=d' test1: ip: 10.0.1.52 ipinterface: ens3 mac: 00:15:5d:01:02:06 cores: 2 memory: 2 bridge: br0 vnc: 10 disks: - '-drive format=qcow2,l2-cache-size=8M,file=/mnt/cage2/vm/test1.qcow2' test2: ip: 10.0.1.53 ipinterface: ens3 mac: 00:15:5d:01:02:03 cores: 2 memory: 2 bridge: br0 vnc: 11 disks: - '-drive format=qcow2,l2-cache-size=8M,file=/mnt/cage2/vm/test2.qcow2' test3: ip: 10.0.1.54 ipinterface: ens3 mac: 00:15:5d:01:02:04 cores: 2 memory: 2 bridge: br0 vnc: 12 disks: - '-drive format=qcow2,l2-cache-size=8M,file=/mnt/cage2/vm/test3.qcow2' # appliances are monitored -- adhoc_appliances are convenience only and not monitored. appliances: hosts: # 10.0.1.64/27 Shadowfeed: # Router must be at root ip: 10.0.1.1 mac: 2c:30:33:64:f4:03 Print: # Print is excepted for legacy setup reasons before we laid out subnets. ip: 10.0.1.6 mac: 00:80:92:77:CE:E4 Geth-Eyes: ip: 10.0.1.68 mac: 9C:A3:AA:33:A3:99 # "Core-Console": # ip: 10.0.1.74 # mac: 00:25:90:0D:82:5B # "Node0-Console": # ip: 10.0.1.75 # mac: 00:25:90:3E:C6:8C adhoc_appliances: hosts: # 10.0.1.64/27 DarkFeather: ip: 10.0.1.64 mac: D0:40:EF:D4:14:CF Lykos: ip: 10.0.1.65 mac: 70:74:14:4F:8E:42 Games: ip: 10.0.1.66 mac: E0:BE:03:77:0E:88 LivingRoomTV: ip: 10.0.1.69 mac: 80:D2:1D:17:63:0E BedRoomTV: ip: 10.0.1.70 mac: 80:D2:1D:17:63:0F TrainingRoomTV: ip: 10.0.1.71 mac: 80:D2:1D:17:63:10 Tachikoma: ip: 10.0.1.72 mac: 90:0f:0c:1a:d3:23 DedSec: ip: 10.0.1.73 mac: 34:F6:4B:36:12:8F # dhcp build space: 10.0.1.224/27 iot: # 10.0.2.0/24 hosts: LinKeuei: ip: 10.0.2.2 mac: 64:16:66:08:57:F5 Canary: ip: 10.0.2.3 mac: 18:B4:30:2F:F1:37 Charon: ip: 10.0.2.4 mac: 64:52:99:14:28:2B # CanoptekAleph: physical, no network CanoptekBek: ip: 10.0.2.5 mac: 40:9F:38:95:06:34