pyrschtjag/ansible
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

add nginx, sshd, ssl roles

Browse Source
This commit is contained in:
pyrschtjag
2026-09-20 22:14:56 +00:00
parent ba9e1a664f
commit c640406c10
131 changed files with 1535 additions and 780 deletions
Download Patch File Download Diff File Expand all files Collapse all files
inventory/host_vars/coturn.yml
+3 -3
View File
@@ -1,12 +1,12 @@
nft_dst:
- iface: [eth0,eth0.2]
- iface: [br-eth0,eth0.2]
proto: [tcp,udp]
port: [3478,5349]
nft_from:
- iface: [eth0,eth0.2,eth0.3,eth0.4,wg0]
- iface: [br-eth0,eth0.2,eth0.3,eth0.4,tun0]
proto: [tcp,udp]
port: [3478,5349]
- iface: [eth0,eth0.2,eth0.3,eth0.4,wg0]
- iface: [br-eth0,eth0.2,eth0.3,eth0.4,tun0]
proto: udp
port: ["49152-65535"]
inventory/host_vars/gitea.yml
+1 -1
View File
@@ -4,7 +4,7 @@ nft_to:
port: 5432
nft_from:
- iface: wg0
- iface: tun0
proto: tcp
port: 22
inventory/host_vars/liqueur/certbot.yml
+9
View File
@@ -0,0 +1,9 @@
certbot_certs:
- domains:
- liqueur.oyacoi.ru
pre_hook: "systemctl stop stunnel4 && systemctl stop nginx"
post_hook: "systemctl start nginx && systemctl start stunnel4"
- domains:
- absinthe.oyacoi.ru
pre_hook: "systemctl stop stunnel4 && systemctl stop nginx"
post_hook: "systemctl start nginx && systemctl start stunnel4"
inventory/host_vars/liqueur/main.yml
+2
View File
@@ -0,0 +1,2 @@
ansible_python_interpreter: /usr/bin/python3
ansible_password: "{{ ssh_password }}"
inventory/host_vars/liqueur/openvpn.yml
+1
View File
@@ -0,0 +1 @@
openvpn_role: server
inventory/host_vars/liqueur/ssh.yml
+6
View File
@@ -0,0 +1,6 @@
$ANSIBLE_VAULT;1.1;AES256
37353538363139326635383437313831346265623562383533386261623437366462343663363261
3264363465656165343038656631373436613235343232620a663633636264383736303030323938
30336565383337613637613963343132646665613932393237323437373434646335383531303461
6134393232336132350a393333613362306462613839333732343963363961653561666437383037
35366561393537643463396462356464663162316632613331316230643932666233
inventory/host_vars/localhost.yml
+23
View File
@@ -0,0 +1,23 @@
openvpn_client_bundle_dir: /etc/easy-rsa/ovpn
openvpn_instances:
- name: tun0
pki_dir: /etc/easy-rsa/pki/tun0
clients:
- name: mur89
- name: matr10
- name: tap0
pki_dir: /etc/easy-rsa/pki/tap0
clients:
- name: ltrefilov
- name: lnosov
ip: 10.1.0.220
route_metric: 50
- name: aborovlev
ip: 10.1.0.221
route_metric: 50
- name: dperesypkin
ip: 10.1.0.222
route_metric: 50
- name: dkarpcov
ip: 10.1.0.223
route_metric: 50
inventory/host_vars/mcsmanager.yml
+2 -2
View File
@@ -1,10 +1,10 @@
nft_dst:
- iface: [eth0,eth0.2]
- iface: [br-eth0,eth0.2]
proto: tcp
port: 25565
nft_from:
- iface: [eth0,wg0]
- iface: [br-eth0,tun0]
proto: tcp
port: 25565
inventory/host_vars/nginx.yml
+1 -1
View File
@@ -46,6 +46,6 @@ nft_to:
port: [23333,24444]
nft_from:
- iface: [eth0,eth0.2]
- iface: [br-eth0,eth0.2]
proto: tcp
port: [80,443,24444]
inventory/host_vars/prosody.yml
+2 -2
View File
@@ -1,5 +1,5 @@
nft_dst:
- iface: [eth0,eth0.2]
- iface: [br-eth0,eth0.2]
proto: tcp
port: [5000,5222,5223,5280,5270,5269]
@@ -9,7 +9,7 @@ nft_to:
port: 5432
nft_from:
- iface: [eth0,eth0.2,wg0]
- iface: [br-eth0,eth0.2,tun0]
proto: tcp
port: [5000,5222,5223,5269,5270,5280]
inventory/host_vars/rbpi4.yml
+3 -1
View File
@@ -1,3 +1,5 @@
dnsmasq:
- name: rustdesk.dttx.ru
ip: 176.119.157.97
ip_from: liqueur
- name: fs.dttx.ru
ip_from: liqueur
inventory/host_vars/router/ifupdown2.yml
+1 -37
View File
@@ -1,37 +1 @@
ifupdown2:
- iface: lo
method: loopback
routing:
- "post-up ip rule add fwmark 0x1 lookup 100 2>/dev/null || true"
- "post-up ip route add local 0.0.0.0/0 dev lo table 100 2>/dev/null || true"
- "pre-down ip route del local 0.0.0.0/0 dev lo table 100 2>/dev/null || true"
- "pre-down ip rule del fwmark 0x1 lookup 100 2>/dev/null || true"
- iface: eth0
method: static
address: 10.1.0.1/24
- iface: eth0.2
method: static
address: 10.2.0.1/24
vlan-raw-device: eth0
- iface: eth0.3
method: static
address: 10.3.0.1/24
vlan-raw-device: eth0
- iface: eth0.4
method: static
address: 10.4.0.1/24
vlan-raw-device: eth0
- iface: eth0.10
method: static
address: 10.10.0.1/24
vlan-raw-device: eth0
- iface: eth0.11
method: static
address: 10.11.0.1/24
vlan-raw-device: eth0
- iface: eth0.12
method: static
address: 10.12.0.1/24
vlan-raw-device: eth0
- iface: eth1
method: dhcp
ifupdown2_manage_prerequisites: true
inventory/host_vars/router/logrotate.yml
-13
View File
@@ -1,13 +0,0 @@
logrotate:
- name: xray-core
paths:
- /var/log/xray-core/access.log
- /var/log/xray-core/error.log
options:
- daily
- rotate 4
- compress
- delaycompress
- missingok
- notifempty
- copytruncate
inventory/host_vars/router/managed_group.yml
+3 -3
View File
@@ -1,3 +1,3 @@
nft_managed_group: "{{ groups['static'] + groups['proxmox_all_lxc'] }}"
dnsmasq_managed_group: "{{ groups['static'] + groups['proxmox_all_lxc'] }}"
xray_managed_group: "{{ groups['static'] + groups['proxmox_all_lxc'] }}"
nft_managed_group: "{{ groups['internal'] + groups['proxmox_all_lxc'] }}"
dnsmasq_managed_group: "{{ groups['internal'] + groups['proxmox_all_lxc'] }}"
xray_managed_group: "{{ groups['internal'] + groups['proxmox_all_lxc'] }}"
inventory/host_vars/router/nftables.yml
+1
View File
@@ -0,0 +1 @@
nftables_bootstrap_files: true
inventory/host_vars/router/openvpn.yaml
+1
View File
@@ -0,0 +1 @@
openvpn_role: client
inventory/host_vars/router/sysctl.yml
-5
View File
@@ -1,5 +0,0 @@
sysctl:
net.ipv4.ip_forward: 1
net.ipv4.conf.lo.rp_filter: 0
net.ipv4.conf.all.rp_filter: 0
net.ipv4.conf.wg0.rp_filter: 0
inventory/host_vars/router/user.yml
+6
View File
@@ -0,0 +1,6 @@
user:
- name: steamcmd
create_home: true
home: /var/lib/steamcmd
shell: /bin/bash
system: true
inventory/host_vars/router/xray-core.yml
+100
View File
@@ -0,0 +1,100 @@
$ANSIBLE_VAULT;1.1;AES256
65616666356261363366373733653631636132613931366637383432656566366636313864666230
6136653839653366336561613365383535616231613064660a343139643135653933343731363038
36396436353033396265646338666537623237323166373664626633366432373037613631636236
6134633533636361310a663966353432366436383333666266666238636239666136316665353665
33353161626637353063613738376130333533393565383065613732663637653334636130383663
65376666373861326639343362353136303038396535303234326135633665366164393239376430
38343932613935343930376131373837376235633432373535356162616333653432666131333261
30313436613465626330393936613166663563636435356136613930303933323238336565663232
35616665333339313365323837383832393563353238326234643934393234323462336363303232
30383863366331656331336135313362303235396266613661356562333064653736396531323463
63353736633139353764356634376531613738393965393264623462333232366233396233643533
65653364643235373837303731363565656265616633336236313266373635646233623362636161
61346432336636633030616232343738666136366666353135656237653437663565643032663562
31633764343537666633386237633662306362303732353761353937323039623238353439383336
39356236646333666535326337616337313233646365333830343637376533373661636364313362
35333132353364343836366639356465323636313564636433393361636536323432363232376337
37653835666664386437316163323261336135613330636537633934633839633538343238323035
38653163626266316137383433656630313234326530313533376337393865643162613532326463
38613533373263303138333237303739393261396364646330646334386338636538343265393238
64653036366237396233323064323732393831343563643238363964333633636362303866373530
35383433643163366534613931666563376133336663393332666465616436343562613833653766
32663237383466356433383065336664393664326536346364313536656565613635666665643133
35366165643163636166613735313036326232656330313637353133323265646162333565643930
38643666396431316165626433383236653663376263663736323838343435396639636162663738
64366238363532363433313336393937353561643635343466393761623161643235663366633932
30303339306333643331323962333035393933653431383139653531626533396131663564353237
65346637383133626630376639663630333265346434656361386463343162393131393631396638
64353931643733356362376139633037363434316366396266363665613563663565366466616336
65663561666163613639643136613132303662396661653830363862346535656436613739376363
61633562346331333566313165373133633137663831313534323737623564306437346562356362
66363965313337303265343966656330356361326666353134636465613833356134383833323537
63353965346666656364633230333539383464613637333131356637326535333733356139396363
64393938366533346165386165333336333638316166663236373131366334363037626662323737
39376162616333623638383038396465356130353261303730613632623265333764633330303238
34653338346430636231376339306632376236613865383737663530353465366536313864636639
39663237383564363063663266396537393536353466643564613432646663373263306164646336
38626334373138376436336130386266343766363636636437363862303635356231323336306135
61353561643761336133623565306233383333363963393765363163323139373935313636663065
30333237313738633338663630363430373232343939303134363436653563393231656262333033
38323837646131626162383237373736306634386631613864623338303235666132353837626665
35303533623533366437656133653239613563363232343535363234346466343936393132376332
64626137363564656661653466396631346364356561313562373965623539616362383835383234
30323262353833336332623863626465376238383133633462303465393463663337356464613236
31313232383738313136303439623563393861623039393536373539303838623832323238336432
39633661626364313034623832363763313031333565373363323636393265333530633837623934
64626535646661333266303461633664346461396237333633613736303239336530616236336561
65626532303063396131376335663738393362633937393131396134316235376338623165643233
39373533373033633838626239343232323733336633333837383834666661383162366337303435
61666638393938653666643834313831613134633731353665366133633334356535343464373461
61303632663936363866353764653130386233326362343466623338326234386363653432303437
30333361653662633863323731383438373764653834363062613665613862623338336233663263
37353738373131333333353662636561323234393634643734376539383965346530386265323063
32636364653365656236396665623735656630393632333330653738643736383664396230663033
64303763336339623638653831653039353731356430626530636335623235366635313339386137
64613239653538653262393265356463643739383634663432393231636561376139653834646664
65356534336264643039303762623533616431353130353332663230336133383461386161333737
33316438303935663937373335323339656535393163616166346535313830343462303738313133
36653038343639373336663961396137366632653138396139346431363431336331376339333135
30343331626636323332393337626231326463316665373734653934653531663663393937333838
37656534626639343639366366653131313137633534316137333730346531326232353137633332
34303236386138623038303263613966346532323637303665353931333930613339626362666433
36666335356464373962376335653266663138373130303639633661393036663663323538343837
32613837636166646634626137346532656364343730616663646130356631333634353766623938
32366431623032353937363462633661396365353962393931623538366365353761353365643231
35656361393162663066393539363262663966653032356465326534616230313438323437346638
37356661376361396164646135666161373732393830343932626565663535346437346236343361
34346134343438643338636437613733323065646638646364663930353062653233353066383530
33633731396562663338393838376639363034373965353465643263613632646135346432323235
64353435363032343537633035613739336637356339373164383964313062313932653336616366
30666465613263373561373366326630366636643639616138366363346561346363646139333838
30316266376330393861666137356263336638323939666431336131383339306437333832306235
37366135613230666165396136343030643630356462333830623230613133356563666533373763
66353637393430306465373465316433386131373431343436663533663264333662333865616139
65643738656666333830383833346334383430666537313733613833356239383730666437326532
38393061326136333533653565343962333336616665633034356334653366313435383630623537
32323065363137656336626130633361353763653664303636373736326363306439346263383437
33636139656437303965353362313865333535366337666466366430353837353930656638393334
32313561306132386331383633333931353336313639366434313931333733663630386436336230
32376365613061383636326366326265623038373766316561643163646564396638336537303131
39383163323337336561616666336637316435323534353961623834656664316262623834346336
36343536336439363762333538376261663934636566323962313565303137653036653434376434
61623732613936393838386163366561373539393635303664333931396565633437393931353965
62313838636461343037626332613530663336353562656563323939323636373164363930616265
62656465366330363466386261323039323766376237303263666634653561643439323630666431
62316162366436383065623961323062353034653935626638393862366535616330356135303761
34613438393730663562633239373935383264366361376536633331323062343535626262326133
63383731613664663339613830353231643866326362663336653336666530343633376465376161
37313666346261313137363864396531643765363166663931633338383037363933646436323863
34333862613730326630356437373531373838383265383238383863373339326439643035626431
63313537623339343564326534636234646635653434356161303530393236663832316233306261
63663864383862393634656630393533326438396164623037623961363833616664666437626563
63363334323930363930326231363339363233646263643861393034656562363434383034633961
36663865393430333964626231396431663634623536656237326430356334653739333339336337
36306663316638376631323165383963636562336438383639333632316133323933653539336664
38636531326230333665653937303639616338303063666561353435353764373431643234623338
66313963373964613237346238303566316138383364666238616333663437323135376466366166
39376130336635646131653237363461663664633336663837356265616133653031613662323861
38303266613934376136366430313934373462363630633037323461306134653637623035383936
343164306335323561333737633538633333
inventory/host_vars/router/zerotier-one.yml
-7
View File
@@ -1,7 +0,0 @@
$ANSIBLE_VAULT;1.1;AES256
30313538656633333565613030356534313035646337323763663565326431323437623636656365
3139663263383363626438396133623639636565386230640a333166373634343630663566396264
64613435643864373264323061336438396339326466663637363536663165373231333738313466
6532343566653238620a336633376336303439656163393165323364663033663432643034396262
61383431663836613335623761366433366364363938643935636634313631653935306230346234
3934303233633837356437636639353563376563613237646133
inventory/host_vars/steamcmd/main.yml
+2 -2
View File
@@ -4,10 +4,10 @@ nft_dst:
port: [2456,2457]
nft_from:
- iface: [eth0,wg0]
- iface: [br-eth0,tun0]
proto: tcp
port: [5000,5222,5223,5269,5270,5280]
- iface: [eth0,wg0]
- iface: [br-eth0,tun0]
proto: udp
port: [2302,2304,2456,2457,27016]
- iface: eth1
inventory/host_vars/workuter.yml
+5
View File
@@ -8,3 +8,8 @@ nft_to:
- to: [xiawrt,rbpi4]
proto: tcp
port: 22
xray_policy:
- bypass: private
- bypass: russian_whitelist
- proxy: all