infra/group_vars/all.yml

---
# generic settings
ansible_user: ansible
ansible_ssh_private_key_file: ~/.ssh/ansible_ed25519

main_username: container
main_groupname: "{{ main_username }}"
main_uid: 1558
main_gid: 3333

server_home_subdomains:
  - git
  - transmission
  - qbittorrent
  - sickchill
  - mvdl

# ssh keys
ssh_root_keys:
  # Blaine iPhone
  - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAal21bS5ROtzWDy3Z45/Dg5WQbC4qEgpU2nMM+EZaZk homelan

  # Blaine Shortcuts
  - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIINoR827FesLbphYJr9gX/gXGvrYY8ztZE3Y7Tgpt1UW Shortcuts on iPhone

  # Blaine Fedora
  - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDqi3dVzfrkil7c00Zfx2WKS9Gn9UlXwLdPNU65BIMWJ blaine@t440s-fedora

  # Blaine Arch
  - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKXvDJXDv7Q8ldaLbYngHVICebbzNnyN1ebKu+Hd4S2i blaine@t440s-arch

  # Blaine t440
  - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAQ+tT/R49jMxNlyNXs0svW8BTqF1V+x9tcFr84Dxf0n blaine@fedora

  # NAS
  - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPL79uY7Z8JPCi35I+d4JsC/H7Liw+gLKbADaAmLhUHp root@nas

  # Ricky Fedora
  - ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTuQQEhfITCS2h03BZYFL1dLgCVGcfZrbefX7c8HUfNDkghMpJa/31gu6e+ZX4qe4HmYxWmV30s2gbUJUq3OfIIxnQsIqyqe9vg1+mSqpmkB3saYtDVkvzxbWhCTxZaA+yCUV0bR7eakg8tjbm/F5DZ1rRKvK5plptMfQoeQytIzasySyZwE5pwp3yj4eq/JhiZQ307IlmdmFAyglkozU/r1h73yBWRQZxwl71mMGvnoNeCLhZltXmYlTBQpq2At1NtTMD6Mz0ZItsAp1TKy5lAZRZrqYudX5J8D+kayBpLcr/XwMcMycwzQqr1UYYlk2Ph7kzrKOgUt16U/EYqfib ricky@Herbert

  # Ricky OnePlus
  - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEScwg88EUjtptpEyD2dmPu7f4+1wdCoxbYa/Vl8acTn u0_a462@localhost

  # Ricky Ubuntu
  - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKO5FhPYJFFaWmnfTjo1Ud+PMDz81woiyLycHMF1POLO eric@SG-42
  #- ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDf7cAHajeIQkJ+bjrAUUjU8aJ5KiEmAKDPhN9HiQpOt5dqA8o9OA+ONlTU3S5JjLuU6c5wgd7N6h0TIEfsy0Z83TS7CXu6GG4UsNXitrwvlcuNFK0vgQB54BRyXqtOLQ9LHuMmjP1qYKM5xW+aOyuC9nuKSCxbyg7VhotXVp2/w1OXMSZ00YzUjx6GBY/eJJ/9+7HdWSZJwBDKQMlIxVAzpmAhofD2oUjk1EGQMMv8COY2UGMuSSyHMpFsJ9qIYJhLLvwVvxSZLJAtG3vey177us2+TxDQwmJiZC3vNzaaeyCy1/nDQ55BcgmmvRxkMRfONCeZdIRDTumm2g2uVLZJ ricky@ricky-ThinkPad-T440

  # Ricky Windows
  - ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAidTGFyI1cg0DV2Qz12JOM4SgMs7biw+v5kdFZ+a4MyUU51w+dociPV1R8qjnN1mVlNbXzskJpivN5lEO2HuegIZCQvOhDfmGVqgtv+ibJTMKNdH3sJbhj3GWE58qhKri3jEnlyCnSYubkFrzfZn1GsKbBVDDu5ca6ySrejBE54ANugU53t5GCqOTX4q235i+Ye5YwJqd3HPfvs5n1f3oOqWVOtvj/kzpJeZcxlfLaJ435P07MGTTuV2eGyI47zrS4xkL+cw23bwCIQcvgJUyPW8GR1Dmc87lOVGAMLC4Bbi30NEp/sFmZI7aKcDxzDYjx2mIPjcmMlfn55SGHoSC6w== rsa-key-20190930

  # Xen Laptop
  - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAEKAwnsNPz4pnlk043W66ZWrd1Dq4CYznBXIFhUmOIn xen@localhost.localdomain

ssh_ansible_keys:
  # Blaine Fedora
  - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDqi3dVzfrkil7c00Zfx2WKS9Gn9UlXwLdPNU65BIMWJ blaine@t440s-fedora

  # Blaine Arch Ansible
  - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFRedECgniqSdFMULTTjdvCOHw+C1k1TGiepSCKt6fIl blaine@t440s-arch

  # Blaine t440
  - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAQ+tT/R49jMxNlyNXs0svW8BTqF1V+x9tcFr84Dxf0n blaine@fedora

  # Ricky Ubuntu Ansible
  - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKO5FhPYJFFaWmnfTjo1Ud+PMDz81woiyLycHMF1POLO eric@SG-42

  # NAS
  - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJmyvKWjJLJl6755J9iMCneeaOGZhVvv9PWfwsG3Cl7i root@nas

common_pkgs:
  - bash-completion
  - vim
  - nano
  - htop
  - tmux
  - rsync
  - lsof
  - iftop
#  - nethogs
  - net-tools
  - curl
  - wget
#  - inxi
  - smartmontools
  - sysstat
  - tcpdump
  - iptraf-ng
  - dstat
  - pv
  - ncdu
#  - moreutils # for ts
#  - glances

common_pkgs_rpm:
  - "{{ 'policycoreutils-python' if ansible_distribution == 'CentOS' and ansible_distribution_major_version == '7' else 'policycoreutils-python-utils' }}"
  - nmap-ncat

common_pkgs_deb:
  - netcat-openbsd

# backblaze b2 cloud backups
b2_account_key: "{{ vaulted_b2_account_key }}"
b2_key_id: "{{ vaulted_b2_key_id }}"
b2_backups_bucket: "{{ vaulted_b2_backups_bucket }}"
b2_container_data_bucket: "{{ vaulted_b2_container_data_bucket }}"
b2_data_bucket: "{{ vaulted_b2_data_bucket }}"
b2_music_bucket: "{{ vaulted_b2_music_bucket }}"
b2_photos_bucket: "{{ vaulted_b2_photos_bucket }}"
b2_backups_config_encryption_password: "{{ vaulted_b2_backups_config_encryption_password }}"
b2_backups_config_encryption_salt: "{{ vaulted_b2_backups_config_encryption_salt }}"
b2_container_data_encryption_password: "{{ vaulted_b2_container_data_encryption_password }}"
b2_container_data_encryption_salt: "{{ vaulted_b2_container_data_encryption_salt }}"
b2_data_config_encryption_password: "{{ vaulted_b2_data_config_encryption_password }}"
b2_data_config_encryption_salt: "{{ vaulted_b2_data_config_encryption_salt }}"
b2_music_config_encryption_password: "{{ vaulted_b2_music_config_encryption_password }}"
b2_music_config_encryption_salt: "{{ vaulted_b2_music_config_encryption_salt }}"
b2_photos_config_encryption_password: "{{ vaulted_b2_photos_config_encryption_password }}"
b2_photos_config_encryption_salt: "{{ vaulted_b2_photos_config_encryption_salt }}"

# wasabi cloud backups
wasabi_access_key: "{{ vaulted_wasabi_access_key }}"
wasabi_secret_access_key: "{{ vaulted_wasabi_secret_access_key }}"
wasabi_backups_bucket: "{{ vaulted_wasabi_backups_bucket }}"
wasabi_photos_bucket: "{{ vaulted_wasabi_photos_bucket }}"