deuill/coreos-home-server
1
0
Fork 0
mirror of https://github.com/deuill/coreos-home-server.git synced 2024-09-21 13:40:45 +00:00
Code Issues Packages Projects Releases Wiki Activity
4aba8f73c2
coreos-home-server/host/lhr01srv/spec.bu

84 lines
3.0 KiB
Plaintext
Raw Normal View History

Introduce host configuration for `lhr01srv`
2021-08-24 18:15:52 +00:00
variant: fcos
version: 1.3.0
ignition:
config:
merge:
Flatten directory structures This commit contains a fairly large diff for a fairly small change: moving the `config/common` directory to `host/base` to better reflect its intended use, and promoting `config/service` to the root directory. These changes unlock some improvements in `coreos-home-server-update` processes, which will (assuming `/etc/coreos-home-server/base` exists) keep host-wide systemd services in sync in addition to service-specific ones. Changes have been make to the `Makefile` and a few other places where `config/common` was referenced, but most of this work is renames that are not intended to break compatibility with new or running servers.
2022-01-15 11:43:33 +00:00
- local: host/base/container.ign
- local: host/base/logging.ign
Introduce host configuration for `lhr01srv`
2021-08-24 18:15:52 +00:00
- local: service/redis/spec.ign
- local: service/mariadb/spec.ign
- local: service/nginx/spec.ign
- local: service/letsencrypt/spec.ign
- local: service/git/spec.ign
- local: service/dovecot/spec.ign
- local: service/postfix/spec.ign
- local: service/rspamd/spec.ign
- local: service/prosody/spec.ign
- local: service/biboumi/spec.ign
Add service for Coturn, a TURN/STUN server Most importantly, this helps make WebRTC calls in XMPP more reliable when either (or both) endpoints are behind NAT (as is the case with most mobile devices), and avoids depending on a third-party service. Default configuration has been applied in the virtual environment file; this allows for setting up most host-dependent configuration easily.
2022-01-15 10:16:39 +00:00
- local: service/coturn/spec.ign
Introduce host configuration for `lhr01srv`
2021-08-24 18:15:52 +00:00
- local: service/spectrum/spec.ign
- local: service/radicale/spec.ign
Add configuration for Navidrome Navidrome is a Subsonic/Airsonic-compatible music server with a built-in web interface, and can be used as a quasi-self-hosted-Spotify-alternative. By default, music files are read from an empty `navidrome-music` volume, which is expected to be populated via whatever external means are available to the server. The workflow here might be improved in the future.
2021-11-18 22:22:51 +00:00
- local: service/navidrome/spec.ign
hugo: Add service for building Hugo-based sites By default, a `hugo-build-local@.service` systemd service is included, for building Hugo-based sites as stored in a local Git repository (as served by the `git` service), and into a volume (which is intended to be served by the `nginx-serve-volume` service).
2022-04-18 17:07:20 +00:00
- local: service/rclone/spec.ign
- local: service/hugo/spec.ign
Introduce host configuration for `lhr01srv`
2021-08-24 18:15:52 +00:00
- local: private/spec.ign
passwd:
users:
- name: core
ssh_authorized_keys:
- ecdsa-sha2-nistp521 AAAAE2VjZHNhLXNoYTItbmlzdHA1MjEAAAAIbmlzdHA1MjEAAACFBAD46O1S/DSegplXd2Py5loFW2ZYahNvmUYGaFesR8Bo+A+vdmNur7eJ2Ke18j86E2VrVCnzze7EL3dqG1WmseektgClfyeDau+wSvvL8DPNc8JZFdoSd//Kk/OGmJcFfZjag0EXYqYuO/sgHE6yystnwB5ya5PaChNCDr7nG6j5qBJtYw==
- ssh-rsa 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
lhr01srv: Install to RAID array directly Previous experiments in using the RAID array as simple storage, with an implied installation to a secondary medium (an SSD on port 5) failed, and a simpler alternative has been reached.
2021-09-19 12:32:30 +00:00
boot_device:
mirror:
devices:
- /dev/disk/by-path/pci-0000:00:1f.2-ata-1
- /dev/disk/by-path/pci-0000:00:1f.2-ata-2
Introduce host configuration for `lhr01srv`
2021-08-24 18:15:52 +00:00
lhr01srv: Install to RAID array directly Previous experiments in using the RAID array as simple storage, with an implied installation to a secondary medium (an SSD on port 5) failed, and a simpler alternative has been reached.
2021-09-19 12:32:30 +00:00
storage:
Introduce host configuration for `lhr01srv`
2021-08-24 18:15:52 +00:00
files:
- path: /etc/hostname
mode: 0644
contents:
inline: lhr01srv
- path: /etc/coreos-home-server/host.env
mode: 0600
contents:
local: lhr01srv.env.gpg
- path: /etc/NetworkManager/system-connections/eno1.nmconnection
mode: 0600
contents:
inline: |
[connection]
id=eno1
type=ethernet
interface-name=eno1
[ipv4]
address1=192.168.2.2/24,192.168.2.1
dhcp-hostname=lhr01srv
dns=1.1.1.1;1.0.0.1;8.8.8.8;
dns-search=
may-fail=false
method=manual
- path: /etc/zincati/config.d/51-rollout-wariness.toml
contents:
inline: |
[identity]
rollout_wariness = 0.8
- path: /etc/zincati/config.d/55-update-strategy.toml
contents:
inline: |
[updates]
strategy = "periodic"
[[updates.periodic.window]]
days = ["Sat", "Sun"]
start_time = "22:30"
length_minutes = 60
Reference in New Issue Copy Permalink