diff --git a/README.md b/README.md
index 491cd24..a86e336 100644
--- a/README.md
+++ b/README.md
@@ -11,6 +11,11 @@ ansible -i inventory.yml all --list-hosts
ansible-galaxy install -r requirements.yml
```
+## Edit vault encrypted vars files
+```bash
+ansible-vault edit group_vars/all/vault
+```
+
## Call with
```bash
ansible-playbook -i inventory.yml --ask-vault-pass main.yml
diff --git a/group_vars/all/vars.yml b/group_vars/all/vars.yml
new file mode 100644
index 0000000..7c76ee4
--- /dev/null
+++ b/group_vars/all/vars.yml
@@ -0,0 +1,59 @@
+---
+server_admin: "admin@netz39.de"
+
+ag_timezone: Europe/Berlin
+
+users:
+ - logname: "alex"
+ viewname: "Alexander Dahl"
+ email: "alex@netz39.de"
+ ssh_pub:
+ - !unsafe >
+ ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVZPAE3XE8Ek1Ji4sCIHxLVx+bi2qpsTSsYhBqtYysnFn9AHJj14BR59D0Si05sfVkmL4OQoo7Q98oIxy33PgtqoUfgXk9dc7dlsye3t/gsAb25ABnqG/ZYe65nZLN7BzRM1/QZIbd6sSu6eXrNFCh0ikB5se4zgVkDO8t6h2dnz4FvTuIM2Bi/PnIJTqb8+uLQE1vS3A7tTx100ZKXxr81dlo2Y1JBP6WrS1W1IyFiG6wofl2XTY02ssyoENQyR89lLMJYKvm5xlhL/L69gtMsqIX9UBQFk8Rpq04ZIwN6b0K4R142GZvxdJNdQULgtI3gPkKgH7FDoFsRHNA6b/9 adahl@ada
+ - !unsafe >
+ ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDvczlb1+9d1BjuLk5ZcQt2Z0Dh61Vg91i47tM48CN2koJ4I/9vgN37l6mnr383zD8kQkXDGmCYpXOa48WocyyUuP3h75DCjANYcWOsohQfFu2F1ZOiiVCGduDntzS2nbZEF2W3nZNLQ6/dKKEeaSxu5RjKflkWakghkMt3H4KN20bxzYzHQMLhRYFEGHpskOqeaXKPkqqEP+u5kToINtmXwegCvQFnlx4fNrysFII79buBNlcLsO1X4ABucVMYT/OJnBpJEfEcNFUKrJZRGgM8aDbUpkV9LRY2lywvoKJhiRMc7x7kK0LWOTdPJri+SJhW6fEW4JKCRTSHVN8OS8S/ alex@buffy
+ - !unsafe >
+ ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsGvQ1COtwA4ERf+Z/IMxlw4RadCVKIQzB6v8n20dDM+bfBmTxk7NeSGbdB/vjvUV0Oq47KfDISDAlwhSv0aSpij3d7twPWrFz7eoFWAGO2mnz39btA1i9ygMypsP56NHZDsgokPoCSX3viKyFhh6qgt6cCOJYwLZix4VoFKaQ7GlqoVKAHz9v3r/Lq15oTRcCoqP7FID4Fp1a51fY2XQltALoQnfZVhqpnJB30U0uv79QCAHS5IC75fmRjm1vo/mmu0Kbu4+KfU2+MIpzx2Y6xyntIpB1Nuk9Xn1ptKw1CmgKcNOKNGkKuegripoAHv6oylTjge61ksDPjhAyisNGQ== alex@falbala
+ - !unsafe >
+ ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqx9VCxrcbUrGJ9MOTcS0Jq09bZz3gNKL4mvOXhnMhjbt0IrEENcexwVbk4pSHsezz4LKapvqmT+0U4WiCsU/DtwzLlV7Qgbjoo+Buwzll9Hi+xGn6xIHwvAZoltj2IioIIQgRxF+B/mqGaOU2KN/Yq/2ODMGvPj00VQ2+otLX3XrFoUJX5oot7GsonY2RxrSgOhWCosApgt4MxcuKjyS6VS8RDfdNn522VEPlKevUz5gY7sK5cKcAS3j29+VdXpqewa6jcz0KmQroLXFyJzPkTH2lt5AIurojGtZqbkas/TQPSExun9XpkA3gxuwVKD/uLl/R/7ecagNKdl/+Rtsbw== alex@tiffy
+ - !unsafe >
+ ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC92+JJ7C0WYgripJ9hSIb2D/QMzw/rMmeFTTcO34DJNAVIQtq9nb8Ev7s8Bjz3VR7/LS4kQlyB6dp1RLuObPYRafY0695lja4lwgy7iY1OAYCNM71OYyyztcoHEz3fGO4tzNx5Z1tI9zLpS1Wr7ENeKOKBqmFIgZno67Gq+NZr3LHNvnvAsbMsZXOdnld0LmG0Um35WEN60UYz3k6QUYBfaYrHnX2OP9auK5QDnd2jVTdNLRbBus7VtIsCfK3szLa+dFyd/ISPCB/YsZj1i0WmO766Y4GqFTZhIZUok4JuU8pl/7Y9CSKRMx4sp/3LYIAyOsL5EJxmg3fEfYsRK0gb alex@toshy
+ - !unsafe >
+ ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGmU7MfOFuc6z5Vbwh4CbBFSg19f8B9rUO2ITjgmEvkY alex@lemmy
+ sudo: yes
+ docker: yes
+ - logname: "kwasir"
+ viewname: "Peter Seidel"
+ email: "kwasir@netz39.de"
+ sudo: yes
+ docker: yes
+ - logname: "tux"
+ viewname: "Stefan Haun"
+ email: "tux@netz39.de"
+ ssh_pub:
+ - !unsafe >
+ ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvxbl9eiBojG2zKw2eSftwaMpA4XeONJpPK++WBUBJi+4RhvtN+8YX55cGsRlAA2pvW1a6hxjuR/NEA0+EAZ8ueNaOrMJjHvuUSzO76YF1gHlusAbhYvNl4EYZz/lkrFM4oaa/4/WirgUvSKnpPQx2YgX/AEkIwzk6nQLve+NmijkWdWzaww5snjbAEsgo+iEqeLPRfzbxX4Esp8bqFy3qD0SGgJM8iWlUaWCoQI1HhU4lVBtwdR6cJQ3QnmhUidRLOpIpX1sBRM8Cnwc5g2u3OpsaxPd77+5hXtxKjQUby/YLGmr6L2x1tWYqkV+GZA0Lh3fwM0BjDVT/Y/a+HUVh tux@netz39.de
+ sudo: yes
+ docker: yes
+ - logname: "dkdent"
+ viewname: "David Kilias"
+ email: "dkdent@netz39.de"
+ ssh_pub:
+ - !unsafe >
+ ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFQd8PoC3umGO8o2ryMlTrzYsKW0KMAzTrQxYXOwvWA7 david@Rhea
+ sudo: yes
+ docker: yes
+ - logname: "mg95"
+ viewname: "Maximilian Grau"
+ email: "mg-95@t-online.de"
+ ssh_pub:
+ - !unsafe >
+ ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBbBAe+a2Trndg//SektpCCk51L57EOfxSItPLtdKNAz mg@mg-POWER-PC
+ - !unsafe >
+ ssh-rsa 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 maximilian.grau@st.ovgu.de
+ sudo: yes
+ docker: yes
+
+# Data for DD24 dyndns updates
+dyndns_domain: "dyndns.n39.eu"
+dyndns_password: "{{ vault_dyndns_password }}"
diff --git a/group_vars/all/vault b/group_vars/all/vault
new file mode 100644
index 0000000..1e42948
--- /dev/null
+++ b/group_vars/all/vault
@@ -0,0 +1,7 @@
+$ANSIBLE_VAULT;1.1;AES256
+34303066383937623831333466333965323161376134353838346235323662373164303163363734
+3134626237346361656533636161363331666537633538380a613761643431356530343663626666
+62646361316364333533316638646261373661633863363733366337373338336565366536386237
+3138646266613837310a396139363830613463393861336161363533343362383462623265356563
+31333862613937306463353130316365636634353862363039663762326263313366363530636631
+3630653638333831303432316266633833643739643533353536
diff --git a/host_vars/krypton.n39.eu/vars.yml b/host_vars/krypton.n39.eu/vars.yml
new file mode 100644
index 0000000..51abc0c
--- /dev/null
+++ b/host_vars/krypton.n39.eu/vars.yml
@@ -0,0 +1,2 @@
+server_admin: "admin+krypton@netz39.de"
+ldap_admin_password: "{{ vault_ldap_admin_password }}"
diff --git a/host_vars/krypton.n39.eu/vault b/host_vars/krypton.n39.eu/vault
new file mode 100644
index 0000000..cf7d7e7
--- /dev/null
+++ b/host_vars/krypton.n39.eu/vault
@@ -0,0 +1,8 @@
+$ANSIBLE_VAULT;1.1;AES256
+61633462653865653066373564306134326236663834373337623166373130306534653434313735
+6164316532363832373535376630663038656632356536320a626165386434306433313139353165
+39343463396233386532613336303338653964323566303837383636313266656238383639623031
+6530386664623333620a366264396538336539663635373034323039396539663439376461666430
+61613933626630646134346634626132393737353862626136363362353662373236343265643737
+61633732356665626338303238633631363733316661626436346239663762353634653064316561
+373133323139653733313963383964383733
diff --git a/host_vars/platon.n39.eu/vars.yml b/host_vars/platon.n39.eu/vars.yml
new file mode 100644
index 0000000..2f04ab2
--- /dev/null
+++ b/host_vars/platon.n39.eu/vars.yml
@@ -0,0 +1,4 @@
+server_admin: "admin+platon@netz39.de"
+mac: "b8:27:eb:8f:98:2f"
+gatekeeper_user: pi
+gatekeeper_sip_registration: "{{ vault_gatekeeper_sip_registration }}"
diff --git a/host_vars/platon.n39.eu/vault b/host_vars/platon.n39.eu/vault
new file mode 100644
index 0000000..37aa0cf
--- /dev/null
+++ b/host_vars/platon.n39.eu/vault
@@ -0,0 +1,9 @@
+$ANSIBLE_VAULT;1.1;AES256
+36333666633432646134393762356236373430353961343566326162333638633832383739323636
+6163346463643561666535386165383764333463333137660a343366623434383130623965383638
+66653434613432323065616432646632663232666332373362346330633861316334623264623936
+3031626164323036310a346437646236313936373034373134393463363532616565313632383730
+63303635376562313265363562336361366132623937353266313339666437383561343361376266
+38323566313332373833646633653337643666303431383661383961316139376465616535363633
+64373933336633323364613263656439386135666532366335636136343864333639346666323238
+62383039613861616563
diff --git a/host_vars/pottwal.n39.eu/vars.yml b/host_vars/pottwal.n39.eu/vars.yml
new file mode 100644
index 0000000..1c50bba
--- /dev/null
+++ b/host_vars/pottwal.n39.eu/vars.yml
@@ -0,0 +1,36 @@
+server_admin: "admin+pottwal@netz39.de"
+ansible_python_interpreter: /usr/bin/python3
+data_dir: "/srv/data"
+
+# These values need to be set up in RabbitMQ
+cleanuri_amqp_host: "rabbitmq.n39.eu"
+cleanuri_amqp_user: "cleanuri"
+cleanuri_amqp_pass: "{{ vault_cleanuri_amqp_pass }}"
+cleanuri_amqp_vhost: "/cleanuri"
+
+shlink_host_port: 8083
+shlink_domain_name: sl.n39.eu
+shlink_geolite_license_key: "{{ vault_shlink_geolite_license_key }}"
+
+hedgedoc_host_port: 8084
+hedgedoc_image: quay.io/hedgedoc/hedgedoc:1.9.3
+hedgedoc_postgres_password: "{{ vault_hedgedoc_postgres_password }}"
+
+redmine_host_port: 8087
+redmine_image: redmine:4.2.7
+redmine_mysql_image: mysql:5.7
+redmine_database: redmine
+redmine_database_password: "{{ vault_redmine_database_password }}"
+
+influxdb_host_port: 8088
+influxdb_image: influxdb:2.4-alpine
+influxdb_init_username: admin
+influxdb_init_password: "{{ vault_influxdb_init_password }}"
+
+gitea_host_port: 9091
+
+prosody_data_dir: "{{ data_dir }}/prosody"
+prosody_domain_name: jabber.n39.eu
+jabber_host_port: 8086
+
+uptimekuma_host_port: 8085
diff --git a/host_vars/pottwal.n39.eu/vault b/host_vars/pottwal.n39.eu/vault
new file mode 100644
index 0000000..64fa060
--- /dev/null
+++ b/host_vars/pottwal.n39.eu/vault
@@ -0,0 +1,18 @@
+$ANSIBLE_VAULT;1.1;AES256
+34613130633764366239396165376133363264316231303664373664366264623464643465343738
+3331616138303039616434633839383438336233633237340a303932343861333131306661323037
+33363561303461653461393530366135376138343962393037306530643639653062313461323564
+6363386239636333660a333065396531616564313839643936346362653564353430316531653163
+64643766653761643665626330653162636165626631623630316366613639363339303062623432
+39386631346265656262656437353032383362653866333935313961316131393664633339346134
+62323561653361306366313831643763336631326235343235623937386533363233623031386431
+62613537396566326164663862333032393431666662653534333331323835666131613239653664
+66626233633238373830393134656537373839623762653836616333373961623838356163323238
+36323235386233643536613766663039353331643139613333336266626262343138656433313163
+34313361316663616233373832393332373766373135396637646430383262613966303036313662
+63323535663133383839666463643036643463646262363737366366633630313662316436383737
+32323830633564663039313835633739346433316562643966613737323662623637386264326666
+66383564353738643963323530323139313136633062326366313863386433306439663433396333
+39316465333431636461306137346465623630313038346531383139333432656366393031613931
+39346664663838656439393039663566333466366336363636643532343031613730323838356436
+3635
diff --git a/host_vars/radon.n39.eu/vars.yml b/host_vars/radon.n39.eu/vars.yml
new file mode 100644
index 0000000..db62d9e
--- /dev/null
+++ b/host_vars/radon.n39.eu/vars.yml
@@ -0,0 +1,6 @@
+server_admin: "admin+radon@netz39.de"
+pwr_meter_amqp_user: "pwr-meter"
+pwr_meter_amqp_pass: "{{ vault_pwr_meter_amqp_pass }}"
+pwr_meter_api_token: "{{ vault_pwr_meter_api_token }}"
+# See https://gitea.n39.eu/Netz39_Admin/config.descartes/src/branch/live/dns_dhcp.txt
+brotherql_printer_ip: "172.23.48.53"
diff --git a/host_vars/radon.n39.eu/vault b/host_vars/radon.n39.eu/vault
new file mode 100644
index 0000000..51ed17c
--- /dev/null
+++ b/host_vars/radon.n39.eu/vault
@@ -0,0 +1,10 @@
+$ANSIBLE_VAULT;1.1;AES256
+61393134306361663861356132333135633566626136383536363763646134386338363362343830
+6339626232333037613437386634396138323438643037390a366338353862653439323961626532
+37393438326261363563323233333364323536373735383834383134653935383436356137396166
+3531326465363438310a663232306138333866373637336234326166666261333332386632316163
+61616339656436666233343339383835643934366661366333386363386639306631643366623333
+30666430623435633961613932323239343239623532316662323937346634656136396539303036
+63363365363861646333386364373263303037663266323832663761633633663136616338323362
+36326561623063646666373034333335373135343736633066393937653234313932363138643065
+38646231333564303861633231353535623436326135303463613738346231633962
diff --git a/host_vars/tau.netz39.de/vars.yml b/host_vars/tau.netz39.de/vars.yml
new file mode 100644
index 0000000..ac0c976
--- /dev/null
+++ b/host_vars/tau.netz39.de/vars.yml
@@ -0,0 +1,2 @@
+server_admin: "admin+tau@netz39.de"
+mysql_root_pw: "{{ vault_mysql_root_pw }}"
diff --git a/host_vars/tau.netz39.de/vault b/host_vars/tau.netz39.de/vault
new file mode 100644
index 0000000..a5cbc80
--- /dev/null
+++ b/host_vars/tau.netz39.de/vault
@@ -0,0 +1,6 @@
+$ANSIBLE_VAULT;1.1;AES256
+63323761323733353533323465366663633863346437613938626633366363643765656664343832
+3361376139623139613937656438356132626338646338310a333635633630363836363038383039
+61386466653166356134393361653538643237623365663135636463363039363234623834376634
+6134636464323837620a373264346365353731666330646538316535636532363633333433633863
+39633362613134636137363537613433363738313135343534323436643236363035
diff --git a/host_vars/unicorn.n39.eu/vars.yml b/host_vars/unicorn.n39.eu/vars.yml
new file mode 100644
index 0000000..467d832
--- /dev/null
+++ b/host_vars/unicorn.n39.eu/vars.yml
@@ -0,0 +1 @@
+server_admin: "admin+unicorn@netz39.de"
\ No newline at end of file
diff --git a/inventory.yml b/inventory.yml
index ce5a430..aa19ed6 100644
--- a/inventory.yml
+++ b/inventory.yml
@@ -1,168 +1,12 @@
---
all:
- vars:
- server_admin: "admin@netz39.de"
-
- ag_timezone: Europe/Berlin
-
- users:
- - logname: "alex"
- viewname: "Alexander Dahl"
- email: "alex@netz39.de"
- ssh_pub:
- - !unsafe >
- ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVZPAE3XE8Ek1Ji4sCIHxLVx+bi2qpsTSsYhBqtYysnFn9AHJj14BR59D0Si05sfVkmL4OQoo7Q98oIxy33PgtqoUfgXk9dc7dlsye3t/gsAb25ABnqG/ZYe65nZLN7BzRM1/QZIbd6sSu6eXrNFCh0ikB5se4zgVkDO8t6h2dnz4FvTuIM2Bi/PnIJTqb8+uLQE1vS3A7tTx100ZKXxr81dlo2Y1JBP6WrS1W1IyFiG6wofl2XTY02ssyoENQyR89lLMJYKvm5xlhL/L69gtMsqIX9UBQFk8Rpq04ZIwN6b0K4R142GZvxdJNdQULgtI3gPkKgH7FDoFsRHNA6b/9 adahl@ada
- - !unsafe >
- ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDvczlb1+9d1BjuLk5ZcQt2Z0Dh61Vg91i47tM48CN2koJ4I/9vgN37l6mnr383zD8kQkXDGmCYpXOa48WocyyUuP3h75DCjANYcWOsohQfFu2F1ZOiiVCGduDntzS2nbZEF2W3nZNLQ6/dKKEeaSxu5RjKflkWakghkMt3H4KN20bxzYzHQMLhRYFEGHpskOqeaXKPkqqEP+u5kToINtmXwegCvQFnlx4fNrysFII79buBNlcLsO1X4ABucVMYT/OJnBpJEfEcNFUKrJZRGgM8aDbUpkV9LRY2lywvoKJhiRMc7x7kK0LWOTdPJri+SJhW6fEW4JKCRTSHVN8OS8S/ alex@buffy
- - !unsafe >
- ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsGvQ1COtwA4ERf+Z/IMxlw4RadCVKIQzB6v8n20dDM+bfBmTxk7NeSGbdB/vjvUV0Oq47KfDISDAlwhSv0aSpij3d7twPWrFz7eoFWAGO2mnz39btA1i9ygMypsP56NHZDsgokPoCSX3viKyFhh6qgt6cCOJYwLZix4VoFKaQ7GlqoVKAHz9v3r/Lq15oTRcCoqP7FID4Fp1a51fY2XQltALoQnfZVhqpnJB30U0uv79QCAHS5IC75fmRjm1vo/mmu0Kbu4+KfU2+MIpzx2Y6xyntIpB1Nuk9Xn1ptKw1CmgKcNOKNGkKuegripoAHv6oylTjge61ksDPjhAyisNGQ== alex@falbala
- - !unsafe >
- ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqx9VCxrcbUrGJ9MOTcS0Jq09bZz3gNKL4mvOXhnMhjbt0IrEENcexwVbk4pSHsezz4LKapvqmT+0U4WiCsU/DtwzLlV7Qgbjoo+Buwzll9Hi+xGn6xIHwvAZoltj2IioIIQgRxF+B/mqGaOU2KN/Yq/2ODMGvPj00VQ2+otLX3XrFoUJX5oot7GsonY2RxrSgOhWCosApgt4MxcuKjyS6VS8RDfdNn522VEPlKevUz5gY7sK5cKcAS3j29+VdXpqewa6jcz0KmQroLXFyJzPkTH2lt5AIurojGtZqbkas/TQPSExun9XpkA3gxuwVKD/uLl/R/7ecagNKdl/+Rtsbw== alex@tiffy
- - !unsafe >
- ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC92+JJ7C0WYgripJ9hSIb2D/QMzw/rMmeFTTcO34DJNAVIQtq9nb8Ev7s8Bjz3VR7/LS4kQlyB6dp1RLuObPYRafY0695lja4lwgy7iY1OAYCNM71OYyyztcoHEz3fGO4tzNx5Z1tI9zLpS1Wr7ENeKOKBqmFIgZno67Gq+NZr3LHNvnvAsbMsZXOdnld0LmG0Um35WEN60UYz3k6QUYBfaYrHnX2OP9auK5QDnd2jVTdNLRbBus7VtIsCfK3szLa+dFyd/ISPCB/YsZj1i0WmO766Y4GqFTZhIZUok4JuU8pl/7Y9CSKRMx4sp/3LYIAyOsL5EJxmg3fEfYsRK0gb alex@toshy
- - !unsafe >
- ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGmU7MfOFuc6z5Vbwh4CbBFSg19f8B9rUO2ITjgmEvkY alex@lemmy
- sudo: yes
- docker: yes
- - logname: "kwasir"
- viewname: "Peter Seidel"
- email: "kwasir@netz39.de"
- sudo: yes
- docker: yes
- - logname: "tux"
- viewname: "Stefan Haun"
- email: "tux@netz39.de"
- ssh_pub:
- - !unsafe >
- ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvxbl9eiBojG2zKw2eSftwaMpA4XeONJpPK++WBUBJi+4RhvtN+8YX55cGsRlAA2pvW1a6hxjuR/NEA0+EAZ8ueNaOrMJjHvuUSzO76YF1gHlusAbhYvNl4EYZz/lkrFM4oaa/4/WirgUvSKnpPQx2YgX/AEkIwzk6nQLve+NmijkWdWzaww5snjbAEsgo+iEqeLPRfzbxX4Esp8bqFy3qD0SGgJM8iWlUaWCoQI1HhU4lVBtwdR6cJQ3QnmhUidRLOpIpX1sBRM8Cnwc5g2u3OpsaxPd77+5hXtxKjQUby/YLGmr6L2x1tWYqkV+GZA0Lh3fwM0BjDVT/Y/a+HUVh tux@netz39.de
- sudo: yes
- docker: yes
- - logname: "dkdent"
- viewname: "David Kilias"
- email: "dkdent@netz39.de"
- ssh_pub:
- - !unsafe >
- ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFQd8PoC3umGO8o2ryMlTrzYsKW0KMAzTrQxYXOwvWA7 david@Rhea
- sudo: yes
- docker: yes
- - logname: "mg95"
- viewname: "Maximilian Grau"
- email: "mg-95@t-online.de"
- ssh_pub:
- - !unsafe >
- ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBbBAe+a2Trndg//SektpCCk51L57EOfxSItPLtdKNAz mg@mg-POWER-PC
- - !unsafe >
- ssh-rsa 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 maximilian.grau@st.ovgu.de
- sudo: yes
- docker: yes
-
- # Data for DD24 dyndns updates
- dyndns_domain: "dyndns.n39.eu"
- dyndns_password: !vault |
- $ANSIBLE_VAULT;1.1;AES256
- 65653833376630636530373933326362316164353965643732323634393934383764376563613063
- 6632333438636434376666666132313139393363366665380a353737326231613862333866323031
- 30353966366436613433363937643463613332643133643637643232633238373638303063646635
- 3132306530356431630a333538616466643933643230383165646362643738616237383937666332
- 3164
-
hosts:
tau.netz39.de:
- server_admin: "admin+tau@netz39.de"
- mysql_root_pw: !vault |
- $ANSIBLE_VAULT;1.1;AES256
- 64313138383833643866383332623265383863623332343864306537633931326139303638303761
- 6464653933613663643632383935376164393033363233330a313063613832396166666464666136
- 36633532393231663634663034666666356332373438646130643161383134653739663066626538
- 3661663132343639310a613431653031626434323064313465373866666332353931313836623465
- 3461
pottwal.n39.eu:
- server_admin: "admin+pottwal@netz39.de"
-
- # These values need to be set up in RabbitMQ
- cleanuri_amqp_host: "rabbitmq.n39.eu"
- cleanuri_amqp_user: "cleanuri"
- cleanuri_amqp_pass: !vault |
- $ANSIBLE_VAULT;1.1;AES256
- 36623438333666666263616562386561383564343534383130633336663130323562316337623532
- 6262336637646435666334653834643535316463366132320a393265616331376465383766643539
- 65656130356132333832396266313939326333323161316163653335376266303239663534303731
- 3666383966383463350a616461666534656232666235323333313139353363663763633261346533
- 64623232626531616235386235313763336465366466343334316361396239636337
- cleanuri_amqp_vhost: "/cleanuri"
-
- shlink_geolite_license_key: !vault |
- $ANSIBLE_VAULT;1.1;AES256
- 33626234393039623132663736656363356562383235353737313034613630626339303263366665
- 6133333035663566356532303131373066646632363233330a333230376231616461343262623138
- 31356239323439666632333033616366663762646366343839663463633665333863343437343334
- 3665386538393066380a383366346235343531306561643534663035646537666534383536333230
- 34613761363237633865306332653631323366343232353666343165666664343838
- hedgedoc_postgres_password: !vault |
- $ANSIBLE_VAULT;1.1;AES256
- 66333336393263316230626630626234383238343238396463373331633738343663376439653963
- 3536656431633631396634383137323938313663363665370a366132323464373731323564386239
- 38656238663565386631306263333166633064313762343139373735626439666665356530383363
- 3134373261386435310a626461376537643937643838636638313033383463356663396464643361
- 36333766383139376331336633646633396430323663366636616431643134666536
- redmine_database_password: !vault |
- $ANSIBLE_VAULT;1.1;AES256
- 31343936363663616665346336616366313761363866353533646464393163363161306331323639
- 3030643563363731646365643362626664633130656265330a623566333734343562393432636336
- 32366339366433626466306634383563343633343736393735336130363462346265646431393839
- 3566326231663663340a383731353935366234643132386438663736313938356266613432303232
- 3165
- influxdb_init_username: admin
- influxdb_init_password: !vault |
- $ANSIBLE_VAULT;1.1;AES256
- 30316166356665623137386637353262316230616462356365333734323464363438666461323262
- 6463643839386563313765323534386365396131323462650a313737643139656638373265623433
- 37663136346132623166336139303234323433616634336332663133653532643336303362303161
- 3231306434626336370a363265643462366231326263313563306366393930633765633934386362
- 34316566643132353936636661623365663331333636636462316366623366383864
unicorn.n39.eu:
- server_admin: "admin+unicorn@netz39.de"
platon.n39.eu:
- server_admin: "admin+platon@netz39.de"
- mac: "b8:27:eb:8f:98:2f"
- gatekeeper_user: pi
- gatekeeper_sip_registration: !vault |
- $ANSIBLE_VAULT;1.1;AES256
- 31306464613437343762323366393132323231306362393762636361353230353632333834663430
- 3133663661396566623664323134353737643039646263320a333434326561383962643739346265
- 61376631393266393737306261393137353364353637623335386663613834373233633264316130
- 3931316365663739380a616334626264376164376165346263353366363234646462383637383034
- 62343231636664623938356233363137383166306232373063306362366265333061623532393066
- 6261613435373465336463376431366164373538376465343031
radon.n39.eu:
- server_admin: "admin+radon@netz39.de"
- pwr_meter_amqp_user: "pwr-meter"
- pwr_meter_amqp_pass: !vault |
- $ANSIBLE_VAULT;1.1;AES256
- 62343631383061663837393636663230303734313662353262333537346635343533383736636365
- 3430646130313661653462383961386430343234323338360a643261343238326165333839333931
- 38303738353139653935333632393838336331633739373433636438613162333235346335383933
- 3462313739363833340a343534383664353565613566613032623565393264313032313861363131
- 39646437353963393430336233653934383034373830313935356666336439333438
- pwr_meter_api_token: !vault |
- $ANSIBLE_VAULT;1.1;AES256
- 36393038376632373362383162623866346630656664313330623432633335366461313732643439
- 3062353665373030343264613832653463383064323139350a613439666436383365666535316634
- 32303064323664326538366331303733656565323332323331333962386165316566643764663262
- 6132316461393562370a323564316335343231643266373139323161316663313237326261306531
- 65656162653866383632383265343133626637316566333366386164396465353231636636616335
- 3461663034653936306666313437323734393361306432623639
- # See https://gitea.n39.eu/Netz39_Admin/config.descartes/src/branch/live/dns_dhcp.txt
- brotherql_printer_ip: "172.23.48.53"
krypton.n39.eu:
- server_admin: "admin+krypton@netz39.de"
- ldap_admin_password: !vault |
- $ANSIBLE_VAULT;1.1;AES256
- 30646262643765616236666665363366353934333264343064383265316162333033653839396466
- 3262306131373461323032363234323161613431613133360a396531343438313165666163646363
- 65333334666132313834663839626431373339646631366261316139333233666566383131353035
- 3765613264626637660a343562363166313535613964336261356530353732333965313830653865
- 39373837643837663630333765306463616234363535613666333862396632643961
oganesson.n39.eu:
holmium.n39.eu:
diff --git a/pottwal.yml b/pottwal.yml
index e3100cf..88ab914 100644
--- a/pottwal.yml
+++ b/pottwal.yml
@@ -2,33 +2,6 @@
- hosts: pottwal.n39.eu
become: true
- vars:
- ansible_python_interpreter: /usr/bin/python3
-
- data_dir: "/srv/data"
-
- gitea_host_port: 9091
-
- shlink_host_port: 8083
- shlink_domain_name: sl.n39.eu
-
- prosody_data_dir: "{{ data_dir }}/prosody"
- prosody_domain_name: jabber.n39.eu
- jabber_host_port: 8086
-
- hedgedoc_host_port: 8084
- hedgedoc_image: quay.io/hedgedoc/hedgedoc:1.9.3
-
- redmine_host_port: 8087
- redmine_image: redmine:4.2.7
- redmine_mysql_image: mysql:5.7
- redmine_database: redmine
-
- influxdb_host_port: 8088
- influxdb_image: influxdb:2.4-alpine
-
- uptimekuma_host_port: 8085
-
roles:
- role: docker_setup
vars:
@@ -42,7 +15,7 @@
- name: gitea.n39.eu
- name: uritools.n39.eu
- name: uritools-api.n39.eu
- - name: sl.n39.eu
+ - name: "{{ shlink_domain_name }}"
- name: pad.n39.eu
- name: "{{ prosody_domain_name }}"
alternate_names: