Initial commit

2026-03-24 08:19:29 +01:00
commit 2b1ca2d5be
95 changed files with 1993 additions and 0 deletions
@@ -0,0 +1,46 @@
+---
+
+- hosts: vserver1.matzman.net
+  roles:
+    - role: ubuntu-docker-host
+      vars:
+        firewall_allowed_tcp_ports:
+          - 80
+          - 443
+        firewall_allowed_udp_ports: []
+        docker_user_allowed_tcp_ports:
+          - 80
+          - 443
+        docker_user_allowed_udp_ports: []
+
+        wg_nets:
+          wg0:
+            secrect:
+                vserver1.matzman.net:
+                    private_key: "oJOaTfNDU5dxj3aUpTOHE98FCg/Dx4agwV6pXg8OTWc="
+
+            hosts:
+                vserver1.matzman.net:
+                    address: "10.0.0.1/24"
+                    port: 51432
+                    public_key: "IGo70n2CfouTLUSrzqRiCfU9iU++sJ1cJSuPO6tsoGw="
+                    endpoint: "vserver.matzman.net"
+                    peers:
+                        client1:
+                            allowed_ips: "10.0.0.2/32"
+
+                client1:
+                    address: "10.0.0.2/24"
+                    public_key: "IGo70n2CfouTLUSrzqRiCfU9iU++sJ1cJSuPO6tsoGw="
+                    peers:
+                        vserver1.matzman.net:
+                            allowed_ips: "0.0.0.0/0"
+
+    - role: docker-host
+    - role: docker-traefik-proxy
+      vars:
+        app_name: "traefik-vserver1"
+    - role: docker-arcane
+      vars:
+        app_name: "arcane-vserver1"
+    - role: docker-socket-proxy