47 lines
1.3 KiB
YAML
47 lines
1.3 KiB
YAML
---
|
|
|
|
- hosts: vserver1.matzman.net
|
|
roles:
|
|
- role: ubuntu-docker-host
|
|
vars:
|
|
firewall_allowed_tcp_ports:
|
|
- 80
|
|
- 443
|
|
firewall_allowed_udp_ports: []
|
|
docker_user_allowed_tcp_ports:
|
|
- 80
|
|
- 443
|
|
docker_user_allowed_udp_ports: []
|
|
|
|
wg_nets:
|
|
wg0:
|
|
secrect:
|
|
vserver1.matzman.net:
|
|
private_key: "oJOaTfNDU5dxj3aUpTOHE98FCg/Dx4agwV6pXg8OTWc="
|
|
|
|
hosts:
|
|
vserver1.matzman.net:
|
|
address: "10.0.0.1/24"
|
|
port: 51432
|
|
public_key: "IGo70n2CfouTLUSrzqRiCfU9iU++sJ1cJSuPO6tsoGw="
|
|
endpoint: "vserver.matzman.net"
|
|
peers:
|
|
client1:
|
|
allowed_ips: "10.0.0.2/32"
|
|
|
|
client1:
|
|
address: "10.0.0.2/24"
|
|
public_key: "IGo70n2CfouTLUSrzqRiCfU9iU++sJ1cJSuPO6tsoGw="
|
|
peers:
|
|
vserver1.matzman.net:
|
|
allowed_ips: "0.0.0.0/0"
|
|
|
|
- role: docker-host
|
|
- role: docker-traefik-proxy
|
|
vars:
|
|
app_name: "traefik-vserver1"
|
|
- role: docker-arcane
|
|
vars:
|
|
app_name: "arcane-vserver1"
|
|
- role: docker-socket-proxy
|