lots of stuff

2026-08-16 14:48:04 +02:00
parent c63db540e8
commit 49fa352476
45 changed files with 32520 additions and 93 deletions
@@ -0,0 +1,198 @@
+wireguard_ingress_ip: 10.10.1.1
+wireguard_beepi_ip: 10.10.1.2
+
+node_exporter_textfile_dir: /var/lib/node_exporter/textfile
+
+geoip_max_age_seconds: 86400
+
+alert_excluded_hosts: beeserver
+
+alert_ignored_units: exim4.service|openipmi.service|smartmontools.service|wg-quick@wg0.service
+
+discord_webhook: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          66663162633962616438306339616364343634633030663665393934323831303162326632613637
+          3531373835656236326436623036636665356433303762350a613366376231353362353961393566
+          36643136616537666632343463333334636136383232346233353963303334616261613265396632
+          3835316435393935350a373265366239393435373734396538323965326366343832373561366539
+          64613966326233303336653738386161376331373962623764633261353462636231666439643735
+          35333564323831626430373030313861396132363336326639303962326661386533383661333264
+          34663435646434316431343936343131326462646632393833623132666335386134373037323433
+          33373738303162386430616465383766363266333765313533373161376262306532346265303062
+          30393164313431613734323832626637346537656334623232373531633139653064666132373863
+          3762666465303665303666396537323062396139313764353263
+
+uptimerobot_api_key: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          62643666393833356630356130373262336130336135393062626130343530363430616532303338
+          6265393131663863323832616334353835386332373037640a333164303034656664643330626532
+          66643238393436653665346538343339346435643934333830636136306565363537336364363038
+          3131653631623961340a373263323362323533353638313361353566383039613662306434366633
+          62386430663466646430373735636132356164393265666634326535333265616233346530663063
+          3935356539346134303038333632373163316438633136396466
+
+grafana_prometheus_uid: ffkc0x7oj7g1sc
+grafana_loki_uid: bfkfq6kdpznr4e
+grafana_infinity_uid: beepitopology
+grafana_uptimerobot_uid: beepiuptimerobot
+grafana_folder: Beepi
+grafana_folder_uid: efva4v6nh301sd
+grafana_general_folder: General Dashboards
+grafana_general_folder_uid: bfkfzgwdpkqgwc
+
+wireguard_peer_names:
+  r0XaxIE3AVud9Z42UPZF3mwoh2R0B0M1EUDY9cvuyDA=: ingress
+  oI69uWkbkwtpuIYxDNGmzg4nRjY1BIZFVFjZwguIvwE=: beepi
+  Jq1FhThPekHlc69t5UcugV9e7Z/Es9lpPR9Ttc0GICk=: phone
+
+monitored_services:
+  - name: gitea
+    title: Gitea
+    group: apps
+    enabled: true
+    owner: gitea
+    units:
+      - gitea-db.service
+      - gitea-server.service
+    vhost: git.secretbee.buzz
+    probe: http://127.0.0.1:3000/api/healthz
+    tcp:
+      - name: gitea-ssh
+        target: 127.0.0.1:2222
+
+  - name: immich
+    title: Immich
+    group: apps
+    enabled: true
+    owner: immich
+    units:
+      - immich-db.service
+      - immich-redis.service
+      - immich-server.service
+    vhost: gallery.secretbee.buzz
+    probe: http://127.0.0.1:2283/api/server/ping
+
+  - name: vaultwarden
+    title: Vaultwarden
+    group: apps
+    enabled: true
+    owner: vaultwarden
+    units:
+      - vaultwarden.service
+    vhost: vault.secretbee.buzz
+    probe: http://127.0.0.1:8222/alive
+
+  - name: ott
+    title: OpenTogetherTube
+    group: apps
+    enabled: false
+    owner: ott
+    units:
+      - ott-db.service
+      - ott-redis.service
+      - ott-server.service
+    vhost: ott.secretbee.buzz
+    probe: http://127.0.0.1:8080/
+
+  - name: matrix
+    title: Matrix
+    group: apps
+    enabled: true
+    containers:
+      - matrix_homeserver_1
+    vhost: matrix.secretbee.buzz
+    probe: http://127.0.0.1:8008/_matrix/client/versions
+    tcp:
+      - name: matrix-federation
+        target: 127.0.0.1:8448
+
+  - name: mail
+    title: Mail
+    group: apps
+    enabled: true
+    containers:
+      - mailserver
+    tcp:
+      - name: smtp
+        target: 127.0.0.1:25
+      - name: submission
+        target: 127.0.0.1:587
+      - name: smtps
+        target: 127.0.0.1:465
+      - name: imaps
+        target: 127.0.0.1:993
+
+  - name: nginx
+    title: Nginx
+    group: platform
+    enabled: true
+    system_units:
+      - nginx.service
+    vhost: secretbee.buzz
+
+  - name: prometheus
+    title: Prometheus
+    group: platform
+    enabled: true
+    containers:
+      - prometheus
+    probe: http://127.0.0.1:9090/-/healthy
+
+  - name: grafana
+    title: Grafana
+    group: platform
+    enabled: true
+    containers:
+      - grafana
+    vhost: grafana.secretbee.buzz
+    probe: http://127.0.0.1:4000/api/health
+
+  - name: loki
+    title: Loki
+    group: platform
+    enabled: true
+    containers:
+      - loki
+    probe: http://127.0.0.1:3100/ready
+
+  - name: alloy
+    title: Alloy
+    group: platform
+    enabled: true
+    containers:
+      - alloy
+    probe: http://127.0.0.1:12345/-/ready
+
+ingress_probe_targets:
+  - name: nginx-http
+    target: 10.10.1.2:80
+  - name: nginx-https
+    target: 10.10.1.2:443
+  - name: matrix-federation
+    target: 10.10.1.2:8448
+  - name: smtp
+    target: 10.10.1.2:25
+  - name: backup-ssh
+    target: 10.10.1.2:4444
+
+backup_jobs:
+  - name: daily
+    title: Daily backup
+    max_age_hours: 26
+  - name: weekly
+    title: Weekly backup
+    max_age_hours: 192
+  - name: restoretest
+    title: Restore test
+    max_age_hours: 192
+  - name: offsite
+    title: Offsite sync
+    max_age_hours: 26
+
+hetzner_host: u651287.your-storagebox.de
+hetzner_user: u651287
+hetzner_port: 23
+hetzner_box_bytes: 1099511627776
+
+backup_archive_dir: /home/beeshare/raid/serverBackup
+backup_raid_mount: /home/beeshare/raid