beepi/group_vars/all.yml

wireguard_ingress_ip: 10.10.1.1
wireguard_beepi_ip: 10.10.1.2

node_exporter_textfile_dir: /var/lib/node_exporter/textfile

geoip_max_age_seconds: 86400

alert_excluded_hosts: beeserver

alert_ignored_units: exim4.service|openipmi.service|smartmontools.service|wg-quick@wg0.service

discord_webhook: !vault |
          $ANSIBLE_VAULT;1.1;AES256
          66663162633962616438306339616364343634633030663665393934323831303162326632613637
          3531373835656236326436623036636665356433303762350a613366376231353362353961393566
          36643136616537666632343463333334636136383232346233353963303334616261613265396632
          3835316435393935350a373265366239393435373734396538323965326366343832373561366539
          64613966326233303336653738386161376331373962623764633261353462636231666439643735
          35333564323831626430373030313861396132363336326639303962326661386533383661333264
          34663435646434316431343936343131326462646632393833623132666335386134373037323433
          33373738303162386430616465383766363266333765313533373161376262306532346265303062
          30393164313431613734323832626637346537656334623232373531633139653064666132373863
          3762666465303665303666396537323062396139313764353263

uptimerobot_api_key: !vault |
          $ANSIBLE_VAULT;1.1;AES256
          62643666393833356630356130373262336130336135393062626130343530363430616532303338
          6265393131663863323832616334353835386332373037640a333164303034656664643330626532
          66643238393436653665346538343339346435643934333830636136306565363537336364363038
          3131653631623961340a373263323362323533353638313361353566383039613662306434366633
          62386430663466646430373735636132356164393265666634326535333265616233346530663063
          3935356539346134303038333632373163316438633136396466

grafana_prometheus_uid: ffkc0x7oj7g1sc
grafana_loki_uid: bfkfq6kdpznr4e
grafana_infinity_uid: beepitopology
grafana_uptimerobot_uid: beepiuptimerobot
grafana_folder: Beepi
grafana_folder_uid: efva4v6nh301sd
grafana_general_folder: General Dashboards
grafana_general_folder_uid: bfkfzgwdpkqgwc

wireguard_peer_names:
  r0XaxIE3AVud9Z42UPZF3mwoh2R0B0M1EUDY9cvuyDA=: ingress
  oI69uWkbkwtpuIYxDNGmzg4nRjY1BIZFVFjZwguIvwE=: beepi
  Jq1FhThPekHlc69t5UcugV9e7Z/Es9lpPR9Ttc0GICk=: phone

monitored_services:
  - name: gitea
    title: Gitea
    group: apps
    enabled: true
    owner: gitea
    units:
      - gitea-db.service
      - gitea-server.service
    vhost: git.secretbee.buzz
    probe: http://127.0.0.1:3000/api/healthz
    tcp:
      - name: gitea-ssh
        target: 127.0.0.1:2222

  - name: immich
    title: Immich
    group: apps
    enabled: true
    owner: immich
    units:
      - immich-db.service
      - immich-redis.service
      - immich-server.service
    vhost: gallery.secretbee.buzz
    probe: http://127.0.0.1:2283/api/server/ping

  - name: vaultwarden
    title: Vaultwarden
    group: apps
    enabled: true
    owner: vaultwarden
    units:
      - vaultwarden.service
    vhost: vault.secretbee.buzz
    probe: http://127.0.0.1:8222/alive

  - name: ott
    title: OpenTogetherTube
    group: apps
    enabled: false
    owner: ott
    units:
      - ott-db.service
      - ott-redis.service
      - ott-server.service
    vhost: ott.secretbee.buzz
    probe: http://127.0.0.1:8080/

  - name: matrix
    title: Matrix
    group: apps
    enabled: true
    containers:
      - matrix_homeserver_1
    vhost: matrix.secretbee.buzz
    probe: http://127.0.0.1:8008/_matrix/client/versions
    tcp:
      - name: matrix-federation
        target: 127.0.0.1:8448

  - name: mail
    title: Mail
    group: apps
    enabled: true
    containers:
      - mailserver
    tcp:
      - name: smtp
        target: 127.0.0.1:25
      - name: submission
        target: 127.0.0.1:587
      - name: smtps
        target: 127.0.0.1:465
      - name: imaps
        target: 127.0.0.1:993

  - name: nginx
    title: Nginx
    group: platform
    enabled: true
    system_units:
      - nginx.service
    vhost: secretbee.buzz

  - name: prometheus
    title: Prometheus
    group: platform
    enabled: true
    containers:
      - prometheus
    probe: http://127.0.0.1:9090/-/healthy

  - name: grafana
    title: Grafana
    group: platform
    enabled: true
    containers:
      - grafana
    vhost: grafana.secretbee.buzz
    probe: http://127.0.0.1:4000/api/health

  - name: loki
    title: Loki
    group: platform
    enabled: true
    containers:
      - loki
    probe: http://127.0.0.1:3100/ready

  - name: alloy
    title: Alloy
    group: platform
    enabled: true
    containers:
      - alloy
    probe: http://127.0.0.1:12345/-/ready

ingress_probe_targets:
  - name: nginx-http
    target: 10.10.1.2:80
  - name: nginx-https
    target: 10.10.1.2:443
  - name: matrix-federation
    target: 10.10.1.2:8448
  - name: smtp
    target: 10.10.1.2:25
  - name: backup-ssh
    target: 10.10.1.2:4444

backup_jobs:
  - name: daily
    title: Daily backup
    max_age_hours: 26
  - name: weekly
    title: Weekly backup
    max_age_hours: 192
  - name: restoretest
    title: Restore test
    max_age_hours: 192
  - name: offsite
    title: Offsite sync
    max_age_hours: 26

hetzner_host: u651287.your-storagebox.de
hetzner_user: u651287
hetzner_port: 23
hetzner_box_bytes: 1099511627776

backup_archive_dir: /home/beeshare/raid/serverBackup
backup_raid_mount: /home/beeshare/raid