Kapisi/examples/msn0.yml

all:
    vars:
        # Environment-wide data
        external_domain: "aninix.net"
        external_subdomains: "cyberbrain foundation irc lykos maat password sharingan singularity superintendent www yggdrasil"
        internal_subdomains: "ircservices"
        hosted_domains: "travelpawscvt.com"
        replica_domain: "MSN0.AniNIX.net"
        time_zone: "America/Chicago"
        # Services used by all
        main_subnet: 10.0.1.0
        router: 10.0.1.1
        netmask: 24
        dhcprange: '10.0.1.224,10.0.1.254,255.255.255.0,12h'
        staticrange: '10.0.1.1,10.0.1.223,255.255.255.0,12h'
        dns: "10.0.1.2"
        logserver: "10.0.1.16"
        webfront: "10.0.1.3"
        mirroruri: "http://Maat.MSN0.AniNIX.net:9129/repo/archlinux/$repo/os/$arch"
        # Standards
        daemon_shell: /sbin/nologin
        user_shell: /bin/bash
        ansible_become_method: sudo
        ansible_become_user: root
        static: false
        wireless_ssid: 'Shadownet'
        ansible_python_interpreter: auto_silent
        aether_primary: 'Yggdrasil'
        ldap:
          server: "10.0.1.3"
          orgdn: "dc=aninix,dc=net"
          binduser: 'binduser'
          userou: 'ou=People'
          groupou: 'ou=Group'
          filter: '(&(objectClass=person)(!(pwdReset=TRUE)))'
        organization: # Information about the group
          admin: 'DarkFeather'
          email: 'ircs://irc.aninix.net:6697/DarkFeather'
          displayname: 'AniNIX'
          gpgkey: '904DE6275579CB589D85720C1CC1E3F4ED06F296'
        ssl: # Standard SSL cryptographic standards
          identity: 'aninix.net-0002' # The Let's Encrypt identity to use
          ciphersuite: "!NULL:!SSLv2:!SSLv3:!TLSv1:EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH"
        Aether_nodes:
          - DedSec.msn0.aninix.net

    children:
        managed:
            children:
                physical: # 10.0.1.0/28
                    hosts:
                        Chappaai:
                            ipinterface: eth0
                            ip: 10.0.1.2
                            mac: e4:5f:01:01:ff:9b
                            static: true
                    children:
                        Node:
                            hosts:
                                Node1:
                                    ipinterface: enp1s0
                                    ip: 10.0.1.5
                                    mac: fa:ec:43:87:4d:2d
                                    tap: true
                                    ups: 'aps'
                                    active_vms:
                                      - Yggdrasil
                                Node2:
                                    ipinterface: enp1s0
                                    ip: 10.0.1.7
                                    mac: 56:02:ef:2c:1f:7c
                                    tap: true
                                    active_vms:
                                      - DarkNet
                                      - Maat
                                      - Sharingan
                                      - Superintendent
                                Node3:
                                    ipinterface: enp1s0
                                    ip: 10.0.1.8
                                    mac: b2:c6:2c:02:b2:6e
                                    tap: true
                                    active_vms:
                                      - TDS-Jump
                        Geth:
                            hosts:
                                Geth0:
                                    ipinterface: eth0
                                    ip: 10.0.1.9
                                    mac: b8:27:eb:09:a1:a0
                                    static: true
                                    k3s_primary: true
                                Geth1:
                                    ipinterface: eth0
                                    ip: 10.0.1.10
                                    mac: e4:5f:01:01:ff:9c
                                    static: true
                                Geth2:
                                    ipinterface: eth0
                                    ip: 10.0.1.11
                                    mac: e4:5f:01:01:ff:d5
                                    static: true
                                Geth3:
                                    ipinterface: eth0
                                    ip: 10.0.1.12
                                    mac: e4:5f:01:01:ff:96
                                    static: true
                                Geth4:
                                    ipinterface: eth0
                                    ip: 10.0.1.13
                                    mac: e4:5f:01:01:ff:e4
                                    static: true
                                Geth5:
                                    ipinterface: eth0
                                    ip: 10.0.1.14
                                    mac: b8:27:eb:81:f5:4b
                                    static: true
                virtual: # 10.0.1.16/28
                    vars:
                    hosts:
                        Sharingan:
                            ip: 10.0.1.16
                            ipinterface: ens3
                            mac: 00:15:5d:01:02:10
                            cores: 4
                            memory: 6
                            vnc: 8
                            bridge: br0
                            uefi: true
                            siem: true
                            disks:
                              - '-drive format=raw,index=0,media=disk,file=/dev/sdc'
                            # On hold because of https://aninix.net/DarkFeather/MSN0/issues/6
                            holdpkg: "elasticsearch graylog mongodb44-bin mongodb-tools-bin"
                        DarkNet:
                            ipinterface: ens3
                            ip: 10.0.1.17
                            mac: 00:15:5d:01:02:05
                            cores: 2
                            memory: 2
                            vnc: 9
                            bridge: br0
                            disks:
                              - '-drive format=raw,index=0,media=disk,file=/dev/sdb'
                            wolfpack_config: 'gitea@foundation.aninix.net:DarkFeather/WolfPack-Config.git'
                        Maat:
                            ip: 10.0.1.18
                            ipinterface: ens3
                            mac: 00:15:5d:01:02:07
                            cores: 2
                            memory: 2
                            bridge: br0
                            vscan_enabled: true
                            vnc: 7
                            disks:
                              - '-drive format=qcow2,l2-cache-size=8M,file=/mnt/cage2/vm/Maat.qcow2'
                        Yggdrasil:
                            ipinterface: ens3
                            ip: 10.0.1.3
                            mac: 00:25:90:0d:6e:86
                            static: true
                            sslidentity: aninix.net-0002
                            secdetection: true
                            iptv_location: "ToonamiAftermathEast.us|TVSClassicMovies.us|UniversalComedy|ABCNewsLive"
                            aether_source: true
                            cores: 8
                            memory: 10
                            bridge: br0
                            vnc: 1
                            vscan_enabled: true
                            disks:
                              - '-drive format=raw,index=0,media=disk,file=/dev/sda'
                              - '-drive format=raw,index=0,media=disk,file=/dev/sdb'
                              - '-drive format=raw,index=0,media=disk,file=/dev/sdc'
                              - '-drive format=raw,index=0,media=disk,file=/dev/sdd'
                Vergil: # 10.0.1.32/28
                    vars:
                        motion_enabled: yes
                    hosts:
                      Vergil1:
                            ip: 10.0.1.32
                            mac: b8:27:eb:e3:ff:59
                            rotate: 0
                            remote: NS-RC4NA-14
                      Vergil2:
                            ip: 10.0.1.33
                            mac: b8:27:eb:cf:26:88
                            motion_enabled: no
                            rotate: 180
                            remote: NS-RC4NA-14
                      Vergil3:
                            ip: 10.0.1.34
                            mac: b8:27:eb:60:73:68
                            rotate: 90
                            remote: LG-AKB73715608
        unmanaged:
            children:
                # Both OVA groups are in the same subnet -- test_ovas aren't monitored
                ovas: # 10.0.1.48/28
                    hosts:
                        Superintendent:
                            ip: 10.0.1.49
                            mac: de:8b:9e:19:55:1e
                            cores: 2
                            memory: 2
                            vnc: 6
                            bridge: br0
                            uefi: true
                            disks:
                              - '-drive format=qcow2,l2-cache-size=8M,file=/mnt/cage2/vm/hassos_ova-5.13.qcow2'
                test_ovas: # 10.0.1.48/28
                    hosts:
                        TDS-Jump:
                            ip: 10.0.1.48
                            mac: 00:15:5d:01:02:08
                            cores: 2
                            memory: 2
                            vnc: 4
                            bridge: br0
                            disks:
                              - '-drive format=qcow2,l2-cache-size=8M,file=/srv/node/vm/TDSJump.qcow2'
                        DedNet:
                            ip: 10.0.1.50
                            mac: 00:15:5d:01:02:09
                            cores: 2
                            memory: 2
                            vnc: 3
                            bridge: br0
                            disks:
                              - '-drive format=qcow2,l2-cache-size=8M,file=/mnt/cage2/vm/DedNet.qcow2'
                              - '-cdrom /srv/maat/iso/kali-linux.iso -boot order=d'
                        Aether:
                            ip: 10.0.1.51
                            mac: 00:15:5d:01:02:11
                            cores: 2
                            memory: 2
                            vnc: 5
                            bridge: br0
                            disks:
                              - '-drive if=none,id=disk0,cache=none,format=raw,aio=native,file=/dev/sdc'
                              - '-cdrom /srv/maat/iso/archlinux.iso -boot order=d'
                        test1:
                            ip: 10.0.1.52
                            ipinterface: ens3
                            mac: 00:15:5d:01:02:06
                            cores: 2
                            memory: 2
                            bridge: br0
                            vnc: 10
                            disks:
                              - '-drive format=qcow2,l2-cache-size=8M,file=/mnt/cage2/vm/test1.qcow2'
                        test2:
                            ip: 10.0.1.53
                            ipinterface: ens3
                            mac: 00:15:5d:01:02:03
                            cores: 2
                            memory: 2
                            bridge: br0
                            vnc: 11
                            disks:
                              - '-drive format=qcow2,l2-cache-size=8M,file=/mnt/cage2/vm/test2.qcow2'
                        test3:
                            ip: 10.0.1.54
                            ipinterface: ens3
                            mac: 00:15:5d:01:02:04
                            cores: 2
                            memory: 2
                            bridge: br0
                            vnc: 12
                            disks:
                              - '-drive format=qcow2,l2-cache-size=8M,file=/mnt/cage2/vm/test3.qcow2'
                # appliances are monitored -- adhoc_appliances are convenience only and not monitored.
                appliances:
                    hosts: # 10.0.1.64/27
                        Shadownet: # Router must be at root
                            ip: 10.0.1.1
                            mac: 2c:30:33:64:f4:03
                        Print: # Print is excepted for legacy setup reasons before we laid out subnets.
                            ip: 10.0.1.6
                            mac: 00:80:92:77:ce:e4
                        Geth-Eyes:
                            ip: 10.0.1.68
                            mac: 9c:a3:aa:33:a3:99
                        # "Core-Console":
                        #     ip: 10.0.1.74
                        #     mac: 00:25:90:0D:82:5B
                        # "Node0-Console":
                        #     ip: 10.0.1.75
                        #     mac: 00:25:90:3E:C6:8C
                adhoc_appliances:
                    hosts: # 10.0.1.64/27
                        DarkFeather:
                            ip: 10.0.1.64
                            mac: f4:2b:8c:10:31:44
                        Lykos:
                            ip: 10.0.1.65
                            mac: 70:74:14:4f:8e:42
                        Node0:
                            ip: 10.0.1.66
                            mac: 70:32:17:46:49:89
                        LivingRoomTV:
                            ip: 10.0.1.69
                            mac: 80:d2:1d:17:63:0e
                        BedRoomTV:
                            ip: 10.0.1.70
                            mac: a4:77:33:4c:2a:44
                        TrainingRoomTV:
                            ip: 10.0.1.71
                            mac: 80:d2:1d:17:63:10
                        BT:
                            ip: 10.0.1.72
                            mac: 8a:00:aa:7f:df:d1
                        DedSec:
                            ip: 10.0.1.73
                            mac: d4:e9:8a:7d:79:b3
               # dhcp build space: 10.0.1.224/27
                iot: # 10.0.2.0/24
                    hosts:
                        # Nest Thermostat
                        LivingRoomRegulator:
                            ip: 10.0.2.2
                            mac: 64:16:66:08:57:f5
                        # Nest Protect
                        Monitor:
                            ip: 10.0.2.3
                            mac: 18:b4:30:2f:f1:37
                        # Chamberlain My-Q
                        Gatekeeper:
                            ip: 10.0.2.4
                            mac: 64:52:99:14:28:2b
                        # iRobot Roomba
                        # CaretakerAlpha has no network
                        CaretakerBravo:
                            ip: 10.0.2.5
                            mac: 40:9f:38:95:06:34
                        # CaretakerCharlie has no network