CroneKorkN
7b291acca1
README:
Updated metadata example to show domain as the only required key.
Documented the bundle's derived_from_domain reactor as the source of
nginx/letsencrypt/monitoring/nftables-input wiring, and the
bundle-defaults source of backup/paths.
nodes/ovh.left4me.py:
- groups: + backup, + left4me, + webserver
- bundles: dropped 'left4me' and 'nftables' (come via groups now;
nftables ships with debian-13).
- metadata: pinned vm/cores=4, vm/threads=8 (4-core HT box) so the
nginx bundle's worker_processes resolves; left4me block reduced to
{'domain': 'left4.me'} — git_url, git_branch, secret_key, and the
nginx/letsencrypt/monitoring/nftables/backup blocks now come from
bundle defaults / the derived_from_domain reactor.
48 lines
1.2 KiB
Python
48 lines
1.2 KiB
Python
{
|
|
'hostname': '141.95.32.8',
|
|
'groups': [
|
|
'backup',
|
|
'debian-13',
|
|
'left4me',
|
|
'monitored',
|
|
'webserver',
|
|
],
|
|
'bundles': [
|
|
'wireguard',
|
|
],
|
|
'metadata': {
|
|
'id': '14d2abc-3855-4bb7-99e2-d4e3eb0344dd',
|
|
'vm': {
|
|
'cores': 4, # 4 physical, 8 with HT
|
|
'threads': 8,
|
|
},
|
|
'network': {
|
|
'external': {
|
|
'interface': 'enp3s0f0',
|
|
'ipv4': '141.95.32.8/24',
|
|
'gateway4': '141.95.32.254',
|
|
'ipv6': '2001:41d0:700:5508::1/128',
|
|
'gateway6': '2001:41d0:700:55ff:ff:ff:ff:ff',
|
|
'cake': {
|
|
'Bandwidth': '450M',
|
|
'FlowIsolationMode': 'triple',
|
|
'PriorityQueueingPreset': 'besteffort',
|
|
'RTTSec': '100ms',
|
|
},
|
|
},
|
|
},
|
|
'wireguard': {
|
|
'my_ip': '172.30.0.5/32',
|
|
's2s': {
|
|
'htz.mails': {
|
|
'allowed_ips': [
|
|
'10.0.0.0/16',
|
|
],
|
|
},
|
|
},
|
|
},
|
|
'left4me': {
|
|
'domain': 'left4.me',
|
|
},
|
|
},
|
|
}
|