2024-07-12 14:47:51 +02:00
|
|
|
|
---
|
|
|
|
|
|
# Username of the user that's being set up
|
|
|
|
|
|
target_user: None
|
|
|
|
|
|
|
|
|
|
|
|
# Group of the user that's being set up
|
|
|
|
|
|
target_group: None
|
|
|
|
|
|
|
|
|
|
|
|
# GitLab username used to obtain the public GPG key and public SSH keys
|
|
|
|
|
|
gitlab_login: None
|
|
|
|
|
|
|
|
|
|
|
|
# Full name for git
|
|
|
|
|
|
fullname: None
|
|
|
|
|
|
|
|
|
|
|
|
# Email used for git
|
|
|
|
|
|
git_email: None
|
|
|
|
|
|
|
|
|
|
|
|
# Signing key used for signing git commits and tags
|
|
|
|
|
|
gpg_signingkey: None
|
|
|
|
|
|
|
|
|
|
|
|
# Used as the FQDN that's set up in DNS and reachable from the network
|
|
|
|
|
|
host_fqdn: None
|
|
|
|
|
|
|
|
|
|
|
|
# Address of the HashiCorp Vault that is used to download the trusted CA
|
|
|
|
|
|
# certificate for an SSH server setup
|
|
|
|
|
|
hashicorp_vault_address: None
|
|
|
|
|
|
|
|
|
|
|
|
# Address of the Vaultwarden instance
|
|
|
|
|
|
vaultwarden_address: None
|
|
|
|
|
|
|
2024-11-12 16:46:34 +01:00
|
|
|
|
# Porkbun ‹apikey› and ‹secretapikey› that are used by Certbot (SSL/TLS renewal)
|
|
|
|
|
|
# and DDNS (updating DNS records)
|
|
|
|
|
|
porkbun_apikey: None
|
|
|
|
|
|
porkbun_secretapikey: None
|
|
|
|
|
|
|
2024-07-12 14:47:51 +02:00
|
|
|
|
# Public ID tied to the Yubikey OTP
|
|
|
|
|
|
yubikey_token_id: None
|
2024-07-12 19:53:09 +02:00
|
|
|
|
|
2024-11-13 09:45:54 +01:00
|
|
|
|
# Client IP for the ‹wg-admin› VPN
|
|
|
|
|
|
wg_admin_ip: None
|
|
|
|
|
|
|
2024-07-12 19:53:09 +02:00
|
|
|
|
# Wireguard connections
|
|
|
|
|
|
# List of connections to set up, example:
|
|
|
|
|
|
#
|
|
|
|
|
|
# - ifname: ‹interface name›
|
|
|
|
|
|
# generate_keypair: true/false
|
|
|
|
|
|
# domain: ‹domain, adjust DNS resolution, if set›
|
|
|
|
|
|
# gateway: ‹part of the DNS resolution setup›
|
|
|
|
|
|
# address: ‹assigned address on the VPN›
|
|
|
|
|
|
# peers:
|
|
|
|
|
|
# - { note, public_key, allowed_ips, endpoint, keepalive }
|
|
|
|
|
|
wg_connections: []
|
