style: add Ansible-managed headers

Signed-off-by: Matej Focko <me@mfocko.xyz>
This commit is contained in:
Matej Focko 2024-11-15 16:50:11 +01:00
parent 02b44273db
commit d0fc1cd3d6
Signed by: mfocko
SSH key fingerprint: SHA256:icm0fIOSJUpy5+1x23sfr+hLtF9UhY8VpMC7H4WFJP8
27 changed files with 54 additions and 0 deletions

View file

@ -1,3 +1,5 @@
# {{ ansible_managed }}
[Unit]
Description=Certbot renewal

View file

@ -1,3 +1,5 @@
# {{ ansible_managed }}
[Unit]
Description=Run certbot once a week

View file

@ -1,3 +1,5 @@
; {{ ansible_managed }}
email = {{ certbot_email }}
agree-tos = true

View file

@ -1,2 +1,4 @@
; {{ ansible_managed }}
dns_porkbun_key={{ porkbun_apikey }}
dns_porkbun_secret={{ porkbun_secretapikey }}

View file

@ -1,3 +1,5 @@
# {{ ansible_managed }}
[WebService]
Origins = https://cockpit.{{ host_fqdn }} wss://cockpit.{{ host_fqdn }}
ProtocolHeader = X-Forwarded-Proto

View file

@ -1,3 +1,5 @@
# {{ ansible_managed }}
[Unit]
Description=DDNS Update

View file

@ -1,3 +1,5 @@
# {{ ansible_managed }}
DOMAIN={{ ddns_domain }}
SUBDOMAINS={{ ','.join(ddns_subdomains) }}
APIKEY={{ porkbun_apikey }}

View file

@ -1,3 +1,5 @@
# {{ ansible_managed }}
[Unit]
Description=Forgejo

View file

@ -1,2 +1,4 @@
# {{ ansible_managed }}
[Network]
NetworkName=forgejo

View file

@ -1,2 +1,4 @@
# {{ ansible_managed }}
[Volume]
VolumeName=forgejo-data

View file

@ -1,3 +1,5 @@
# {{ ansible_managed }}
# For more information on configuration, see:
# * Official English Documentation: http://nginx.org/en/docs/
# * Official Russian Documentation: http://nginx.org/ru/docs/

View file

@ -1,3 +1,5 @@
# {{ ansible_managed }}
proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

View file

@ -1,3 +1,5 @@
# {{ ansible_managed }}
http {
log_format main '$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '

View file

@ -1,3 +1,5 @@
# {{ ansible_managed }}
server {
include ssl.conf;
include fastcgi.conf;

View file

@ -1,3 +1,5 @@
# {{ ansible_managed }}
upstream {{ proxy_domain }} {
server {{ proxy_upstream }};
}

View file

@ -1,3 +1,5 @@
# {{ ansible_managed }}
listen 443 ssl http2;
ssl_certificate /etc/letsencrypt/live/{{ nginx_certname }}/fullchain.pem;

View file

@ -1 +1,3 @@
# {{ ansible_managed }}
TrustedUserCAKeys /etc/ssh/sshd_config.d/trusted-user-ca-keys.pem

View file

@ -1,3 +1,5 @@
# {{ ansible_managed }}
# Port
Port {{ sshd_port }}

View file

@ -1,3 +1,5 @@
# {{ ansible_managed }}
HostCertificate /etc/ssh/sshd_config.d/ssh_host_rsa_key-cert.pub
HostCertificate /etc/ssh/sshd_config.d/ssh_host_ecdsa_key-cert.pub
HostCertificate /etc/ssh/sshd_config.d/ssh_host_ed25519_key-cert.pub

View file

@ -1,3 +1,5 @@
# {{ ansible_managed }}
[Unit]
Description=The Lounge

View file

@ -1,2 +1,4 @@
# {{ ansible_managed }}
[Volume]
VolumeName=thelounge-data

View file

@ -1 +1,3 @@
# {{ ansible_managed }}
d /var/tmp/{{ target_user }} 0740 {{ target_user }} {{ target_group }} {{ tmpfiles_retention }}

View file

@ -1,3 +1,5 @@
# {{ ansible_managed }}
[Unit]
Description=Vaultwarden

View file

@ -1,3 +1,5 @@
# {{ ansible_managed }}
DATABASE_URL=postgresql://{{ vaultwarden_db_user }}:{{ vaultwarden_db_pass | urlencode }}@{{ vaultwarden_db_host }}/{{ vaultwarden_db_name }}
DOMAIN=https://{{ vaultwarden_address }}

View file

@ -1,2 +1,4 @@
# {{ ansible_managed }}
[Network]
NetworkName=vaultwarden

View file

@ -1,2 +1,4 @@
# {{ ansible_managed }}
[Volume]
VolumeName=vaultwarden-data

View file

@ -1,3 +1,5 @@
# {{ ansible_managed }}
[Interface]
# Assign the static IP
Address = {{ address }}