mfocko/dotfiles
1
0
Fork 0
Code Issues 16 Pull requests Projects Releases Wiki Activity

style: add Ansible-managed headers

Browse source 
Signed-off-by: Matej Focko <me@mfocko.xyz>
This commit is contained in:
Matej Focko 2024-11-15 16:50:11 +01:00
parent 02b44273db
commit d0fc1cd3d6
Signed by: mfocko
SSH key fingerprint: SHA256:icm0fIOSJUpy5+1x23sfr+hLtF9UhY8VpMC7H4WFJP8
27 changed files with 54 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
roles/certbot/templates/certbot.container
View file

@ -1,3 +1,5 @@
# {{ ansible_managed }}
[Unit] [Unit]
Description=Certbot renewal Description=Certbot renewal

2
roles/certbot/templates/certbot.timer
View file

@ -1,3 +1,5 @@
# {{ ansible_managed }}
[Unit] [Unit]
Description=Run certbot once a week Description=Run certbot once a week

2
roles/certbot/templates/cli.ini
View file

@ -1,3 +1,5 @@
; {{ ansible_managed }}
email = {{ certbot_email }} email = {{ certbot_email }}
agree-tos = true agree-tos = true

2
roles/certbot/templates/porkbun.ini
View file

@ -1,2 +1,4 @@
; {{ ansible_managed }}
dns_porkbun_key={{ porkbun_apikey }} dns_porkbun_key={{ porkbun_apikey }}
dns_porkbun_secret={{ porkbun_secretapikey }} dns_porkbun_secret={{ porkbun_secretapikey }}

2
roles/cockpit/templates/cockpit.conf
View file

@ -1,3 +1,5 @@
# {{ ansible_managed }}
[WebService] [WebService]
Origins = https://cockpit.{{ host_fqdn }} wss://cockpit.{{ host_fqdn }} Origins = https://cockpit.{{ host_fqdn }} wss://cockpit.{{ host_fqdn }}
ProtocolHeader = X-Forwarded-Proto ProtocolHeader = X-Forwarded-Proto

2
roles/ddns/templates/ddns.container
View file

@ -1,3 +1,5 @@
# {{ ansible_managed }}
[Unit] [Unit]
Description=DDNS Update Description=DDNS Update

2
roles/ddns/templates/ddns.ini
View file

@ -1,3 +1,5 @@
# {{ ansible_managed }}
DOMAIN={{ ddns_domain }} DOMAIN={{ ddns_domain }}
SUBDOMAINS={{ ','.join(ddns_subdomains) }} SUBDOMAINS={{ ','.join(ddns_subdomains) }}
APIKEY={{ porkbun_apikey }} APIKEY={{ porkbun_apikey }}

2
roles/forgejo/templates/forgejo.container
View file

@ -1,3 +1,5 @@
# {{ ansible_managed }}
[Unit] [Unit]
Description=Forgejo Description=Forgejo

2
roles/forgejo/templates/forgejo.network
View file

@ -1,2 +1,4 @@
# {{ ansible_managed }}
[Network] [Network]
NetworkName=forgejo NetworkName=forgejo

2
roles/forgejo/templates/forgejo.volume
View file

@ -1,2 +1,4 @@
# {{ ansible_managed }}
[Volume] [Volume]
VolumeName=forgejo-data VolumeName=forgejo-data

2
roles/nginx/files/nginx.conf
View file

@ -1,3 +1,5 @@
# {{ ansible_managed }}
# For more information on configuration, see: # For more information on configuration, see:
# * Official English Documentation: http://nginx.org/en/docs/ # * Official English Documentation: http://nginx.org/en/docs/
# * Official Russian Documentation: http://nginx.org/ru/docs/ # * Official Russian Documentation: http://nginx.org/ru/docs/

2
roles/nginx/files/proxy.conf
View file

@ -1,3 +1,5 @@
# {{ ansible_managed }}
proxy_set_header Host $http_host; proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

2
roles/nginx/templates/http.conf
View file

@ -1,3 +1,5 @@
# {{ ansible_managed }}
http { http {
log_format main '$remote_addr - $remote_user [$time_local] "$request" ' log_format main '$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" ' '$status $body_bytes_sent "$http_referer" '

2
roles/nginx/templates/me.conf
View file

@ -1,3 +1,5 @@
# {{ ansible_managed }}
server { server {
include ssl.conf; include ssl.conf;
include fastcgi.conf; include fastcgi.conf;

2
roles/nginx/templates/reverse_proxy.conf
View file

@ -1,3 +1,5 @@
# {{ ansible_managed }}
upstream {{ proxy_domain }} { upstream {{ proxy_domain }} {
server {{ proxy_upstream }}; server {{ proxy_upstream }};
} }

2
roles/nginx/templates/ssl.conf
View file

@ -1,3 +1,5 @@
# {{ ansible_managed }}
listen 443 ssl http2; listen 443 ssl http2;
ssl_certificate /etc/letsencrypt/live/{{ nginx_certname }}/fullchain.pem; ssl_certificate /etc/letsencrypt/live/{{ nginx_certname }}/fullchain.pem;

2
roles/sshd/files/10-ca.conf
View file

@ -1 +1,3 @@
# {{ ansible_managed }}
TrustedUserCAKeys /etc/ssh/sshd_config.d/trusted-user-ca-keys.pem TrustedUserCAKeys /etc/ssh/sshd_config.d/trusted-user-ca-keys.pem

2
roles/sshd/templates/10-harden.conf
View file

@ -1,3 +1,5 @@
# {{ ansible_managed }}
# Port # Port
Port {{ sshd_port }} Port {{ sshd_port }}

2
roles/sshd/templates/10-signed-host-key.conf
View file

@ -1,3 +1,5 @@
# {{ ansible_managed }}
HostCertificate /etc/ssh/sshd_config.d/ssh_host_rsa_key-cert.pub HostCertificate /etc/ssh/sshd_config.d/ssh_host_rsa_key-cert.pub
HostCertificate /etc/ssh/sshd_config.d/ssh_host_ecdsa_key-cert.pub HostCertificate /etc/ssh/sshd_config.d/ssh_host_ecdsa_key-cert.pub
HostCertificate /etc/ssh/sshd_config.d/ssh_host_ed25519_key-cert.pub HostCertificate /etc/ssh/sshd_config.d/ssh_host_ed25519_key-cert.pub

2
roles/thelounge/templates/thelounge.container
View file

@ -1,3 +1,5 @@
# {{ ansible_managed }}
[Unit] [Unit]
Description=The Lounge Description=The Lounge

2
roles/thelounge/templates/thelounge.volume
View file

@ -1,2 +1,4 @@
# {{ ansible_managed }}
[Volume] [Volume]
VolumeName=thelounge-data VolumeName=thelounge-data

2
roles/tmpfiles/templates/user.conf
View file

@ -1 +1,3 @@
# {{ ansible_managed }}
d /var/tmp/{{ target_user }} 0740 {{ target_user }} {{ target_group }} {{ tmpfiles_retention }} d /var/tmp/{{ target_user }} 0740 {{ target_user }} {{ target_group }} {{ tmpfiles_retention }}

2
roles/vaultwarden/templates/vaultwarden.container
View file

@ -1,3 +1,5 @@
# {{ ansible_managed }}
[Unit] [Unit]
Description=Vaultwarden Description=Vaultwarden

2
roles/vaultwarden/templates/vaultwarden.ini
View file

@ -1,3 +1,5 @@
# {{ ansible_managed }}
DATABASE_URL=postgresql://{{ vaultwarden_db_user }}:{{ vaultwarden_db_pass | urlencode }}@{{ vaultwarden_db_host }}/{{ vaultwarden_db_name }} DATABASE_URL=postgresql://{{ vaultwarden_db_user }}:{{ vaultwarden_db_pass | urlencode }}@{{ vaultwarden_db_host }}/{{ vaultwarden_db_name }}
DOMAIN=https://{{ vaultwarden_address }} DOMAIN=https://{{ vaultwarden_address }}

2
roles/vaultwarden/templates/vaultwarden.network
View file

@ -1,2 +1,4 @@
# {{ ansible_managed }}
[Network] [Network]
NetworkName=vaultwarden NetworkName=vaultwarden

2
roles/vaultwarden/templates/vaultwarden.volume
View file

@ -1,2 +1,4 @@
# {{ ansible_managed }}
[Volume] [Volume]
VolumeName=vaultwarden-data VolumeName=vaultwarden-data

2
roles/wg/templates/wg.conf
View file

@ -1,3 +1,5 @@
# {{ ansible_managed }}
[Interface] [Interface]
# Assign the static IP # Assign the static IP
Address = {{ address }} Address = {{ address }}