refactor: simplify stack templates, move vars into group_vars/alpina
this vault setup for injective sensitive variables uses the approach described in https://docs.ansible.com/ansible/10/tips_tricks/ansible_tips_tricks.html#keep-vaulted-variables-safely-visible
This commit is contained in:
@@ -1,47 +1 @@
|
||||
domain: lab.cazzzer.com
|
||||
|
||||
wg_privkey: !vault |
|
||||
$ANSIBLE_VAULT;1.2;AES256;alpina
|
||||
31333936633664396332303835396261626463383139326538356363303832323533643636383364
|
||||
3364613639616462313462313361363836396338623636660a376230646137346536393330393837
|
||||
64363065396332316262386330313534636135303264636532373432356265383337306365363531
|
||||
6533343563393062640a366364346136353361653033383731613764363762663865643031303663
|
||||
62623562636563633038366465636430656231323431643236323461333134623633613464393439
|
||||
3331663962646534353931336630333961616134343931343534
|
||||
|
||||
wg_psk: !vault |
|
||||
$ANSIBLE_VAULT;1.2;AES256;alpina
|
||||
31393235386262363733633063393031396532336161613138353931616364616165613131336138
|
||||
3861323766326233383836613233333332306166633138300a373164306664393061643135646662
|
||||
30626536646562363263303238663430393361653566306134373633626534643038326566616237
|
||||
3233363838343466640a306364663738346235323535643465663330616235373266383233646263
|
||||
31373332613461376235343431396431633733653865636636363733303466366430316431663730
|
||||
6537663563613233353838303738653532633136663430383961
|
||||
|
||||
wg_addresses: !vault |
|
||||
$ANSIBLE_VAULT;1.2;AES256;alpina
|
||||
36613639386139353965346134663431343032626637326238303830653335633062633936373938
|
||||
3633636637613033303362343038653262626165636537350a356136363730643738383264306662
|
||||
34363731313730613164646138653235653363303033663637386230373161623965326265663439
|
||||
6365643730373235320a323065336535356636646131666262636133643435633237396331653833
|
||||
63393836393162623164633130393034643364373838313939346438623761326364316337343066
|
||||
30643131636636643038366634663137643436323833326362373666393563316235306533373039
|
||||
636233633762303639373239353661343162
|
||||
|
||||
fw_vpn_input_ports: !vault |
|
||||
$ANSIBLE_VAULT;1.2;AES256;alpina
|
||||
39326564343633633465376363396633396332636664383539373230633033383161626434643435
|
||||
3539336531356336663638626630613934323162313639610a626637393637363837636631666534
|
||||
38663031306536323866336365373565633634666561663636653938643538336630393061326564
|
||||
3863363030346530630a343138623664323336353036343430323261393036373563393762663530
|
||||
3730
|
||||
|
||||
github_consumer_key: dbacb8621c37320eb745
|
||||
github_consumer_secret: !vault |
|
||||
$ANSIBLE_VAULT;1.2;AES256;alpina
|
||||
65393439653532323865356337353164666331653438396564613663363865643233323666316537
|
||||
6365303062326139366139623232366338663831333333610a343035313364383738396635633737
|
||||
32616366393365643565636337633334363637356435386235373638653139326665353537363939
|
||||
3936336336663264310a343137653436323831366237376539353231656463663164316133376333
|
||||
37373937356438373335663234616165663739626663663635316335333534333566326632346437
|
||||
3539656334346163663635376533376362626235343466303430
|
||||
|
14
inventories/staging/group_vars/alpina/vars.yml
Normal file
14
inventories/staging/group_vars/alpina/vars.yml
Normal file
@@ -0,0 +1,14 @@
|
||||
# Environment specific variables (staging)
|
||||
|
||||
---
|
||||
docker_ipv6_index: 254
|
||||
|
||||
# Arrstack VPN
|
||||
wg_privkey: "{{ vault_wg_privkey }}"
|
||||
wg_psk: "{{ vault_wg_psk }}"
|
||||
wg_addresses: "{{ vault_wg_addresses }}"
|
||||
fw_vpn_input_ports: "{{ vault_fw_vpn_input_ports }}"
|
||||
|
||||
# Authentik GitHub OAuth
|
||||
github_consumer_key: dbacb8621c37320eb745
|
||||
github_consumer_secret: "{{ vault_github_consumer_secret }}"
|
21
inventories/staging/group_vars/alpina/vault.yml
Normal file
21
inventories/staging/group_vars/alpina/vault.yml
Normal file
@@ -0,0 +1,21 @@
|
||||
$ANSIBLE_VAULT;1.1;AES256
|
||||
63633535633462326534626562373461373363643166383961303861623531663263323534366537
|
||||
3263633238646439306430356365623233313838326639350a386633363434623737313565316535
|
||||
33393734633937333637373432366132323366343836393538366339626235613937323066613666
|
||||
3737393262646333390a623331333461373563313166323232343234616538623433376166313532
|
||||
32323834346336336164343938303062336438643566343866316164643535663039326331646465
|
||||
36666162393365323633646635333666613030386265306238633434303234336439646663356363
|
||||
63323638373035326465633934326363316364616539613462653232393465633233366666373664
|
||||
66616361646564303530356331323864343966633736643434653237316236363063613634646438
|
||||
35303238646632616465643264316164363139393834626362326538613033656464323435396638
|
||||
31346631653764303332386331663361623766333332366537313634636333346538653537346631
|
||||
62363438303036386530633236376633326162336434343861346261373835653735323161323965
|
||||
62353965373164616537346134303232363033323134323130316439386339613966646330666533
|
||||
65346239383230646565346133663530613462363532663562326136376233303638323332326630
|
||||
35656432363563653663616236393932663637323139666664636237336136366438656666633865
|
||||
66353162656364356638313236643131613830393838636264663833343461373963613431656364
|
||||
32303331623033303433333631313038316336653638656638373031653234356164333363336532
|
||||
37316334353463376562643138346633613633353536653939376564333166323931353634333736
|
||||
63616133663266383339323562343265613461623865623263623139396163343065623264366230
|
||||
32633362336335396562366563363830636133376238646433386236666461333731353337386333
|
||||
61323931643766326338
|
@@ -1 +0,0 @@
|
||||
docker_ipv6_index: 254
|
@@ -1,2 +1,2 @@
|
||||
[docker_hosts]
|
||||
[alpina]
|
||||
etappi.lab.home
|
||||
|
Reference in New Issue
Block a user