diff --git a/inventory-fvs.yml b/inventory-fvs.yml new file mode 100644 index 0000000..cecc64e --- /dev/null +++ b/inventory-fvs.yml @@ -0,0 +1,590 @@ +--- +ungrouped: + hosts: + +all: + vars: + domain: "{{ ansible_domain }}" + + vm_support: true + vm_torrent_serv: seedbox.pn.steinbeis.schule + + extra_pkgs: + - vim + - mc + - tmux + - debconf-utils + - firmware-sof-signed + + ## Additional roles to run: + custom_roles: + - fvs + + ## Enable automatic reports + misc_reporter: true + ## Server to which reports should be sent. If you don't want to use reporting, this can be empty: + misc_reporter_serv: collector.steinbeis.schule + + ## Proxy configuration: + localproxy: true + no_proxy: firewall.pn.steinbeis.schule,server.pn.steinbeis.schule,idam.steinbeis.schule,dw.steinbeis.schule,.pn.steinbeis.schule,.steinbeis.schule + + kerberize_uris: "idam.steinbeis.schule, *.steinbeis.schule, steinbeis.schule" + + apt_conf: Acquire::http::Proxy "http://aptcache.pn.steinbeis.schule:3142/"; + ntp_serv: server.pn.steinbeis.schule + + ## NFS-Server for additional mount. Remove or leave empty to use no additional NFS-Server: + nfs_server: files.pn.steinbeis.schule + + ## List of print servers. The order of the print servers determines which print server the printer will be installed from: + printservers: + - 10.190.4.3 + - 10.190.4.2 + - 10.190.1.1 + + ## PAM mount nextcloud, remove or leave empty to skip: + # web_dav: https://nc.steinbeis.schule/remote.php/dav/files/%(USER) + + ## Local mirror for mscorefonts. Remove or leave empty to use no mirror: + mirror_msfonts: http://livebox.pn.steinbeis.schule/mscorefonts/ ## http://livebox.example.org/mscorefonts/ + + ## Local mirror for libdvdcss. Remove or leave empty to use no mirror: + mirror_dvdcss: http://livebox.pn.steinbeis.schule/libdvdcss/ ## http://livebox.example.org/libdvdcss/ + + ## SSH-keys to deploy: + keys2deploy: + - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKOY0hChWaCDtuiuQcM0v4/u1499esjTtnMjl4uYlnS0' + - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAN5ylqP936MPjGNxzrzV5jMwIfMhKJdOGuVh3xGQKTM' + - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHxgeu7Rpb/1++531+MopqP9haUkyh1XXpv5kmbgSjx6' + - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBbdOT+WSDmsBcaVFfzPRcmvOfd3CqO/FBOH44UVm7c7' + - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGICjy88HnMg5oaz4BJ20hgzqFWSem+HHD2PQ+As42pA' + - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKm9lu9dDo5TG99QWTkl2G5G+ZbYikLlRNOXfs/bRTHy' + - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMR4TP7jE+wS7zcH0iUBmlxCbvy9saYeEjonX/0yYfEJ' + - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIE4KWQsrcM1ilTgI1eaTsscTbpdIXVAPk8j5aACjw3D8' + - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII1hcR20r+8JbBUeWHds00gmfbxEYZ9CQM+oV1X7BzKn' + + ## Use grub-mkpasswd-pbkdf2 to calculate the password hash: + grub_pwd: 'grub.pbkdf2.sha512.10000.FB60266F69FB181327AFB76193192454FC64151559EFF4D6B8FB7C7904A2A9C4778EDD515B46F770DB6A009F36903C193917BBBC571C5B6AAB2A69208BE01A6E.7B82114A0239C0EC55A50E95C48FA74A8910DEE4088447786DAB35770B9C2CF2D1550CF3B7452155EB55D5F84E5D357BF12B8D299CF9B01BF5D71D516CF826DB' + +infrastructure: + hosts: + wireguard_server: + ansible_host: wg.steinbeis.schule + radius_server: + ansible_host: radius.steinbeis.schule + +proxmox: + hosts: + lmnclient[1:3]: + lmnclient4: + localhome: true +R016: + # VLAN 3119 + hosts: + r016pc[01:16]: + r016pc80: +R115: + # VLAN 3113 + hosts: + r115pc[01:35]: + r115pc80: + dual_screen: [DP-1, DP-1] + audio_output: [pci-0000_00_1f.3-platform-skl_hda_dsp_generic, pro-autput-0] +R117: + # VLAN 3114 + hosts: + r117pc[01:35]: + r117pc80: + dual_screen: [HDMI-1, HDMI-A-1] + audio_output: [pci-0000_00_1b.0, analog-stereo] +R121: + # VLAN 3118 + hosts: + r121pc[01:35]: + r121pc80: + audio_output: [pci-0000_00_1f.3, analog-stereo] +R202: + # VLAN 3107 + hosts: + r202pc[01:20]: + r202pc80: + r202pc90: + vars: + misc_pxe_first: true +R205: + # VLAN 3117 + hosts: + r205pc[01:10]: +R216: + # VLAN 3108 + hosts: + r216pc[01:28]: + r216pc80: + audio_output: [pci-0000_00_1f.3, analog-stereo] + vars: + misc_pxe_first: true +R217: + # VLAN 3106 + hosts: + r217pc[01:28]: + r217pc80: + dual_screen: [DisplayPort-1, DP-1] + audio_output: [pci-0000_00_1f.3, analog-stereo] + vars: + misc_pxe_first: true +R314: + # VLAN 3109 + hosts: + r314pc[01:24]: + r314pc80: + audio_output: [pci-0000_04_00.0, hdmi-stereo-extra1] + vars: + misc_pxe_first: true +R317: + # VLAN 3110 + hosts: + r317pc[01:24]: + r317pc80: + dual_screen: [HDMI-1, HDMI-A-1] + vars: + misc_pxe_first: true +R319: + # VLAN 3105 + hosts: + r319pc[01:12]: + r319pc80: + dual_screen: [HDMI-1, HDMI-A-1] + audio_output: [pci-0000_00_1b.0, analog-stereo] + vars: + misc_pxe_first: true +R406: + # VLAN 3111 + hosts: + r406pc[01:18]: + r406pc80: + dual_screen: [DP-2, DP-2] + vars: + misc_pxe_first: true +R407: + # VLAN 3112 + hosts: + r407pc[01:18]: + r407pc80: + dual_screen: [HDMI-1, HDMI-A-1] + audio_output: [pci-0000_00_1f.3, hdmi-stereo-extra1] + vars: + misc_pxe_first: true +CU051: + # VLAN 3126 + hosts: + cu051pc[01:16]: +C051: + # VLAN 3122 + hosts: + c051pc[01:32]: +## Extra Rechner Lehrer kein Laptop: +C051pc: + # VLAN 3122 + hosts: + c051pc80: +## Extra Rechner Lehrer kein Laptop: +C054: + # VLAN 3122 + hosts: + c051pc81: +C055: + # VLAN 3124 + hosts: + c055pc[01:32]: +C061: + # VLAN 3120 + hosts: + c061pc[01:12]: + c061pc80: +C062: + # VLAN 3121 + hosts: + c062pc[01:16]: + c062pc80: +E021: + # VLAN 3132 + hosts: + e021pc80: +E024: + # VLAN 3133 + hosts: + e024pc80: +E026: + # VLAN 3134 + hosts: + e026pc[01:16]: +E029: + # VLAN 3135 + hosts: + e029pc[01:16]: +M146: + # VLAN 3136 + hosts: + m146pc[01:08]: +A126: + # VLAN 3128 + hosts: + a126pc[01:12]: +A127: + # VLAN 3159 + hosts: + a127pc01: +A130: + # VLAN 3129 + hosts: + a130pc[01:12]: +A134: + # VLAN 3130 + hosts: + a134pc[01:26]: + a134pc[80:81]: + vars: + exam_teacherpc_ips: + - 10.190.30.80 + - 10.190.30.81 + - 10.190.30.82 +A134pc: + # VLAN 3130 + hosts: + a134pc82: + dual_screen: [HDMI-1, HDMI-A-1] +A135: + # VLAN 3131 + hosts: + a135pc[01:08]: + a135pc[21:24]: + a135pc80: + +K000: + # VLAN 3195 + hosts: + r007pc01: + r008pc01: + r010pc01: + r011pc01: + r013pc01: + r014pc01: + r017pc01: +K100: + # VLAN 3196 + hosts: + r103pc01: + dual_screen: [HDMI-2, HDMI-A-2] + r104pc01: + dual_screen: [HDMI-2, HDMI-A-2] + r112pc01: + r114pc01: + audio_output: [pci-0000_00_1b.0, analog-stereo] + r118pc01: + dual_screen: [HDMI-1, HDMI-A-1] + audio_output: [pci-0000_00_1b.0, analog-stereo] + r120pc01: +K200: + # VLAN 3199 + hosts: + r204pc01: + r204pc02: + r207pc01: + r208pc01: + r209pc01: + r210pc01: + r212pc01: + r214pc01: +K300: + # VLAN 3198 + hosts: + r302pc01: + audio_output: [pci-0000_00_1f.3, analog-stereo] + r304pc01: + audio_output: [pci-0000_00_1f.3, analog-stereo] + r307pc01: + r308pc01: + r310pc01: + r311pc01: + r313pc01: + audio_output: [pci-0000_00_1f.3, hdmi-stereo-extra1] + r316pc01: +K400: + # VLAN 3197 + hosts: + r405pc01: + dual_screen: [HDMI-3, HDMI-A-3] + r409pc01: + dual_screen: [HDMI-3, HDMI-A-3] + r410pc01: + dual_screen: [HDMI-3, HDMI-A-3] + r411pc01: + dual_screen: [HDMI-3, HDMI-A-3] + r413pc01: + dual_screen: [HDMI-3, HDMI-A-3] + r414pc01: + dual_screen: [HDMI-3, HDMI-A-3] + r415pc01: + dual_screen: [HDMI-3, HDMI-A-3] +CK100: + # VLAN 3190 + hosts: + c152pc01: + audio_output: [pci-0000_00_1f.3, analog-stereo] + c153pc01: + audio_output: [pci-0000_00_1f.3, analog-stereo] + c154pc01: + audio_output: [pci-0000_00_1f.3, analog-stereo] + misc_clonescreen_mode: "1680x1050@60" + c155pc01: + audio_output: [pci-0000_00_1f.3, analog-stereo] + misc_clonescreen_mode: "1680x1050@60" + c156pc01: + c157pc01: + audio_output: [pci-0000_00_1f.3, analog-stereo] + misc_clonescreen_mode: "1440x900@60" + c158pc01: + audio_output: [pci-0000_00_1f.3, analog-stereo] + c159pc01: + audio_output: [pci-0000_00_1f.3, analog-stereo] + misc_clonescreen_mode: "1440x900@60" +EK100: + # VLAN 3191 + hosts: + e019pc01: + +L000: + # VLAN 3155 + hosts: + r002pc01: + r002pc02: + r003pc01: + r005pc01: + localhome: true + r009pc01: + r012pc01: + r015pc01: +L100: + # VLAN 3154 + hosts: + r102pc01: + r105pc01: + r109pc01: + r112pc01: + localhome: true + r112pc02: + localhome: true + r116pc01: + r116pc02: + r118pc01: +L200: + # VLAN 3151 + hosts: + r201pc[01:03]: + r206pc01: + r211pc01: + r211pc02: + localhome: true + r213pc01: + r215pc[01:03]: + r218pc01: +L300: + # VLAN 3152 + hosts: + r301pc01: + r306pc[01:03]: + r309pc[01:03]: + r312pc01: + r315pc01: +L400: + # VLAN 3153 + hosts: + r404pc[01:02]: + r408pc01: + r412pc01: +CK000: + # VLAN 3189 + hosts: + c059pc01: + misc_clonescreen_mode: "1440x900@60" + audio_output: [pci-0000_00_1f.3, analog-stereo] + c060pc01: +CL100: + # VLAN 3162 + hosts: + c161pc[01:05]: +ML100: + # VLAN 3158 + hosts: + m080pc01: + m144pc01: + m144pc02: + m153pc01: + m155pc01: + m158pc01: + m162pc01: +EL100: + # VLAN 3159 + hosts: + a127pc01: + +CloneScreen: + hosts: + r016pc80: + r115pc80: + r117pc80: + r121pc80: + r202pc80: + r216pc80: + r217pc80: + r314pc80: + r317pc80: + r319pc80: + r406pc80: + r407pc80: + r407pc80: + a134pc82: + a135pc80: + c061pc80: + c062pc80: + e021pc80: + e024pc80: + children: + K000: + K100: + K200: + K300: + K400: + CK100: + CK000: + vars: + misc_clonescreen: true + +PCroom: + children: + R016: + R115: + R117: + R121: + R202: + R216: + R217: + R314: + R317: + R319: + R406: + R407: + CU051: + C051: + C055: + C061: + C062: + M146: + A126: + A130: + A134: + A135: + E026: + E029: + vars: + sudo_permissions: + "%role-teacher": + - /usr/bin/journalctl --since today + exam_destination_allowed_ipv4: + - 10.190.1.0/24 + - 10.190.2.0/24 + - 10.190.4.0/24 + - 192.168.122.0/24 + +Kroom: + children: + K200: + K300: + K400: + CK100: +Lroom: + children: + L000: + L100: + L200: + L300: + L400: + ML100: + EL100: + CL000: + CL100: + vars: + cifsopt: "" +desktop: + children: + PCroom: + Kroom: + Lroom: + C054: +laptop: + children: + CU051: + C051: + C055: + A126: + A130: + A134: + E026: + E029: + teacherlaptop: + hosts: + # Experimental Laptop installed in JuFo LAN + m080pc01: + r302pc01: + r304pc01: + a135pc[21:24]: + nb[001:104]: + nb105: + localhome_logout_missing_serverhome: false + nb[106:112]: + nb113: + localhome_logout_missing_serverhome: false + nb[114:999]: + vars: + wlan: "eap-tls" + cifsopt: ",cache=loose,echo_interval=10" + localhome: true + localuser: ferdi + localuser_password: !unsafe steini + sudo_permissions: + "%role-teacher": + - /usr/bin/journalctl --since today +teacherlaptop: + hosts: + nbt[001:105]: + nbt[106:999]: + encrypt_tpm2: true + vars: + exam_mode: false + vpn: wg + extra_pkgs1: + - plasma-discover + - nextcloud-desktop + - dolphin-nextcloud + sudo_permissions: + "%role-teacher": + - /usr/bin/apt + - /usr/sbin/cryptsetup + polkit_rules: + "role-teacher": + - "org.freedesktop.NetworkManager.settings.modify.system" + - "org.freedesktop.packagekit.package-install" + - "org.freedesktop.packagekit.package-reinstall" + - "org.freedesktop.packagekit.system-update" + - "org.freedesktop.packagekit.upgrade-system" + - "org.freedesktop.packagekit.package-install-untrusted" + localuser: false + localhome_logout_missing_serverhome: false + wlan_enable_on_boot: false + misc_avoid_suspend: false + misc_pwroff: false + misc_pwroff_idle: false + misc_reporter: false + printer_admin_group: role-teacher + fvs_remove_discover: false diff --git a/vault-fvs.yml b/vault-fvs.yml new file mode 100644 index 0000000..b0bd81f --- /dev/null +++ b/vault-fvs.yml @@ -0,0 +1,45 @@ +$ANSIBLE_VAULT;1.1;AES256 +35333038363061373031666537313631653364653164643236373864316261626537633336336261 +6262313765616335643166623261663434356366333633340a616339623331373436626532396265 +31613162383038633132653964323137353165346539326366316234383535633637323032376237 +3864613565343236650a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