Add school-specific inventory and vault
This commit is contained in:
Raphael Dannecker
parent
d34a2d78e8
commit
2cf905f09d
2 changed files with 635 additions and 0 deletions
590
inventory-fvs.yml
Normal file
590
inventory-fvs.yml
Normal file
|
|
@ -0,0 +1,590 @@
|
|||
---
|
||||
ungrouped:
|
||||
hosts:
|
||||
|
||||
all:
|
||||
vars:
|
||||
domain: "{{ ansible_domain }}"
|
||||
|
||||
vm_support: true
|
||||
vm_torrent_serv: seedbox.pn.steinbeis.schule
|
||||
|
||||
extra_pkgs:
|
||||
- vim
|
||||
- mc
|
||||
- tmux
|
||||
- debconf-utils
|
||||
- firmware-sof-signed
|
||||
|
||||
## Additional roles to run:
|
||||
custom_roles:
|
||||
- fvs
|
||||
|
||||
## Enable automatic reports
|
||||
misc_reporter: true
|
||||
## Server to which reports should be sent. If you don't want to use reporting, this can be empty:
|
||||
misc_reporter_serv: collector.steinbeis.schule
|
||||
|
||||
## Proxy configuration:
|
||||
localproxy: true
|
||||
no_proxy: firewall.pn.steinbeis.schule,server.pn.steinbeis.schule,idam.steinbeis.schule,dw.steinbeis.schule,.pn.steinbeis.schule,.steinbeis.schule
|
||||
|
||||
kerberize_uris: "idam.steinbeis.schule, *.steinbeis.schule, steinbeis.schule"
|
||||
|
||||
apt_conf: Acquire::http::Proxy "http://aptcache.pn.steinbeis.schule:3142/";
|
||||
ntp_serv: server.pn.steinbeis.schule
|
||||
|
||||
## NFS-Server for additional mount. Remove or leave empty to use no additional NFS-Server:
|
||||
nfs_server: files.pn.steinbeis.schule
|
||||
|
||||
## List of print servers. The order of the print servers determines which print server the printer will be installed from:
|
||||
printservers:
|
||||
- 10.190.4.3
|
||||
- 10.190.4.2
|
||||
- 10.190.1.1
|
||||
|
||||
## PAM mount nextcloud, remove or leave empty to skip:
|
||||
# web_dav: https://nc.steinbeis.schule/remote.php/dav/files/%(USER)
|
||||
|
||||
## Local mirror for mscorefonts. Remove or leave empty to use no mirror:
|
||||
mirror_msfonts: http://livebox.pn.steinbeis.schule/mscorefonts/ ## http://livebox.example.org/mscorefonts/
|
||||
|
||||
## Local mirror for libdvdcss. Remove or leave empty to use no mirror:
|
||||
mirror_dvdcss: http://livebox.pn.steinbeis.schule/libdvdcss/ ## http://livebox.example.org/libdvdcss/
|
||||
|
||||
## SSH-keys to deploy:
|
||||
keys2deploy:
|
||||
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKOY0hChWaCDtuiuQcM0v4/u1499esjTtnMjl4uYlnS0'
|
||||
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAN5ylqP936MPjGNxzrzV5jMwIfMhKJdOGuVh3xGQKTM'
|
||||
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHxgeu7Rpb/1++531+MopqP9haUkyh1XXpv5kmbgSjx6'
|
||||
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBbdOT+WSDmsBcaVFfzPRcmvOfd3CqO/FBOH44UVm7c7'
|
||||
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGICjy88HnMg5oaz4BJ20hgzqFWSem+HHD2PQ+As42pA'
|
||||
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKm9lu9dDo5TG99QWTkl2G5G+ZbYikLlRNOXfs/bRTHy'
|
||||
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMR4TP7jE+wS7zcH0iUBmlxCbvy9saYeEjonX/0yYfEJ'
|
||||
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIE4KWQsrcM1ilTgI1eaTsscTbpdIXVAPk8j5aACjw3D8'
|
||||
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII1hcR20r+8JbBUeWHds00gmfbxEYZ9CQM+oV1X7BzKn'
|
||||
|
||||
## Use grub-mkpasswd-pbkdf2 to calculate the password hash:
|
||||
grub_pwd: 'grub.pbkdf2.sha512.10000.FB60266F69FB181327AFB76193192454FC64151559EFF4D6B8FB7C7904A2A9C4778EDD515B46F770DB6A009F36903C193917BBBC571C5B6AAB2A69208BE01A6E.7B82114A0239C0EC55A50E95C48FA74A8910DEE4088447786DAB35770B9C2CF2D1550CF3B7452155EB55D5F84E5D357BF12B8D299CF9B01BF5D71D516CF826DB'
|
||||
|
||||
infrastructure:
|
||||
hosts:
|
||||
wireguard_server:
|
||||
ansible_host: wg.steinbeis.schule
|
||||
radius_server:
|
||||
ansible_host: radius.steinbeis.schule
|
||||
|
||||
proxmox:
|
||||
hosts:
|
||||
lmnclient[1:3]:
|
||||
lmnclient4:
|
||||
localhome: true
|
||||
R016:
|
||||
# VLAN 3119
|
||||
hosts:
|
||||
r016pc[01:16]:
|
||||
r016pc80:
|
||||
R115:
|
||||
# VLAN 3113
|
||||
hosts:
|
||||
r115pc[01:35]:
|
||||
r115pc80:
|
||||
dual_screen: [DP-1, DP-1]
|
||||
audio_output: [pci-0000_00_1f.3-platform-skl_hda_dsp_generic, pro-autput-0]
|
||||
R117:
|
||||
# VLAN 3114
|
||||
hosts:
|
||||
r117pc[01:35]:
|
||||
r117pc80:
|
||||
dual_screen: [HDMI-1, HDMI-A-1]
|
||||
audio_output: [pci-0000_00_1b.0, analog-stereo]
|
||||
R121:
|
||||
# VLAN 3118
|
||||
hosts:
|
||||
r121pc[01:35]:
|
||||
r121pc80:
|
||||
audio_output: [pci-0000_00_1f.3, analog-stereo]
|
||||
R202:
|
||||
# VLAN 3107
|
||||
hosts:
|
||||
r202pc[01:20]:
|
||||
r202pc80:
|
||||
r202pc90:
|
||||
vars:
|
||||
misc_pxe_first: true
|
||||
R205:
|
||||
# VLAN 3117
|
||||
hosts:
|
||||
r205pc[01:10]:
|
||||
R216:
|
||||
# VLAN 3108
|
||||
hosts:
|
||||
r216pc[01:28]:
|
||||
r216pc80:
|
||||
audio_output: [pci-0000_00_1f.3, analog-stereo]
|
||||
vars:
|
||||
misc_pxe_first: true
|
||||
R217:
|
||||
# VLAN 3106
|
||||
hosts:
|
||||
r217pc[01:28]:
|
||||
r217pc80:
|
||||
dual_screen: [DisplayPort-1, DP-1]
|
||||
audio_output: [pci-0000_00_1f.3, analog-stereo]
|
||||
vars:
|
||||
misc_pxe_first: true
|
||||
R314:
|
||||
# VLAN 3109
|
||||
hosts:
|
||||
r314pc[01:24]:
|
||||
r314pc80:
|
||||
audio_output: [pci-0000_04_00.0, hdmi-stereo-extra1]
|
||||
vars:
|
||||
misc_pxe_first: true
|
||||
R317:
|
||||
# VLAN 3110
|
||||
hosts:
|
||||
r317pc[01:24]:
|
||||
r317pc80:
|
||||
dual_screen: [HDMI-1, HDMI-A-1]
|
||||
vars:
|
||||
misc_pxe_first: true
|
||||
R319:
|
||||
# VLAN 3105
|
||||
hosts:
|
||||
r319pc[01:12]:
|
||||
r319pc80:
|
||||
dual_screen: [HDMI-1, HDMI-A-1]
|
||||
audio_output: [pci-0000_00_1b.0, analog-stereo]
|
||||
vars:
|
||||
misc_pxe_first: true
|
||||
R406:
|
||||
# VLAN 3111
|
||||
hosts:
|
||||
r406pc[01:18]:
|
||||
r406pc80:
|
||||
dual_screen: [DP-2, DP-2]
|
||||
vars:
|
||||
misc_pxe_first: true
|
||||
R407:
|
||||
# VLAN 3112
|
||||
hosts:
|
||||
r407pc[01:18]:
|
||||
r407pc80:
|
||||
dual_screen: [HDMI-1, HDMI-A-1]
|
||||
audio_output: [pci-0000_00_1f.3, hdmi-stereo-extra1]
|
||||
vars:
|
||||
misc_pxe_first: true
|
||||
CU051:
|
||||
# VLAN 3126
|
||||
hosts:
|
||||
cu051pc[01:16]:
|
||||
C051:
|
||||
# VLAN 3122
|
||||
hosts:
|
||||
c051pc[01:32]:
|
||||
## Extra Rechner Lehrer kein Laptop:
|
||||
C051pc:
|
||||
# VLAN 3122
|
||||
hosts:
|
||||
c051pc80:
|
||||
## Extra Rechner Lehrer kein Laptop:
|
||||
C054:
|
||||
# VLAN 3122
|
||||
hosts:
|
||||
c051pc81:
|
||||
C055:
|
||||
# VLAN 3124
|
||||
hosts:
|
||||
c055pc[01:32]:
|
||||
C061:
|
||||
# VLAN 3120
|
||||
hosts:
|
||||
c061pc[01:12]:
|
||||
c061pc80:
|
||||
C062:
|
||||
# VLAN 3121
|
||||
hosts:
|
||||
c062pc[01:16]:
|
||||
c062pc80:
|
||||
E021:
|
||||
# VLAN 3132
|
||||
hosts:
|
||||
e021pc80:
|
||||
E024:
|
||||
# VLAN 3133
|
||||
hosts:
|
||||
e024pc80:
|
||||
E026:
|
||||
# VLAN 3134
|
||||
hosts:
|
||||
e026pc[01:16]:
|
||||
E029:
|
||||
# VLAN 3135
|
||||
hosts:
|
||||
e029pc[01:16]:
|
||||
M146:
|
||||
# VLAN 3136
|
||||
hosts:
|
||||
m146pc[01:08]:
|
||||
A126:
|
||||
# VLAN 3128
|
||||
hosts:
|
||||
a126pc[01:12]:
|
||||
A127:
|
||||
# VLAN 3159
|
||||
hosts:
|
||||
a127pc01:
|
||||
A130:
|
||||
# VLAN 3129
|
||||
hosts:
|
||||
a130pc[01:12]:
|
||||
A134:
|
||||
# VLAN 3130
|
||||
hosts:
|
||||
a134pc[01:26]:
|
||||
a134pc[80:81]:
|
||||
vars:
|
||||
exam_teacherpc_ips:
|
||||
- 10.190.30.80
|
||||
- 10.190.30.81
|
||||
- 10.190.30.82
|
||||
A134pc:
|
||||
# VLAN 3130
|
||||
hosts:
|
||||
a134pc82:
|
||||
dual_screen: [HDMI-1, HDMI-A-1]
|
||||
A135:
|
||||
# VLAN 3131
|
||||
hosts:
|
||||
a135pc[01:08]:
|
||||
a135pc[21:24]:
|
||||
a135pc80:
|
||||
|
||||
K000:
|
||||
# VLAN 3195
|
||||
hosts:
|
||||
r007pc01:
|
||||
r008pc01:
|
||||
r010pc01:
|
||||
r011pc01:
|
||||
r013pc01:
|
||||
r014pc01:
|
||||
r017pc01:
|
||||
K100:
|
||||
# VLAN 3196
|
||||
hosts:
|
||||
r103pc01:
|
||||
dual_screen: [HDMI-2, HDMI-A-2]
|
||||
r104pc01:
|
||||
dual_screen: [HDMI-2, HDMI-A-2]
|
||||
r112pc01:
|
||||
r114pc01:
|
||||
audio_output: [pci-0000_00_1b.0, analog-stereo]
|
||||
r118pc01:
|
||||
dual_screen: [HDMI-1, HDMI-A-1]
|
||||
audio_output: [pci-0000_00_1b.0, analog-stereo]
|
||||
r120pc01:
|
||||
K200:
|
||||
# VLAN 3199
|
||||
hosts:
|
||||
r204pc01:
|
||||
r204pc02:
|
||||
r207pc01:
|
||||
r208pc01:
|
||||
r209pc01:
|
||||
r210pc01:
|
||||
r212pc01:
|
||||
r214pc01:
|
||||
K300:
|
||||
# VLAN 3198
|
||||
hosts:
|
||||
r302pc01:
|
||||
audio_output: [pci-0000_00_1f.3, analog-stereo]
|
||||
r304pc01:
|
||||
audio_output: [pci-0000_00_1f.3, analog-stereo]
|
||||
r307pc01:
|
||||
r308pc01:
|
||||
r310pc01:
|
||||
r311pc01:
|
||||
r313pc01:
|
||||
audio_output: [pci-0000_00_1f.3, hdmi-stereo-extra1]
|
||||
r316pc01:
|
||||
K400:
|
||||
# VLAN 3197
|
||||
hosts:
|
||||
r405pc01:
|
||||
dual_screen: [HDMI-3, HDMI-A-3]
|
||||
r409pc01:
|
||||
dual_screen: [HDMI-3, HDMI-A-3]
|
||||
r410pc01:
|
||||
dual_screen: [HDMI-3, HDMI-A-3]
|
||||
r411pc01:
|
||||
dual_screen: [HDMI-3, HDMI-A-3]
|
||||
r413pc01:
|
||||
dual_screen: [HDMI-3, HDMI-A-3]
|
||||
r414pc01:
|
||||
dual_screen: [HDMI-3, HDMI-A-3]
|
||||
r415pc01:
|
||||
dual_screen: [HDMI-3, HDMI-A-3]
|
||||
CK100:
|
||||
# VLAN 3190
|
||||
hosts:
|
||||
c152pc01:
|
||||
audio_output: [pci-0000_00_1f.3, analog-stereo]
|
||||
c153pc01:
|
||||
audio_output: [pci-0000_00_1f.3, analog-stereo]
|
||||
c154pc01:
|
||||
audio_output: [pci-0000_00_1f.3, analog-stereo]
|
||||
misc_clonescreen_mode: "1680x1050@60"
|
||||
c155pc01:
|
||||
audio_output: [pci-0000_00_1f.3, analog-stereo]
|
||||
misc_clonescreen_mode: "1680x1050@60"
|
||||
c156pc01:
|
||||
c157pc01:
|
||||
audio_output: [pci-0000_00_1f.3, analog-stereo]
|
||||
misc_clonescreen_mode: "1440x900@60"
|
||||
c158pc01:
|
||||
audio_output: [pci-0000_00_1f.3, analog-stereo]
|
||||
c159pc01:
|
||||
audio_output: [pci-0000_00_1f.3, analog-stereo]
|
||||
misc_clonescreen_mode: "1440x900@60"
|
||||
EK100:
|
||||
# VLAN 3191
|
||||
hosts:
|
||||
e019pc01:
|
||||
|
||||
L000:
|
||||
# VLAN 3155
|
||||
hosts:
|
||||
r002pc01:
|
||||
r002pc02:
|
||||
r003pc01:
|
||||
r005pc01:
|
||||
localhome: true
|
||||
r009pc01:
|
||||
r012pc01:
|
||||
r015pc01:
|
||||
L100:
|
||||
# VLAN 3154
|
||||
hosts:
|
||||
r102pc01:
|
||||
r105pc01:
|
||||
r109pc01:
|
||||
r112pc01:
|
||||
localhome: true
|
||||
r112pc02:
|
||||
localhome: true
|
||||
r116pc01:
|
||||
r116pc02:
|
||||
r118pc01:
|
||||
L200:
|
||||
# VLAN 3151
|
||||
hosts:
|
||||
r201pc[01:03]:
|
||||
r206pc01:
|
||||
r211pc01:
|
||||
r211pc02:
|
||||
localhome: true
|
||||
r213pc01:
|
||||
r215pc[01:03]:
|
||||
r218pc01:
|
||||
L300:
|
||||
# VLAN 3152
|
||||
hosts:
|
||||
r301pc01:
|
||||
r306pc[01:03]:
|
||||
r309pc[01:03]:
|
||||
r312pc01:
|
||||
r315pc01:
|
||||
L400:
|
||||
# VLAN 3153
|
||||
hosts:
|
||||
r404pc[01:02]:
|
||||
r408pc01:
|
||||
r412pc01:
|
||||
CK000:
|
||||
# VLAN 3189
|
||||
hosts:
|
||||
c059pc01:
|
||||
misc_clonescreen_mode: "1440x900@60"
|
||||
audio_output: [pci-0000_00_1f.3, analog-stereo]
|
||||
c060pc01:
|
||||
CL100:
|
||||
# VLAN 3162
|
||||
hosts:
|
||||
c161pc[01:05]:
|
||||
ML100:
|
||||
# VLAN 3158
|
||||
hosts:
|
||||
m080pc01:
|
||||
m144pc01:
|
||||
m144pc02:
|
||||
m153pc01:
|
||||
m155pc01:
|
||||
m158pc01:
|
||||
m162pc01:
|
||||
EL100:
|
||||
# VLAN 3159
|
||||
hosts:
|
||||
a127pc01:
|
||||
|
||||
CloneScreen:
|
||||
hosts:
|
||||
r016pc80:
|
||||
r115pc80:
|
||||
r117pc80:
|
||||
r121pc80:
|
||||
r202pc80:
|
||||
r216pc80:
|
||||
r217pc80:
|
||||
r314pc80:
|
||||
r317pc80:
|
||||
r319pc80:
|
||||
r406pc80:
|
||||
r407pc80:
|
||||
r407pc80:
|
||||
a134pc82:
|
||||
a135pc80:
|
||||
c061pc80:
|
||||
c062pc80:
|
||||
e021pc80:
|
||||
e024pc80:
|
||||
children:
|
||||
K000:
|
||||
K100:
|
||||
K200:
|
||||
K300:
|
||||
K400:
|
||||
CK100:
|
||||
CK000:
|
||||
vars:
|
||||
misc_clonescreen: true
|
||||
|
||||
PCroom:
|
||||
children:
|
||||
R016:
|
||||
R115:
|
||||
R117:
|
||||
R121:
|
||||
R202:
|
||||
R216:
|
||||
R217:
|
||||
R314:
|
||||
R317:
|
||||
R319:
|
||||
R406:
|
||||
R407:
|
||||
CU051:
|
||||
C051:
|
||||
C055:
|
||||
C061:
|
||||
C062:
|
||||
M146:
|
||||
A126:
|
||||
A130:
|
||||
A134:
|
||||
A135:
|
||||
E026:
|
||||
E029:
|
||||
vars:
|
||||
sudo_permissions:
|
||||
"%role-teacher":
|
||||
- /usr/bin/journalctl --since today
|
||||
exam_destination_allowed_ipv4:
|
||||
- 10.190.1.0/24
|
||||
- 10.190.2.0/24
|
||||
- 10.190.4.0/24
|
||||
- 192.168.122.0/24
|
||||
|
||||
Kroom:
|
||||
children:
|
||||
K200:
|
||||
K300:
|
||||
K400:
|
||||
CK100:
|
||||
Lroom:
|
||||
children:
|
||||
L000:
|
||||
L100:
|
||||
L200:
|
||||
L300:
|
||||
L400:
|
||||
ML100:
|
||||
EL100:
|
||||
CL000:
|
||||
CL100:
|
||||
vars:
|
||||
cifsopt: ""
|
||||
desktop:
|
||||
children:
|
||||
PCroom:
|
||||
Kroom:
|
||||
Lroom:
|
||||
C054:
|
||||
laptop:
|
||||
children:
|
||||
CU051:
|
||||
C051:
|
||||
C055:
|
||||
A126:
|
||||
A130:
|
||||
A134:
|
||||
E026:
|
||||
E029:
|
||||
teacherlaptop:
|
||||
hosts:
|
||||
# Experimental Laptop installed in JuFo LAN
|
||||
m080pc01:
|
||||
r302pc01:
|
||||
r304pc01:
|
||||
a135pc[21:24]:
|
||||
nb[001:104]:
|
||||
nb105:
|
||||
localhome_logout_missing_serverhome: false
|
||||
nb[106:112]:
|
||||
nb113:
|
||||
localhome_logout_missing_serverhome: false
|
||||
nb[114:999]:
|
||||
vars:
|
||||
wlan: "eap-tls"
|
||||
cifsopt: ",cache=loose,echo_interval=10"
|
||||
localhome: true
|
||||
localuser: ferdi
|
||||
localuser_password: !unsafe steini
|
||||
sudo_permissions:
|
||||
"%role-teacher":
|
||||
- /usr/bin/journalctl --since today
|
||||
teacherlaptop:
|
||||
hosts:
|
||||
nbt[001:105]:
|
||||
nbt[106:999]:
|
||||
encrypt_tpm2: true
|
||||
vars:
|
||||
exam_mode: false
|
||||
vpn: wg
|
||||
extra_pkgs1:
|
||||
- plasma-discover
|
||||
- nextcloud-desktop
|
||||
- dolphin-nextcloud
|
||||
sudo_permissions:
|
||||
"%role-teacher":
|
||||
- /usr/bin/apt
|
||||
- /usr/sbin/cryptsetup
|
||||
polkit_rules:
|
||||
"role-teacher":
|
||||
- "org.freedesktop.NetworkManager.settings.modify.system"
|
||||
- "org.freedesktop.packagekit.package-install"
|
||||
- "org.freedesktop.packagekit.package-reinstall"
|
||||
- "org.freedesktop.packagekit.system-update"
|
||||
- "org.freedesktop.packagekit.upgrade-system"
|
||||
- "org.freedesktop.packagekit.package-install-untrusted"
|
||||
localuser: false
|
||||
localhome_logout_missing_serverhome: false
|
||||
wlan_enable_on_boot: false
|
||||
misc_avoid_suspend: false
|
||||
misc_pwroff: false
|
||||
misc_pwroff_idle: false
|
||||
misc_reporter: false
|
||||
printer_admin_group: role-teacher
|
||||
fvs_remove_discover: false
|
||||
Loading…
Add table
Add a link
Reference in a new issue