new major update

vars/actual_settings.yml

@@ -0,0 +1,3 @@
+actual:
+  containerized: true
+  port: 5006

vars/aria_settings.yml

@@ -2,12 +2,12 @@
 aria:
   containerized: true
   rpc:
-    enabled: false
+    enabled: true
     listen_all: true
     scheme: http
     hostname: localhost
     port: 6800
-    secret: ~
+    secret: "{{ lookup('password', './.tmp/' + inventory_hostname + '-aria/aria.secret', chars=['ascii_lowercase', 'digits'], length=32) }}"
     credentials: ~
   # dest: "{{ ansible_user_home.stdout }}/downloads/aria2"
   log: warn
@@ -50,7 +50,7 @@ aria:
   trnt:
     dht:
       enabled: true
-      port: 6881-6999
+      port: 6940
       entrypoint: ~
       # path: "{{ ansible_user_home.stdout }}/.aria2/dht.dat"
       # path6: "{{ ansible_user_home.stdout }}/.aria2/dht6.dat"

vars/crowdsec_settings.yml

@@ -1,9 +1,11 @@
 crowdsec:
-  containerized: false
+  containerized: true
   port: 6050
   colls:
-    - "crowdsecurity/base-http-scenarios"
-    - "crowdsecurity/proftpd"
+    - "crowdsecurity/caddy"
+    - "crowdsecurity/nextcloud"
+    - "crowdsecurity/mysql"
+    - "crowdsecurity/linux"
   parsers: []
   scenarios: []
   postoverflows: []

vars/flexget_settings.yml

@@ -1,3 +1,4 @@
 flexget:
   enabled: true
+  containerized: true
   download_mode: direct

vars/forgejo_settings.yml

@@ -0,0 +1,36 @@
+forgejo:
+  containerized: true
+  subdomain: git
+  description: A cybernetic spellbook
+  trusted:
+    proxies:
+      - "127.0.0.1"
+      - "::1"
+  db:
+    type: mysql
+    name: "{{ mysql.users.admin.databases.forgejo.name }}"
+  ssh:
+    port: 2121
+  site:
+    registration:
+      enabled: false
+    landing: explore
+    lock_reasons:
+      - Ongoing Demon War
+      - Excessive Mana Dumping
+      - Improper Domain Expansion
+      - Dark Pattern Spell
+      - Spell Crafted
+      - Successfully Healed
+      - Delegated as Esoterica
+    kanban_columns:
+      - considered
+      - planned
+      - assigned
+      - ongoing
+      - completed
+    triage_categories:
+      - hex backlog
+      - fatal hex
+      - critical hex
+      - nuisance hex

vars/git_aliases.yml

@@ -1,57 +1,5 @@
 git_aliases:
-  - [ckot, checkout]
-  - [chbr, checkout]
-  - [ch_br, checkout]
-  - [tch_br, "'checkout -b'"]
-  - [tchbr, "'checkout -b'"]
-  - [tchbr, "'checkout -b'"]
-  - [add_br, "'checkout -b'"]
-  - [addbr, "'checkout -b'"]
-  - [rm_br, "'branch -D'"]
-  - [rmbr, "'branch -D'"]
-  - [del_br, "'branch -D'"]
-  - [delbr, "'branch -D'"]
-  - [tch_rmt, "'remote add'"]
-  - [tchrmt, "'remote add'"]
-  - [add_rmt, "'remote add'"]
-  - [addrmt, "'remote add'"]
-  - [rm_rmt, "'remote remove'"]
-  - [rmrmt, "'remote remove'"]
-  - [del_rmt, "'remote remove'"]
-  - [delrmt, "'remote remove'"]
-  - [cfg, config]
-  - [psh, push]
-  - [snd, push]
-  - [send, push]
-  - [post, push]
-  - [pl, pull]
-  - [receive, pull]
-  - [get, pull]
-  - [fch, fetch]
-  - [hist, log]
-  - [scenes, log]
+  - [co, checkout]
   - [br, branch]
-  - [lsbr, "'branch -v'"]
-  - [ls_br, "'branch -v'"]
-  - [rmt, remote]
-  - [ls_rmt, "'remote -v'"]
-  - [lsrmt, "'remote -v'"]
-  - [cmmt, commit]
-  - [register, commit]
-  - [st, status]
-  - [stat, status]
-  - [state, status]
-  - [current, status]
-  - [restart, "reset --hard"]
-  - [undo, "'reset HEAD~1 --mixed'"]
-  - [unstage, "'reset HEAD --'"]
-  - [stage, add]
-  - [touch, add]
-  - [tch, add]
-  - [del, rm]
-  - [prev, "'log -1 HEAD'"]
-  - [last, "'log -1 HEAD'"]
-  - [finito, "'!git push origin HEAD'"]
-  - [chkpnt, "'!git add -A && git commit -m'"]
-  - [sgn, "'commit --amend --no-edit -S'"]
-  - [rvrt, revert]
+  - [ci, commit]
+  - [st, status]

vars/gitea_settings.yml

@@ -1,16 +0,0 @@
-gitea:
-  containerized: true
-  subdomain: git
-  trusted:
-    proxies:
-      - "127.0.0.1"
-      - "::1"
-  db:
-    type: mysql
-    name: "{{ mysql.users.admin.databases.gitea.name }}"
-  ssh:
-    port: 2323
-  site:
-    registration:
-      enabled: true
-    landing: explore

vars/iptables_settings@homeserver.yml

@@ -0,0 +1,21 @@
+iptables:
+  inbound_default: DROP
+  outbound_default: ACCEPT
+  allow:
+    inbound:
+      # - port: 51820
+      #   interface: ~
+      #   protocol: udp
+      #   desc: vpn
+      - port: 5353
+        interface: ~
+        protocol: udp
+        desc: mdns
+      - port: 22
+        interface: ~
+        protocol: tcp
+        desc: ssh
+    outbound: []
+  drop:
+    inbound: []
+    outbound: []

vars/iptables_settings@vps.yml

@@ -0,0 +1,37 @@
+iptables:
+  inbound_default: DROP
+  outbound_default: ACCEPT
+  allow:
+    inbound:
+      - port: 51820
+        interface: ~
+        protocol: udp
+        desc: vpn
+      - port: 9191
+        interface: ~
+        protocol: udp
+        desc: tailnet
+      - port: 53
+        interface: ~
+        protocol: udp
+        desc: dns
+      - port: 53
+        interface: ~
+        protocol: tcp
+        desc: dns
+      - port: 80
+        interface: ~
+        protocol: tcp
+        desc: http
+      - port: 443
+        interface: ~
+        protocol: tcp
+        desc: https
+      - port: 443
+        interface: ~
+        protocol: udp
+        desc: https
+    outbound: []
+  drop:
+    inbound: []
+    outbound: []

vars/kavita_settings.yml

@@ -0,0 +1,2 @@
+kavita:
+  containerized: true

vars/local_facts.yml

@@ -1,3 +1,11 @@
 local_facts:
   user_id: rika
-  user_dir: /home/rika
+  user_dir: /home/rika
+  # gpg:
+  #   private_keys:
+  #     - id: 558041D5CF2AB23B
+  #       password: ~
+  #     - id: F0CA546935C02C76
+  #       password: ~
+  #     - id: CE245A7D7CEE3639
+  #       password: ~

vars/mysql_settings.yml

@@ -1,6 +1,6 @@
 mysql:
   containerized: true
-  password: "{{ lookup('password', './.tmp/' + inventory_hostname + '-root@mysql/mysql.pass', chars=['ascii_lowercase', 'digits'], length=8) }}"
+  password: "{{ lookup('password', './.tmp/' + inventory_hostname + '-root@mysql/mysql.pass', chars=['ascii_lowercase', 'digits'], length=12) }}"
   users:
     admin:
       username: admin
@@ -10,8 +10,8 @@ mysql:
           name: testdb
         nextcloud:
           name: nextcloud
-        gitea:
-          name: gitea
+        forgejo:
+          name: forgejo
         opengist:
           name: opengist
-      password: "{{ lookup('password', './.tmp/' + inventory_hostname + '-user@mysql/mysql.pass', chars=['ascii_lowercase', 'digits'], length=8) }}"
+      password: "{{ lookup('password', './.tmp/' + inventory_hostname + '-user@mysql/mysql.pass', chars=['ascii_lowercase', 'digits'], length=12) }}"

vars/openpgp_settings.yml

@@ -0,0 +1,13 @@
+gpg:
+  keypairs:
+    - email: admin@sukaato.moe
+      name: Administrator
+      alias: admin
+      encryption_method: RSA
+      length: 4096
+      primary_subkey:
+        encryption_method: RSA
+        length: 4096
+      expiration: 0
+      password: "{{ lookup('password', './.tmp/' + inventory_hostname + '-admin@openpgp/openpgp.pass', chars=['ascii_lowercase', 'digits'], length=10) }}"
+

vars/podpose_settings.yml

@@ -17,8 +17,32 @@ compose:
       name: forge
     pastebin:
       name: gist
+    forum:
+      name: forum
+    syncplay:
+      name: syncplay
     tail:
       name: tailclient
     dash:
       name: dash
+    aria:
+      name: aria
+    ariang:
+      name: ariang
+    flexget:
+      name: flexget
+    surge:
+      name: surge
+    soulseek:
+      name: soulseek
+    grocy:
+      name: grocy
+    budget:
+      name: budget
+    reader:
+      name: reader
+    stash:
+      name: stash
+    cast:
+      name: cast
 

vars/soulseek_settings.yml

@@ -0,0 +1,2 @@
+soulseek:
+  containerized: true

vars/stash_settings.yml

@@ -0,0 +1,3 @@
+stash:
+  containerized: true
+  port: 9999

vars/syncplay_settings.yml

@@ -0,0 +1,6 @@
+syncplay:
+  subdomain: watch
+  containerized: true
+  password: "{{ lookup('password', './.tmp/' + inventory_hostname + '-syncplay.pass', chars=['ascii_lowercase', 'digits'], length=32) }}"
+  salt: "andCUT"
+  motd: "{{ 'Welcome to ' + (((fqdn | default(inventory_hostname)) | split('.'))[:-1] | join('.')).upper() + ' cinema! 📽️🍿' }}"

vars/vpn_settings.yml

@@ -4,14 +4,11 @@ vpn:
       name: dsnet
     interface: dsnet
     forwards:
-      - [tcp,"80"] # HTTP
-      - [tcp,"443"] # HTTPS
-      - [tcp,"465"] # SMTP
-      - [tcp,"587"] # SMTP
-      - [tcp,"995"] # POP3
-      - [tcp,"110"] # POP3
-      - [tcp,"143"] # IMAP
-      - [tcp,"993"] # IMAP
+      - 80 # HTTP
+      - 443 # HTTPS
+      - 465 # SMTPS
+      - 993 # IMAPS
+      - 1935 # RTMP
   clients:
     - name: staging1.test
       desc: "my homelab server"