systems/infrastructure
1
Fork 0
Code Issues 1 Pull requests 17 Activity Actions

Update yamllint

Browse source
This commit is contained in:
Jake Howard 2020-06-18 20:49:12 +01:00
parent 9f59b30f1e
commit f878866f10
Signed by: jake
GPG key ID: 57AFB45680EDD477
20 changed files with 90 additions and 90 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
ansible/dev-requirements.txt
View file

@ -1,3 +1,3 @@
-r requirements.txt
ansible-lint==4.2.0
yamllint==1.21.0
yamllint==1.23.0

6
ansible/roles/intersect-docker/files/calibre/docker-compose.yml
View file

@ -12,6 +12,6 @@ services:
- ./config:/config
- /srv/nextcloud-data/data/jake/files/EBooks:/books:ro
labels:
- "traefik.enable=true"
- "traefik.http.routers.calibre.rule=Host(`calibre.jakehoward.tech`)"
- "traefik.http.routers.calibre.tls.certresolver=le"
- traefik.enable=true
- traefik.http.routers.calibre.rule=Host(`calibre.jakehoward.tech`)
- traefik.http.routers.calibre.tls.certresolver=le

6
ansible/roles/intersect-docker/files/emby/docker-compose.yml
View file

@ -16,6 +16,6 @@ services:
- 8096:8096
restart: unless-stopped
labels:
- "traefik.enable=true"
- "traefik.http.routers.emby.rule=Host(`media.jakehoward.tech`)"
- "traefik.http.routers.emby.tls.certresolver=le"
- traefik.enable=true
- traefik.http.routers.emby.rule=Host(`media.jakehoward.tech`)
- traefik.http.routers.emby.tls.certresolver=le

8
ansible/roles/intersect-docker/files/gitea/docker-compose.yml
View file

@ -9,10 +9,10 @@ services:
- USER_UID={{ docker_user.id }}
- USER_GID={{ docker_user.id }}
labels:
- "traefik.enable=true"
- "traefik.http.routers.gitea.rule=(Host(`git.theorangeone.net`) || Host(`git.0rng.one`))"
- "traefik.http.routers.gitea.tls.certresolver=le"
- "traefik.http.services.gitea-gitea.loadbalancer.server.port=3000"
- traefik.enable=true
- traefik.http.routers.gitea.rule=(Host(`git.theorangeone.net`) || Host(`git.0rng.one`))
- traefik.http.routers.gitea.tls.certresolver=le
- traefik.http.services.gitea-gitea.loadbalancer.server.port=3000
ports:
- "{{ wireguard.clients.intersect.ip }}:3022:3022"
volumes:

6
ansible/roles/intersect-docker/files/gotify/docker-compose.yml
View file

@ -9,6 +9,6 @@ services:
- ./data:/app/data
restart: unless-stopped
labels:
- "traefik.enable=true"
- "traefik.http.routers.gotify.rule=Host(`gotify.jakehoward.tech`)"
- "traefik.http.routers.gotify.tls.certresolver=le"
- traefik.enable=true
- traefik.http.routers.gotify.rule=Host(`gotify.jakehoward.tech`)
- traefik.http.routers.gotify.tls.certresolver=le

10
ansible/roles/intersect-docker/files/librespeed/docker-compose.yml
View file

@ -11,8 +11,8 @@ services:
- 33377:80
restart: unless-stopped
labels:
- "traefik.enable=true"
- "traefik.http.routers.librespeed.rule=Host(`speed.jakehoward.tech`)"
- "traefik.http.routers.librespeed.tls.certresolver=le"
- "traefik.http.routers.librespeed.middlewares=librespeed-auth@docker"
- "traefik.http.middlewares.librespeed-auth.basicauth.users={{ librespeed_basicauth }}"
- traefik.enable=true
- traefik.http.routers.librespeed.rule=Host(`speed.jakehoward.tech`)
- traefik.http.routers.librespeed.tls.certresolver=le
- traefik.http.routers.librespeed.middlewares=librespeed-auth@docker
- traefik.http.middlewares.librespeed-auth.basicauth.users={{ librespeed_basicauth }}

24
ansible/roles/intersect-docker/files/nextcloud/docker-compose.yml
View file

@ -18,13 +18,13 @@ services:
tmpfs:
- /config/log
labels:
- "traefik.enable=true"
- "traefik.http.routers.nextcloud.rule=Host(`intersect.jakehoward.tech`)"
- "traefik.http.routers.nextcloud.tls.certresolver=le"
- "traefik.http.services.nextcloud-nextcloud.loadbalancer.server.port=443"
- "traefik.http.services.nextcloud-nextcloud.loadbalancer.server.scheme=https"
- "traefik.http.middlewares.nextcloud-hsts.headers.stsseconds=15552000"
- "traefik.http.routers.nextcloud.middlewares=nextcloud-hsts@docker"
- traefik.enable=true
- traefik.http.routers.nextcloud.rule=Host(`intersect.jakehoward.tech`)
- traefik.http.routers.nextcloud.tls.certresolver=le
- traefik.http.services.nextcloud-nextcloud.loadbalancer.server.port=443
- traefik.http.services.nextcloud-nextcloud.loadbalancer.server.scheme=https
- traefik.http.middlewares.nextcloud-hsts.headers.stsseconds=15552000
- traefik.http.routers.nextcloud.middlewares=nextcloud-hsts@docker
db:
image: postgres:12-alpine
@ -63,9 +63,9 @@ services:
cap_add:
- MKNOD
environment:
- "domain=intersect\\.jakehoward\\.tech"
- domain=intersect\\.jakehoward\\.tech
labels:
- "traefik.enable=true"
- "traefik.http.routers.collabora.rule=Host(`collabora.jakehoward.tech`)"
- "traefik.http.routers.collabora.tls.certresolver=le"
- "traefik.http.services.collabora-nextcloud.loadbalancer.server.scheme=https"
- traefik.enable=true
- traefik.http.routers.collabora.rule=Host(`collabora.jakehoward.tech`)
- traefik.http.routers.collabora.tls.certresolver=le
- traefik.http.services.collabora-nextcloud.loadbalancer.server.scheme=https

10
ansible/roles/intersect-docker/files/pihole/docker-compose.yml
View file

@ -15,8 +15,8 @@ services:
- ./dnsmasq.d/:/etc/dnsmasq.d/
restart: unless-stopped
labels:
- "traefik.enable=true"
- "traefik.http.routers.pihole.rule=Host(`pihole.jakehoward.tech`)"
- "traefik.http.routers.pihole.tls.certresolver=le"
- "traefik.http.routers.pihole.middlewares=internal-only@file"
- "traefik.http.services.pihole-pihole.loadbalancer.server.port=80"
- traefik.enable=true
- traefik.http.routers.pihole.rule=Host(`pihole.jakehoward.tech`)
- traefik.http.routers.pihole.tls.certresolver=le
- traefik.http.routers.pihole.middlewares=internal-only@file
- traefik.http.services.pihole-pihole.loadbalancer.server.port=80

8
ansible/roles/intersect-docker/files/synapse/docker-compose.yml
View file

@ -16,10 +16,10 @@ services:
expose:
- 8008
labels:
- "traefik.enable=true"
- "traefik.http.routers.synapse.rule=Host(`matrix.jakehoward.tech`)"
- "traefik.http.routers.synapse.tls.certresolver=le"
- "traefik.http.routers.synapse.entrypoints=web-secure,matrix"
- traefik.enable=true
- traefik.http.routers.synapse.rule=Host(`matrix.jakehoward.tech`)
- traefik.http.routers.synapse.tls.certresolver=le
- traefik.http.routers.synapse.entrypoints=web-secure,matrix
db:
image: postgres:12-alpine

20
ansible/roles/intersect-docker/files/synapse/homeserver.yml
View file

@ -108,15 +108,15 @@ pid_file: /data/homeserver.pid
# listed here, since they correspond to unroutable addresses.)
#
federation_ip_range_blacklist:
- '127.0.0.0/8'
- '10.0.0.0/8'
- '172.16.0.0/12'
- '192.168.0.0/16'
- '100.64.0.0/10'
- '169.254.0.0/16'
- '::1/128'
- 'fe80::/64'
- 'fc00::/7'
- 127.0.0.0/8
- 10.0.0.0/8
- 172.16.0.0/12
- 192.168.0.0/16
- 100.64.0.0/10
- 169.254.0.0/16
- ::1/128
- fe80::/64
- fc00::/7
# List of ports that Synapse should listen on, their purpose and their
# configuration.
@ -469,7 +469,7 @@ acme:
# Again, you may want to change this if you are forwarding connections
# through Apache/Nginx/etc.
#
bind_addresses: ['::', '0.0.0.0']
bind_addresses: ["::", 0.0.0.0]
# How many days remaining on a certificate before it is renewed.
#
reprovision_threshold: 30

8
ansible/roles/intersect-docker/files/torrent/docker-compose.yml
View file

@ -15,10 +15,10 @@ services:
- 8112:8112
restart: unless-stopped
labels:
- "traefik.enable=true"
- "traefik.http.routers.deluge.rule=Host(`deluge.jakehoward.tech`)"
- "traefik.http.routers.deluge.tls.certresolver=le"
- "traefik.http.routers.deluge.middlewares=internal-only@file"
- traefik.enable=true
- traefik.http.routers.deluge.rule=Host(`deluge.jakehoward.tech`)
- traefik.http.routers.deluge.tls.certresolver=le
- traefik.http.routers.deluge.middlewares=internal-only@file
tor-socks-proxy:
image: peterdavehello/tor-socks-proxy:latest

6
ansible/roles/intersect-docker/files/tt-rss/docker-compose.yml
View file

@ -12,9 +12,9 @@ services:
- ./config:/config
restart: unless-stopped
labels:
- "traefik.enable=true"
- "traefik.http.routers.tt-rss.rule=Host(`tt-rss.jakehoward.tech`)"
- "traefik.http.routers.tt-rss.tls.certresolver=le"
- traefik.enable=true
- traefik.http.routers.tt-rss.rule=Host(`tt-rss.jakehoward.tech`)
- traefik.http.routers.tt-rss.tls.certresolver=le
db:
image: postgres:12-alpine

6
ansible/roles/intersect-docker/files/wallabag/docker-compose.yml
View file

@ -12,9 +12,9 @@ services:
- ./data:/var/www/wallabag/data
- ./images:/var/www/wallabag/images
labels:
- "traefik.enable=true"
- "traefik.http.routers.wallabag.rule=Host(`wallabag.jakehoward.tech`)"
- "traefik.http.routers.wallabag.tls.certresolver=le"
- traefik.enable=true
- traefik.http.routers.wallabag.rule=Host(`wallabag.jakehoward.tech`)
- traefik.http.routers.wallabag.tls.certresolver=le
redis:
image: redis:6-alpine

6
ansible/roles/intersect-docker/files/web-rng/docker-compose.yml
View file

@ -6,6 +6,6 @@ services:
container_name: web-rng
restart: unless-stopped
labels:
- "traefik.enable=true"
- "traefik.http.routers.web-rng.rule=Host(`rng.theorangeone.net`)"
- "traefik.http.routers.web-rng.tls.certresolver=le"
- traefik.enable=true
- traefik.http.routers.web-rng.rule=Host(`rng.theorangeone.net`)
- traefik.http.routers.web-rng.tls.certresolver=le

6
ansible/roles/intersect-docker/files/whoami/docker-compose.yml
View file

@ -6,6 +6,6 @@ services:
container_name: whoami
restart: unless-stopped
labels:
- "traefik.enable=true"
- "traefik.http.routers.whoami.rule=Host(`whoami.theorangeone.net`) || Host(`who.0rng.one`)"
- "traefik.http.routers.whoami.tls.certresolver=le"
- traefik.enable=true
- traefik.http.routers.whoami.rule=Host(`whoami.theorangeone.net`) || Host(`who.0rng.one`)
- traefik.http.routers.whoami.tls.certresolver=le

6
ansible/roles/statping/files/docker-compose.yml
View file

@ -8,9 +8,9 @@ services:
volumes:
- ./statping:/app
labels:
- "traefik.enable=true"
- "traefik.http.routers.statping.rule=Host(`stats.theorangeone.net`)"
- "traefik.http.routers.statping.tls.certresolver=le"
- traefik.enable=true
- traefik.http.routers.statping.rule=Host(`stats.theorangeone.net`)
- traefik.http.routers.statping.tls.certresolver=le
db:
image: postgres:12-alpine

6
ansible/roles/traefik/files/file-provider.yml
View file

@ -3,9 +3,9 @@ http:
internal-only:
ipWhiteList:
sourceRange:
- "10.0.0.0/8"
- "172.16.0.0/12"
- "192.168.0.0/16"
- 10.0.0.0/8
- 172.16.0.0/12
- 192.168.0.0/16
tls-redirect:
redirectScheme:
scheme: https

6
ansible/roles/traefik/files/traefik.yml
View file

@ -1,16 +1,16 @@
entryPoints:
web:
address: ":80"
address: :80
proxyProtocol:
trustedIPs:
- "{{ wireguard.cidr }}"
web-secure:
address: ":443"
address: :443
proxyProtocol:
trustedIPs:
- "{{ wireguard.cidr }}"
matrix:
address: ":8448"
address: :8448
proxyProtocol:
trustedIPs:
- "{{ wireguard.cidr }}"

24
ansible/roles/upload/files/docker-compose.yml
View file

@ -11,9 +11,9 @@ services:
- MINIO_ACCESS_KEY={{ minio_access_key }}
- MINIO_SECRET_KEY={{ minio_secret_key }}
labels:
- "traefik.enable=true"
- "traefik.http.routers.upload.rule=Host(`upload.theorangeone.net`)"
- "traefik.http.routers.upload.tls.certresolver=le"
- traefik.enable=true
- traefik.http.routers.upload.rule=Host(`upload.theorangeone.net`)
- traefik.http.routers.upload.tls.certresolver=le
img:
image: theorangeone/static-server:latest
@ -21,9 +21,9 @@ services:
volumes:
- ./data/img:/srv:ro
labels:
- "traefik.enable=true"
- "traefik.http.routers.img.rule=Host(`img.theorangeone.net`) || Host(`img.0rng.one`)"
- "traefik.http.routers.img.tls.certresolver=le"
- traefik.enable=true
- traefik.http.routers.img.rule=Host(`img.theorangeone.net`) || Host(`img.0rng.one`)
- traefik.http.routers.img.tls.certresolver=le
bg:
image: theorangeone/static-server:latest
@ -33,9 +33,9 @@ services:
environment:
- FANCY_INDEX=on
labels:
- "traefik.enable=true"
- "traefik.http.routers.bg.rule=Host(`bg.theorangeone.net`)"
- "traefik.http.routers.bg.tls.certresolver=le"
- traefik.enable=true
- traefik.http.routers.bg.rule=Host(`bg.theorangeone.net`)
- traefik.http.routers.bg.tls.certresolver=le
dl:
image: theorangeone/static-server:latest
@ -43,6 +43,6 @@ services:
volumes:
- ./data/download:/srv:ro
labels:
- "traefik.enable=true"
- "traefik.http.routers.dl.rule=Host(`dl.theorangeone.net`) || Host(`dl.0rng.one`)"
- "traefik.http.routers.dl.tls.certresolver=le"
- traefik.enable=true
- traefik.http.routers.dl.rule=Host(`dl.theorangeone.net`) || Host(`dl.0rng.one`)
- traefik.http.routers.dl.tls.certresolver=le

6
ansible/roles/website/files/docker-compose.yml
View file

@ -10,9 +10,9 @@ services:
- ./access.log:/var/log/nginx/access.log
- ./report.html:/usr/share/nginx/html/stats/index.html:ro
labels:
- "traefik.enable=true"
- "traefik.http.routers.website.rule=Host(`theorangeone.net`) || Host(`www.theorangeone.net`)"
- "traefik.http.routers.website.tls.certresolver=le"
- traefik.enable=true
- traefik.http.routers.website.rule=Host(`theorangeone.net`) || Host(`www.theorangeone.net`)
- traefik.http.routers.website.tls.certresolver=le
stats:
image: theorangeone/goaccess-static:latest