actcur/salt
3
0
Fork 0
Code Issues 5 Pull requests Projects Releases Wiki Activity

initial commit

Browse source
This commit is contained in:
Beth Parker 2017-08-07 13:25:01 -05:00
commit e36af35f06
301 changed files with 12715 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
merge.sh Normal file
View file

@ -0,0 +1,4 @@
git checkout master
git merge dev
git push
git checkout dev

2
pillars/roles/aurpkgs/calendar.sls Executable file
View file

@ -0,0 +1,2 @@
aurpkgs:
baikal: []

3
pillars/roles/aurpkgs/git.sls Executable file
View file

@ -0,0 +1,3 @@
aurpkgs:
glide-git: []
gogs: []

2
pillars/roles/aurpkgs/headphones.sls Executable file
View file

@ -0,0 +1,2 @@
aurpkgs:
headphones: []

21
pillars/roles/aurpkgs/init.sls Executable file
View file

@ -0,0 +1,21 @@
{% set states = salt['cp.list_states'](saltenv) %}
include:
- roles.aurpkgs.none
{%- if grains['roles'] is defined -%}
{%- if grains['roles'] is not none -%}
{%- if 'aurrepo' in grains['roles'] -%}
{%- for state in states %}
{%- if state.startswith("pillars.roles.aurpkgs.") -%}
{%- set role = state.split('.')[3] %}
- roles.aurpkgs.{{ role }}
{%- endif -%}
{%- endfor -%}
{%- else -%}
{%- for role in grains['roles'] %}
{%- if 'pillars.roles.aurpkgs.'+role in states %}
- roles.aurpkgs.{{ role }}
{%- endif -%}
{%- endfor -%}
{%- endif -%}
{%- endif -%}
{%- endif -%}

2
pillars/roles/aurpkgs/jackett.sls Executable file
View file

@ -0,0 +1,2 @@
aurpkgs:
jackett: []

6
pillars/roles/aurpkgs/lam.sls Executable file
View file

@ -0,0 +1,6 @@
aurpkgs:
ldap-account-manager: []
# building php56 doesn't seem to work
# php56: []
# php56-fpm: []
# php56-ldap: []

2
pillars/roles/aurpkgs/none.sls Executable file
View file

@ -0,0 +1,2 @@
aurpkgs:
wtf:[]

2
pillars/roles/aurpkgs/ombi.sls Executable file
View file

@ -0,0 +1,2 @@
aurpkgs:
ombi: []

2
pillars/roles/aurpkgs/plexmediaserver.sls Executable file
View file

@ -0,0 +1,2 @@
aurpkgs:
plex-media-server-plexpass: []

2
pillars/roles/aurpkgs/portal.sls Executable file
View file

@ -0,0 +1,2 @@
aurpkgs:
byobu: []

2
pillars/roles/aurpkgs/radarr.sls Executable file
View file

@ -0,0 +1,2 @@
aurpkgs:
radarr: []

2
pillars/roles/aurpkgs/sonarr.sls Executable file
View file

@ -0,0 +1,2 @@
aurpkgs:
sonarr: []

5
pillars/roles/firewalld/certbot.sls Executable file
View file

@ -0,0 +1,5 @@
firewalld:
70_internal:
service:
- http
- https

17
pillars/roles/firewalld/core.sls Executable file
View file

@ -0,0 +1,17 @@
firewalld:
60_guest:
description: Guest zone. Only connections from the guest network are accepted.
include:
- 99_public
source:
- 192.168.42.0/24
70_internal:
description: Internal zone. Only connections from internal network are accepted.
include:
- 99_public
source:
- 172.16.0.0/16
99_public:
description: Public zone. Only selected connections are accepted from anywhere.
source:
- 0.0.0.0/0

12
pillars/roles/firewalld/deluge.sls Executable file
View file

@ -0,0 +1,12 @@
firewalld:
70_internal:
service:
- http
port:
- 58846/tcp
- 8112/tcp
99_public:
port:
- 63150/tcp
- 63150/udp

7
pillars/roles/firewalld/git.sls Executable file
View file

@ -0,0 +1,7 @@
firewalld:
70_internal:
port:
- 3000/tcp
99_public:
port:
- 5022/tcp

7
pillars/roles/firewalld/gitlab.sls Normal file
View file

@ -0,0 +1,7 @@
firewalld:
70_internal:
port:
- 3000/tcp
99_public:
port:
- 5022/tcp

13
pillars/roles/firewalld/init.sls Executable file
View file

@ -0,0 +1,13 @@
{% set states = salt['cp.list_states'](saltenv) %}
include:
- roles.firewalld.core
{%- if grains['roles'] is defined -%}
{%- if grains['roles'] is not none -%}
{%- for role in grains['roles'] %}
{%- if 'pillars.roles.firewalld.'+role in states %}
- roles.firewalld.{{ role }}
{%- endif -%}
{%- endfor -%}
{%- endif -%}
{%- endif -%}

8
pillars/roles/firewalld/nginx-proxy.sls Executable file
View file

@ -0,0 +1,8 @@
firewalld:
70_internal:
service:
- http
- https
50_server:
port:
- 8080/tcp

4
pillars/roles/firewalld/pepper.sls Executable file
View file

@ -0,0 +1,4 @@
firewalld:
70_internal:
port:
- 80/tcp

4
pillars/roles/firewalld/plexmediaserver.sls Executable file
View file

@ -0,0 +1,4 @@
firewalld:
99_public:
port:
- 32400/tcp

5
pillars/roles/firewalld/portal.sls Executable file
View file

@ -0,0 +1,5 @@
firewalld:
99_public:
service:
- http
- https

14
pillars/roles/firewalld/saltmaster.sls Executable file
View file

@ -0,0 +1,14 @@
firewalld:
70_internal:
port:
- 4505/tcp
- 4506/tcp
# rule:
# salt port 1:
# source: 192.168.41.29
# port: 4505/tcp
# action: accept
# salt port 2:
# source: 192.168.41.29
# port: 4506/tcp
# action: accept

11
pillars/roles/firewalld/saltminion.sls Executable file
View file

@ -0,0 +1,11 @@
firewalld:
70_internal:
rule:
salt port 1:
source: 192.168.41.29
port: 4505/tcp
action: accept
salt port 2:
source: 192.168.41.29
port: 4506/tcp
action: accept

15
pillars/roles/firewalld/server.sls Executable file
View file

@ -0,0 +1,15 @@
firewalld:
10_enduser:
description: End User zone. Only connections form end users are accepted.
include:
- 99_public
- 70_internal
source:
- 172.16.40.0/24
50_server:
description: Server zone. Only connections from servers are accepted.
include:
- 99_public
- 70_internal
source:
- 172.16.41.0/24

4
pillars/roles/firewalld/ssh.sls Executable file
View file

@ -0,0 +1,4 @@
firewalld:
70_internal:
service:
- ssh

13
pillars/roles/git/init.sls Executable file
View file

@ -0,0 +1,13 @@
{% set states = salt['cp.list_states'](saltenv) %}
include:
- roles.git.none
{%- if grains['roles'] is defined -%}
{%- if grains['roles'] is not none -%}
{%- for role in grains['roles'] %}
{%- if 'pillars.roles.git.'+role in states %}
- roles.git.{{ role }}
{%- endif -%}
{%- endfor -%}
{%- endif -%}
{%- endif -%}

0
pillars/roles/git/none.sls Executable file
View file

9
pillars/roles/git/portal.sls Normal file
View file

@ -0,0 +1,9 @@
git:
tmux:
repo: "ssh://gogs@git.actcur.com:5022/actcur/tmux.git"
path: "/root/tmux"
branch: "master"
key: "git_actcur"
force: true
email: "actcur@actcur.com"
name: "Actaeus Curabitur"

17
pillars/roles/git/saltmaster.sls Executable file
View file

@ -0,0 +1,17 @@
git:
salt:
repo: "ssh://gogs@git.actcur.com:5022/actcur/salt.git"
path: "/srv/salt/prod"
branch: "master"
key: "git_actcur"
force: true
email: "actcur@actcur.com"
name: "Actaeus Curabitur"
salt_dev:
repo: "ssh://gogs@git.actcur.com:5022/actcur/salt.git"
path: "/srv/salt/dev"
branch: "dev"
key: "git_actcur"
force: true
email: "actcur@actcur.com"
name: "Actaeus Curabitur"

7
pillars/roles/init.sls Executable file
View file

@ -0,0 +1,7 @@
include:
- roles.maintainer
- roles.firewalld
- roles.nginx
- roles.aurpkgs
- roles.mount
- roles.git

4
pillars/roles/maintainer/deluge.sls Executable file
View file

@ -0,0 +1,4 @@
roles:
pepper:
maintainer:
- masaufuku

7
pillars/roles/maintainer/init.sls Executable file
View file

@ -0,0 +1,7 @@
include:
- roles.maintainer.saltmaster
- roles.maintainer.ssh
- roles.maintainer.server
- roles.maintainer.saltminion
- roles.maintainer.pepper
- roles.maintainer.deluge

4
pillars/roles/maintainer/pepper.sls Executable file
View file

@ -0,0 +1,4 @@
roles:
pepper:
maintainer:
- masaufuku

4
pillars/roles/maintainer/saltmaster.sls Executable file
View file

@ -0,0 +1,4 @@
roles:
saltmaster:
maintainer:
- masaufuku

4
pillars/roles/maintainer/saltminion.sls Executable file
View file

@ -0,0 +1,4 @@
roles:
saltminion:
maintainer:
- masaufuku

5
pillars/roles/maintainer/server.sls Executable file
View file

@ -0,0 +1,5 @@
roles:
server:
maintainer:
- masaufuku

5
pillars/roles/maintainer/ssh.sls Executable file
View file

@ -0,0 +1,5 @@
roles:
ssh:
maintainer:
- masaufuku

6
pillars/roles/mount/gitlab.sls Normal file
View file

@ -0,0 +1,6 @@
mount:
sshfs:
/var/lib/gitlab:
host: host.actcur.com
directory: /mnt/butter/git
user: git

13
pillars/roles/mount/init.sls Executable file
View file

@ -0,0 +1,13 @@
{% set states = salt['cp.list_states'](saltenv) %}
include:
- roles.mount.none
{%- if grains['roles'] is defined -%}
{%- if grains['roles'] is not none -%}
{%- for role in grains['roles'] %}
{%- if 'pillars.roles.mount.'+role in states %}
- roles.mount.{{ role }}
{%- endif -%}
{%- endfor -%}
{%- endif -%}
{%- endif -%}

0
pillars/roles/mount/none.sls Executable file
View file

6
pillars/roles/mount/pkg-cache.sls Executable file
View file

@ -0,0 +1,6 @@
mount:
sshfs:
/mnt/pkgs:
host: host.actcur.com
directory: /mnt/butter/pkgs
user: pkgs

14
pillars/roles/mount/plexmediaserver.sls Executable file
View file

@ -0,0 +1,14 @@
mount:
sshfs:
/mnt/video:
host: host.actcur.com
directory: /mnt/butter/video
user: mount
/mnt/music:
host: host.actcur.com
directory: /mnt/butter/music
user: mount
ext4:
/var/lib/plexmediaserver/Library:
device: UUID=0ab3f7fc-6525-40ba-905c-ff5fff2de1a3

6
pillars/roles/mount/saltmaster.sls Executable file
View file

@ -0,0 +1,6 @@
mount:
sshfs:
/mnt:
host: host.actcur.com
directory: /mnt/butter/salt
user: mount

4
pillars/roles/nginx/authtypes.txt Executable file
View file

@ -0,0 +1,4 @@
blocked: can't access
none: public access
simple: file-based auth
ldap: directory based auth - not implemented

12
pillars/roles/nginx/baikal.sls Executable file
View file

@ -0,0 +1,12 @@
nginx:
cal:
auth: none
https:
port: 8080
prot: http
default: no
baikal:
auth: none
https:
port: 8080
prot: http

11
pillars/roles/nginx/calandar.sls Executable file
View file

@ -0,0 +1,11 @@
nginx:
cal:
auth: none
https:
port: 8081
prot: http
baikal:
auth: none
https:
port: 8081
prot: http

6
pillars/roles/nginx/git.sls Executable file
View file

@ -0,0 +1,6 @@
nginx:
git:
auth: none
https:
port: 3000
prot: http

6
pillars/roles/nginx/gitlab.sls Normal file
View file

@ -0,0 +1,6 @@
nginx:
git:
auth: none
https:
port: 3000
prot: http

6
pillars/roles/nginx/headphones.sls Executable file
View file

@ -0,0 +1,6 @@
nginx:
headphones:
auth: blocked
https:
port: 8181
prot: http

21
pillars/roles/nginx/init.sls Executable file
View file

@ -0,0 +1,21 @@
{% set states = salt['cp.list_states'](saltenv) %}
include:
- roles.nginx.none
{%- if grains['roles'] is defined -%}
{%- if grains['roles'] is not none -%}
{%- if 'portal' in grains['roles'] -%}
{%- for state in states %}
{%- if state.startswith("pillars.roles.nginx.") -%}
{%- set role = state.split('.')[3] %}
- roles.nginx.{{ role }}
{%- endif -%}
{%- endfor -%}
{%- else -%}
{%- for role in grains['roles'] %}
{%- if 'pillars.roles.nginx.'+role in states %}
- roles.nginx.{{ role }}
{%- endif -%}
{%- endfor -%}
{%- endif -%}
{%- endif -%}
{%- endif -%}

6
pillars/roles/nginx/jackett.sls Executable file
View file

@ -0,0 +1,6 @@
nginx:
jackett:
auth: blocked
https:
port: 9117
prot: http

6
pillars/roles/nginx/lam.sls Executable file
View file

@ -0,0 +1,6 @@
nginx:
lam:
auth: none
https:
port: 8000
prot: http

6
pillars/roles/nginx/lamp.sls Executable file
View file

@ -0,0 +1,6 @@
nginx:
lamp:
auth: none
https:
port: 8000
prot: http

6
pillars/roles/nginx/ldapui.sls Executable file
View file

@ -0,0 +1,6 @@
nginx:
ldapui:
auth: simple
https:
port: 8000
prot: http

0
pillars/roles/nginx/none.sls Executable file
View file

6
pillars/roles/nginx/ombi.sls Executable file
View file

@ -0,0 +1,6 @@
nginx:
ombi:
auth: none
https:
port: 3579
prot: http

9
pillars/roles/nginx/pkg-cache.sls Executable file
View file

@ -0,0 +1,9 @@
nginx:
pkg:
auth: blocked
https:
port: 8000
prot: http
http:
port: 8000
prot: http

6
pillars/roles/nginx/plexmediaserver.sls Executable file
View file

@ -0,0 +1,6 @@
nginx:
plex:
auth: none
https:
port: 32400
prot: http

6
pillars/roles/nginx/radarr.sls Executable file
View file

@ -0,0 +1,6 @@
nginx:
radarr:
auth: blocked
https:
port: 7878
prot: http

6
pillars/roles/nginx/sonarr.sls Executable file
View file

@ -0,0 +1,6 @@
nginx:
sonarr:
auth: blocked
https:
port: 8989
prot: http

6
pillars/roles/nginx/sync.sls Executable file
View file

@ -0,0 +1,6 @@
nginx:
sync:
auth: blocked
https:
port: 8080
prot: http

6
pillars/roles/nginx/ttrss.sls Executable file
View file

@ -0,0 +1,6 @@
nginx:
tt:
auth: none
https:
port: 8080
prot: http

2
pillars/servers/env/init.sls vendored Executable file
View file

@ -0,0 +1,2 @@
include:
- servers.env.server.{{ grains['host'] }}

1
pillars/servers/env/server/.sls vendored Executable file
View file

@ -0,0 +1 @@
env: prod

1
pillars/servers/env/server/archbaikal.sls vendored Executable file
View file

@ -0,0 +1 @@
env: prod

1
pillars/servers/env/server/archcal.sls vendored Executable file
View file

@ -0,0 +1 @@
env: prod

1
pillars/servers/env/server/archcouch.sls vendored Executable file
View file

@ -0,0 +1 @@
env: prod

1
pillars/servers/env/server/archdeluge.sls vendored Executable file
View file

@ -0,0 +1 @@
env: prod

1
pillars/servers/env/server/archgit.sls vendored Executable file
View file

@ -0,0 +1 @@
env: prod

1
pillars/servers/env/server/archheadphones.sls vendored Executable file
View file

@ -0,0 +1 @@
env: prod

1
pillars/servers/env/server/archjackett.sls vendored Executable file
View file

@ -0,0 +1 @@
env: prod

1
pillars/servers/env/server/archlam.sls vendored Executable file
View file

@ -0,0 +1 @@
env: prod

1
pillars/servers/env/server/archldap.sls vendored Executable file
View file

@ -0,0 +1 @@
env: prod

1
pillars/servers/env/server/archldaptest.sls vendored Executable file
View file

@ -0,0 +1 @@
env: prod

1
pillars/servers/env/server/archldapui.sls vendored Executable file
View file

@ -0,0 +1 @@
env: prod

1
pillars/servers/env/server/archmail.sls vendored Executable file
View file

@ -0,0 +1 @@
env: prod

1
pillars/servers/env/server/archombi.sls vendored Executable file
View file

@ -0,0 +1 @@
env: prod

1
pillars/servers/env/server/archpkg.sls vendored Executable file
View file

@ -0,0 +1 @@
env: prod

1
pillars/servers/env/server/archplex.sls vendored Executable file
View file

@ -0,0 +1 @@
env: prod

1
pillars/servers/env/server/archportal.sls vendored Executable file
View file

@ -0,0 +1 @@
env: prod

1
pillars/servers/env/server/archradarr.sls vendored Executable file
View file

@ -0,0 +1 @@
env: prod

1
pillars/servers/env/server/archrequest.sls vendored Executable file
View file

@ -0,0 +1 @@
env: prod

1
pillars/servers/env/server/archsalt.sls vendored Executable file
View file

@ -0,0 +1 @@
env: prod

1
pillars/servers/env/server/archsonarr.sls vendored Executable file
View file

@ -0,0 +1 @@
env: prod

1
pillars/servers/env/server/archssh.sls vendored Executable file
View file

@ -0,0 +1 @@
env: prod

1
pillars/servers/env/server/archsync.sls vendored Executable file
View file

@ -0,0 +1 @@
env: prod

1
pillars/servers/env/server/archtt.sls vendored Executable file
View file

@ -0,0 +1 @@
env: prod

1
pillars/servers/env/server/base vendored Executable file
View file

@ -0,0 +1 @@
env: prod

1
pillars/servers/env/server/centlamp.sls vendored Executable file
View file

@ -0,0 +1 @@
env: prod

1
pillars/servers/env/server/pisalt.sls vendored Executable file
View file

@ -0,0 +1 @@
env: prod

4
pillars/servers/init.sls Executable file
View file

@ -0,0 +1,4 @@
include:
- servers.maintainer
- servers.env
- servers.roles

2
pillars/servers/maintainer/init.sls Executable file
View file

@ -0,0 +1,2 @@
include:
- servers.maintainer.server.{{ grains['host'] }}

3
pillars/servers/maintainer/server/.sls Executable file
View file

@ -0,0 +1,3 @@
maintainer:
- masaufuku

3
pillars/servers/maintainer/server/archbaikal.sls Executable file
View file

@ -0,0 +1,3 @@
maintainer:
- masaufuku

3
pillars/servers/maintainer/server/archcal.sls Executable file
View file

@ -0,0 +1,3 @@
maintainer:
- masaufuku

3
pillars/servers/maintainer/server/archcouch.sls Executable file
View file

@ -0,0 +1,3 @@
maintainer:
- masaufuku

3
pillars/servers/maintainer/server/archdeluge.sls Executable file
View file

@ -0,0 +1,3 @@
maintainer:
- masaufuku

3
pillars/servers/maintainer/server/archgit.sls Executable file
View file

@ -0,0 +1,3 @@
maintainer:
- masaufuku

Some files were not shown because too many files have changed in this diff Show more