common/borgbackup/templates/borgbackup-create.sh

@@ -11,7 +11,7 @@ export LAST_BACKUPS_PROM="/var/lib/prometheus/node-exporter/lastbackup.prom"
 
 echo "===[ Create Backup: {{ item.value.repo }} ]===" \
 && \
-borg create $1 $2 $3 --info --show-rc --stats --compression {{ item.value.compression }} {{ item.value.options }} {{ item.value.repo }}::$BACKUP_DATE \
+borg create $1 $2 $3 --info --show-rc --stats --exclude *lost+found --compression {{ item.value.compression }} {{ item.value.options }} {{ item.value.repo }}::$BACKUP_DATE \
 {% for directory in borgbackup_directories %}
 {{ directory }} \
 {% endfor %} \

common/borgbackup/templates/borgbackup-prometheus.sh

@@ -3,6 +3,9 @@
 export BORG_PASSPHRASE="{{repo_passphrase}}"
 export BORG_RSH="ssh -i /srv/borgbackup/repo_sshkey"
 
+# Force locale for correct formatting
+LANG=en_US.UTF-8
+
 # Metrics output file in the prometheus node-exporter directory 
 PROM_FILE="/var/lib/prometheus/node-exporter/borgbackup.prom"
 

common/docker_dockerstats/templates/Dockerfile

-FROM node:14-alpine
+FROM node:19-alpine
 
 RUN apk update \
  && apk upgrade \

common/docker_ldap/tasks/main.yml

@@ -22,8 +22,16 @@
     - docker-compose.yml
     - Dockerfile 
     - syncrepl_exporter.yml 
+  register: config
 
-- name: start openldap docker
+- name: "stop {{ servicename}} docker"
   docker_compose:
-    project_src: /srv/ldap/
+    project_src: "{{ basedir }}"
+    state: absent
+  when: config.changed
+
+- name: "start {{ servicename}} docker"
+  docker_compose:
+    project_src: "{{ basedir }}"
     state: present
+

common/docker_traefik/tasks/main.yml

@@ -52,4 +52,4 @@
   docker_compose:
     project_src: "{{ basedir }}"
     state: present
-    
\ No newline at end of file
+    

group_vars/prod

@@ -35,24 +35,24 @@ mail_domains:
     maildomain: warpzone.ms 
     mxserver: mailserver.warpzone.ms
     mxhostname: webserver
-    spf: v=spf1 mx ~all
+    spf: "v=spf1 mx a:mailserver.warpzone.ms ~all"
     dmarc: v=DMARC1; p=none;
     dkim:
-      - { selector: "dkim", value: "v=DKIM1;k=rsa;t=s;s=email;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+ZvoSoa2LwBbzQMD9laVy8hUGbvhe1LkL/6SIk3Ks8GfiT7p+hdlbcvo+noBR4gvbmSWwn3yBxOnGCtSH+iP0q7HHrmeEXJqGkLK25zZh1EO8bZqIHi2NX/LnN7dJTO8C27CRLME+YtWdrDaerIWXsHk7U+qD1ZuM5Q+FgAzsQ5uxQVlD6sO3IU" }
+      - { selector: "dkim", value: "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNnNZElbWq9EonFULbr8vWWykKmZEylRwjo4lYx/lXsGDFWBuNh2s6gFF10OuHWtavokjvh/7sFidNaRYQkn3uwHmylBWFn7Jr2lPWY8PBEoIeAZZx5qHaDWxJVgzE7maFyXAswDGXcR/DRTn2xR6osNXOovjGeYXq/atR/45iwfgkhqAaXaV1uP/K9y\" \"y2sZ2dRtGEwCKsWbP26cOZ6MUcADszgUTEp59iKey79m0uwi0IpA8WjEKVwbMcf/6fBw1ejIEjVUX+bami2fQ6RPl4uEyloco4paV3w/vww2hh4VchCFLYAEKMkZOZs/eTDGsjaMguwHbPeVJjkpX2T6WQIDAQAB" }
   member_warpzonems:
     maildomain: member.warpzone.ms 
     mxserver: mailserver.warpzone.ms
     mxhostname: webserver
-    spf: v=spf1 mx ~all
-    dmarc: v=DMARC1; p=none;
+    spf: "v=spf1 mx a:mailserver.warpzone.ms ~all"
     dkim:
-      - { selector: "dkim", value: "v=DKIM1;k=rsa;t=s;s=email;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8lZDykC3gbxSHMwTNO7QrDytlO9Sg66nEXpIv1/GqQrj3T1i3tTn05XxpJbRXUMuooaP6xZqt2OR3f/Wex6d4WwHH4Z1YuvyKDUWewynGZ3Ge+Vca8T0LBdDw7DZWtkXv94SHPWLyPWuuBXQs2nAgrMn3rtlwKovEsOqg85mFNb1EVm9Rgj9TB2" }
+      - { selector: "dkim", value: "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu334a+uJ5b7D8UTz3Up6A8EjZhEnXaIpiIcKAGPXXD2ZBGmkWfUNcwDcfMoDErH6ntXzf0uH2VMvaajB/wdKLyly1irDKoyjLA3hJb5wnF9Gh0anL1qxY6UA189vWsw+2JlZJWyQ3IcaQ720SM3OrrK4AL3gRItieSEQ+23m5aW0P6sgUuMXTmmKLbd4\" \"DzZ14Emw293TD2p4gJtgxW/6EfIfcUU+/jP1NNm9gksyzynH1pJXPwVruo9u4QujEQiPqtVsVtrtUm1kbnW+pexj3eKOLLEHGZ+p5AZ/jtALk9pJfNumm/XHFK5PTZDBIipXOYvuG8RdwsaCQRezGKy04QIDAQAB" }
   lists_warpzonems:
     maildomain: lists.warpzone.ms 
     mxserver: mailserver.warpzone.ms
     mxhostname: webserver
-    spf: v=spf1 mx ~all
-    dmarc: v=DMARC1; p=none;
+    spf: "v=spf1 mx a:mailserver.warpzone.ms ~all"
+    dkim:
+      - { selector: "dkim", value: "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoO7SXkUkM17Y1Vi/cvO48IJmlReGWSaYHY+wEldLHt80TiXP0AGZ8nG+DshXi1J2D5xjn8cJu4VqgDrLFnsRJyGYKmi7yVukANVg6gjYlET4y5+UU7Vk2W3xhN2U/8F0rcyynALzQa8i4Y/wEI0qkgHyE6+lITmglJvlj6tgp4YYK2TBH3Zo//PukOmU\" \"6gG/qu0+6p+CepvqzfGT2l1duov5a2+DJJzlJTULJ5D5Blsmg/0GeC81gZ4QDC3S8aaM5Pw3I3lQCSJT4Q4Ge6Ues4ccagNrdnZhtHNaVFGdL1mR1k+G784gpMZphPj5MylNEpA3V4bD7/Ygf4GuAvHdMwIDAQAB" }
 #  chaostreffmuensterde:
 #    maildomain: chaostreff-muenster.de 
 #    mxserver: mailserver.warpzone.ms
@@ -113,3 +113,9 @@ esphome_devices:
   - { id: "lounge",        name: "Lounge",        groups: "gLounge",        sensors: [ "Temp", "pressure", "humidity" ] }
   - { id: "status",        name: "Status/Strom",  groups: "gHauptraum",     sensors: [ "stromverbrauch", "warpzone_status" ] }
   - { id: "vortragsraum",  name: "Vortragsraum",  groups: "gVortragsraum",  sensors: [ "Temp", "pressure", "humidity" ] }
+
+#Global Homematic configuration 
+homematic:
+  ccu2_host: 192.168.0.15
+  devices_heizung:
+    - { name: "HeizungKlo", id: "OEQ0663079" }

group_vars/test

+# Globale Variablen für alle produktiven Server
+
+
+# SMTP Settings 
+smtp_domain: enteentelos.com
+smtp_host: mailserver.enteentelos.com
+smtp_port: 587 
+noreply_email_user: noreply@enteentelos.com
+

host_vars/carrot

@@ -35,8 +35,8 @@ administratorenteam:
 # Monitoring aktivieren
 alert:
   load:
-    warn: 2
-    crit: 4
+    warn: 5
+    crit: 10
   disks:
     - { mountpoint: "/", warn: "5 GB", crit: "1 GB" }
 

host_vars/ogg

@@ -49,15 +49,31 @@ docker:
 # Monitoring aktivieren
 alert:
   load:
-    warn: 2
-    crit: 4
+    warn: 5
+    crit: 10
   containers:
     - { name: "dockerstats_app_1" }    
+    - { name: "esphome_app_1" }    
+    - { name: "esphome-dev_app_1" }    
+    - { name: "fridgeserver_app_1" }    
+    - { name: "grafana_app_1" }    
+    - { name: "graylog_graylog_1" }    
+    - { name: "graylog_mongodb_1" }    
+    - { name: "graylog_opensearch_1" }    
+    - { name: "heimdall_app_1" }    
+    - { name: "homeassistant_app_1" }    
+    - { name: "homeassistant_influxdb_1" }    
+    - { name: "homematic_app_1" }    
+    - { name: "homematic_influxdb_1" }    
+    - { name: "homematic_telegraf_1" }    
     - { name: "mqtt_app_1" } 
     - { name: "mqtt_influxdb_1" } 
-    - { name: "mqtt_telegraf_1" } 
+    - { name: "mqtt_tgbinary_1" } 
+    - { name: "mqtt_tgfloat_1" } 
     - { name: "nodered_app_1" }
-    - { name: "unifi_app_1" }
+    - { name: "omada_app_1" }
+    - { name: "tasmoadmin_app_1" }
+    - { name: "traefik_app_1" }
   disks:
     - { mountpoint: "/", warn: "5 GB", crit: "1 GB" }
     - { mountpoint: "/srv", warn: "5 GB", crit: "1 GB" }
@@ -70,21 +86,21 @@ borgbackup_repos:
   borgbase:
 
     # URL des Repos
-    repo: "juxt0t1v@juxt0t1v.repo.borgbase.com:repo"
+    repo: "apu4cibr@apu4cibr.repo.borgbase.com:repo"
 
     # Repo-spezifische Optionen zum Aufruf von Borgbackup
     # z.B. bei Sicherungen zu rsync.net ist --remote-path=borg1 erforderlich
     options: ""
 
     # Compression Options, z,b. "zlib,5, "zstd,5"
-    compression: "zlib,5"
+    compression: "zstd,5"
 
     # Prune Optionen
     prune: "--keep-within=2d --keep-daily=7 --keep-weekly=4 --keep-monthly=6"
 
     # Backup Schedule
     weekday: "*"
-    hour: "*/4"
+    hour: "6"
     minute: "40"
 
     #  Zusätzliche Verzeichnisse, die nur in diesem Backup gesichtert werden sollen
@@ -92,8 +108,8 @@ borgbackup_repos:
 
     # Monitoring
     alert: true
-    warning_age: 10
-    critical_age: 20
+    warning_age: 36
+    critical_age: 60
     warning_count: 10
     critical_count: 5
 

host_vars/verwaltung

@@ -63,8 +63,8 @@ docker:
 # Monitoring aktivieren 
 alert:  
   load: 
-    warn: 8
-    crit: 16
+    warn: 5
+    crit: 10
   containers:
     - { name: "dockerstats_app_1" }
     - { name: "gitea_app_1" }
@@ -86,35 +86,35 @@ alert:
 # Definition von Borgbackup Repositories 
 borgbackup_repos:
 
-  warpsrvint: 
+  # warpsrvint: 
 
-    # URL des Repos   
-    repo: "ssh://warpzone@192.168.0.201:22/data/warpzone/verwaltung"
+  #   # URL des Repos   
+  #   repo: "ssh://warpzone@192.168.0.201:22/data/warpzone/verwaltung"
     
-    # Repo-spezifische Optionen zum Aufruf von Borgbackup
-    # z.B. bei Sicherungen zu rsync.net ist --remote-path=borg1 erforderlich
-    options: ""
+  #   # Repo-spezifische Optionen zum Aufruf von Borgbackup
+  #   # z.B. bei Sicherungen zu rsync.net ist --remote-path=borg1 erforderlich
+  #   options: ""
 
-    # Compression Options, z,b. "zlib,5, "zstd,5"
-    compression: "zlib,5"
+  #   # Compression Options, z,b. "zlib,5, "zstd,5"
+  #   compression: "zlib,5"
 
-    # Prune Optionen 
-    prune: "--keep-within=2d --keep-daily=7 --keep-weekly=4 --keep-monthly=6"
+  #   # Prune Optionen 
+  #   prune: "--keep-within=2d --keep-daily=7 --keep-weekly=4 --keep-monthly=6"
     
-    # Backup Schedule 
-    weekday: "*"
-    hour: "10"
-    minute: "30"
-
-    #  Zusätzliche Verzeichnisse, die nur in diesem Backup gesichtert werden sollen 
-    # directories:
-
-    # Monitoring
-    alert: true
-    warning_age: 26 
-    critical_age: 50
-    warning_count: 10
-    critical_count: 5
+  #   # Backup Schedule 
+  #   weekday: "*"
+  #   hour: "10"
+  #   minute: "30"
+
+  #   #  Zusätzliche Verzeichnisse, die nur in diesem Backup gesichtert werden sollen 
+  #   # directories:
+
+  #   # Monitoring
+  #   alert: true
+  #   warning_age: 26 
+  #   critical_age: 50
+  #   warning_count: 10
+  #   critical_count: 5
 
   borgbase: 
 

host_vars/weatherwax

@@ -32,9 +32,10 @@ administratorenteam:
 # Monitoring aktivieren
 alert:
   load:
-    warn: 4
-    crit: 8
+    warn: 10
+    crit: 20
   disks:
     - { mountpoint: "/",         warn: "10 GB", crit: "3 GB" }
-    - { mountpoint: "/mnt/data", warn: "10 GB", crit: "3 GB" }
+    # btrfs currently no data from node exporter 
+    # - { mountpoint: "/mnt/data", warn: "10 GB", crit: "3 GB" }
 

host_vars/webserver

@@ -33,8 +33,6 @@ webserver_domains:
   - "warpzone.ms"
   - "api.warpzone.ms"
 #  - "auth.warpzone.ms"
-  - "autodiscover.warpzone.ms"
-  - "autoconfig.warpzone.ms"
   - "gitlab.warpzone.ms"
   - "matrix.warpzone.ms"
   - "mailserver.warpzone.ms"
@@ -65,21 +63,17 @@ administratorenteam:
 docker:
   # Interne Docker-Netzwerke 
   internal_networks:
-    - mail
     - web
     
 # Monitoring aktivieren 
 alert:  
   load: 
-    warn: 8
-    crit: 16
+    warn: 5
+    crit: 10
   containers:
-    - { name: "autodiscover_warpzonems_1" }
-    - { name: "autodiscover_lists_warpzonems_1" }
-    - { name: "autodiscover_member_warpzonems_1" }
+    - { name: "coturn_coturn_1" }
     - { name: "dockerstats_app_1" }
     - { name: "dokuwiki_app_1" }
-    - { name: "coturn_coturn_1" }
     - { name: "gitlab_app_1" }
     - { name: "gitlab_dind_1" }
     - { name: "gitlab_runner_1" }
@@ -93,35 +87,29 @@ alert:
     - { name: "keycloak_sync-group-active_1" }
     - { name: "ldap_openldap_1" }
     - { name: "ldap_phpldapadmin_1" }
-    - { name: "mail_dovecot-mailcow_1" }
-    - { name: "mail_dockerapi-mailcow_1" }
-    - { name: "mail_ipv6nat-mailcow_1" }
-    - { name: "mail_mailman-core" }
-    - { name: "mail_mailman-db" }
-    - { name: "mail_mailman-nginx" }
-    - { name: "mail_mailman-web" }
-    - { name: "mail_memcached-mailcow_1" }
-    - { name: "mail_mysql-mailcow_1" }
-    - { name: "mail_netfilter-mailcow_1" }
-    - { name: "mail_nginx-mailcow_1" }
-    - { name: "mail_olefy-mailcow_1" }
-    - { name: "mail_ofelia-mailcow_1" }
-    - { name: "mail_postfix-mailcow_1" }
-    - { name: "mail_postfix-exporter_1" }
-    - { name: "mail_php-fpm-mailcow_1" }
-    - { name: "mail_redis-mailcow_1" }
-    - { name: "mail_rspamd-mailcow_1" }
-    - { name: "mail_traefik-certdumper_1" }    
-    - { name: "mail_unbound-mailcow_1" }
-    - { name: "mail_watchdog-mailcow_1" }
+    - { name: "mail_admin_1" }
+    - { name: "mail_antispam_1" }
+    - { name: "mail_certdumper_1" }
+    - { name: "mail_db_1" }
+    - { name: "mail_front_1" }
+    - { name: "mail_imap_1" }
+    - { name: "mail_oletools_1" }
+    - { name: "mail_redis_1" }
+    - { name: "mail_resolver_1" }
+    - { name: "mail_smtp_1" }
+    - { name: "mail_webmail_1" }
+    - { name: "mail_mailman-core_1" }
+    - { name: "mail_mailman-web_1" }
+    - { name: "mail_mailman-nginx_1" }
+    - { name: "matrix_ma1sd_1" }
+    - { name: "matrix_db_1" }
+    - { name: "matrix_synapse_1" }
     - { name: "matterbridge_cw_1" }
     - { name: "matterbridge_wz_1" }
     - { name: "matterbridge_web_1" }
     - { name: "matterbridge_restarter_1" }
-    - { name: "matrix_ma1sd_1" }
-    - { name: "matrix_db_1" }
-    - { name: "matrix_synapse_1" }
     - { name: "traefik_app_1" }
+    - { name: "vpnserver_app_1" }
     - { name: "warpapi_app_1" }
     - { name: "wordpress_app_1" }
     - { name: "wordpress_db_1" }
@@ -138,35 +126,35 @@ alert:
 # Definition von Borgbackup Repositories 
 borgbackup_repos:
 
-  warpsrvint: 
+  # warpsrvint: 
 
-    # URL des Repos   
-    repo: "ssh://warpzone@192.168.0.201:22/data/warpzone/webserver"
+  #   # URL des Repos   
+  #   repo: "ssh://warpzone@192.168.0.201:22/data/warpzone/webserver"
     
-    # Repo-spezifische Optionen zum Aufruf von Borgbackup
-    # z.B. bei Sicherungen zu rsync.net ist --remote-path=borg1 erforderlich
-    options: ""
+  #   # Repo-spezifische Optionen zum Aufruf von Borgbackup
+  #   # z.B. bei Sicherungen zu rsync.net ist --remote-path=borg1 erforderlich
+  #   options: ""
 
-    # Compression Options, z,b. "zlib,5, "zstd,5"
-    compression: "zlib,5"
+  #   # Compression Options, z,b. "zlib,5, "zstd,5"
+  #   compression: "zlib,5"
 
-    # Prune Optionen 
-    prune: "--keep-within=2d --keep-daily=7 --keep-weekly=4 --keep-monthly=6"
+  #   # Prune Optionen 
+  #   prune: "--keep-within=2d --keep-daily=7 --keep-weekly=4 --keep-monthly=6"
     
-    # Backup Schedule 
-    weekday: "*"
-    hour: "6"
-    minute: "0"
-
-    #  Zusätzliche Verzeichnisse, die nur in diesem Backup gesichtert werden sollen 
-    # directories:
-
-    # Monitoring
-    alert: true
-    warning_age: 26 
-    critical_age: 50
-    warning_count: 10
-    critical_count: 5
+  #   # Backup Schedule 
+  #   weekday: "*"
+  #   hour: "6"
+  #   minute: "0"
+
+  #   #  Zusätzliche Verzeichnisse, die nur in diesem Backup gesichtert werden sollen 
+  #   # directories:
+
+  #   # Monitoring
+  #   alert: true
+  #   warning_age: 26 
+  #   critical_age: 50
+  #   warning_count: 10
+  #   critical_count: 5
 
   borgbase: 
 

hosts

 
 # Nameskonvention für Server: Pratchett Name/Charaktere
 # Namensliste: https://wiki.lspace.org/List_of_Pratchett_characters
-# Nächste freie Namen: vimes, cake, colon, detritus, dibbler, dorfl, gaspode, quirm, cherry, nobby, ramkin, ron, shoe, slant, angua, vetinary, bursar, coin, dean, hex, hix, worblehat, luggage. mustrum, rincewind, wrangler, stibbons, whitlow  
+# Nächste freie Namen: vimes, cake, colon, detritus, dibbler, dorfl, gaspode, quirm, cherry, nobby, ramkin, ron, shoe, slant, angua, vetinary, bursar, coin, dean, worblehat, luggage. mustrum, rincewind, wrangler, stibbons, whitlow  
+
+[test]
 
 [prod]
 
-# Interner Server Warpzone 
-# Umgebaute Watchguard im Serverschrank 
-# https://wiki.warpzone.ms/intern:warpzone_internal_it_infrastructure#host_fuer_interne_dienste_watchguard_xtm_505
+# Interner Proxmox-Server
 # Für Verbindungen über den Webserver als Jumphost folgende Parameter ergänzen: 
 # ansible_ssh_common_args='-o ForwardAgent=yes -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o ProxyCommand="ssh -W %h:%p -q 159.69.57.51"'
-
-# Interner Proxmox-Server (neu ab 09-2022) 
 weatherwax   ansible_ssh_host=192.168.0.200
 
-# Server für interne Dienste (neu ab 09-2022)
+# Server für interne Dienste
 # Container auf dem internen Proxmox Server 
 # Wichtige Optionen: Nesting = Yes, keyctl = enabled
 ogg          ansible_ssh_host=192.168.0.201
@@ -44,4 +42,4 @@ hex         ansible_ssh_host=10.111.10.100
 # Virtueller Server für Infrastruktur-Dienste auf Veranstaltungen / Camps
 # Container auf dem warpzone.remote Proxmox-Server 
 # Wichtige Optionen: Nesting = Yes, keyctl = enabled
-hix         ansible_ssh_host=10.111.10.101
\ No newline at end of file
+hix         ansible_ssh_host=10.111.10.101

hosts.yml

+---
+# Nameskonvention für Server: Pratchett Name/Charaktere
+# Namensliste: https://wiki.lspace.org/List_of_Pratchett_characters
+# Nächste freie Namen: vimes, cake, colon, detritus, dibbler, dorfl, gaspode, quirm, cherry, nobby, ramkin, ron, shoe, slant, angua, vetinary, bursar, coin, dean, worblehat, luggage. mustrum, rincewind, wrangler, stibbons, whitlow  
+
+prod:
+  children:
+    pyhsical:
+      hosts:
+        # Interner Proxmox-Server
+        # Für Verbindungen über den Webserver als Jumphost folgende Parameter ergänzen: 
+        # ansible_ssh_common_args='-o ForwardAgent=yes -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o ProxyCommand="ssh -W %h:%p -q 159.69.57.51"'
+        weatherwax:
+          ansible_ssh_host: 192.168.0.200
+
+        # Externe Server Warpzone
+        # Öffentlicher Root Server Warpzone bei Hetzner
+        tiffany:
+          ansible_ssh_host: 159.69.57.15
+
+    vms:
+      children:
+        weatherwax-vms:
+          hosts:
+            # Server für interne Dienste
+            # Container auf dem internen Proxmox Server
+            # Wichtige Optionen: Nesting = Yes, keyctl = enabled
+            ogg:
+              ansible_ssh_host: 192.168.0.201
+
+            # Server für VPN Verbindung zum Webserver
+            # Container auf dem internen Proxmox Server
+            # Wichtige Optionen: Nesting = Yes, keyctl = enabled
+            carrot:
+              ansible_ssh_host: 192.168.0.202
+
+        tiffany-vms:
+          hosts:
+            # Öffentlicher Webserver Warpzone
+            # VM auf Tiffany
+            webserver:
+              ansible_ssh_host: 159.69.57.51
+
+            # Vorstands-VM
+            # VM auf Tiffany
+            # Auch erreichbar unter verwaltung.warpzone.ms
+            verwaltung:
+              ansible_ssh_host: 195.201.179.60
+
+event:
+  children:
+    physical:
+      hosts:
+        # Physischer Server für Veranstaltungen / Camps
+        # warpzone.remote Proxmox-Server
+        hex:
+          ansible_ssh_host: 10.111.10.100
+
+    vms:
+      hosts:
+        # Virtueller Server für Infrastruktur-Dienste auf Veranstaltungen / Camps
+        # Container auf dem warpzone.remote Proxmox-Server
+        # Wichtige Optionen: Nesting = Yes, keyctl = enabled
+        hix:
+          ansible_ssh_host: 10.111.10.101

intern/docker_fridgeserver/templates/htaccess

+<Files *.php>
+deny from all

intern/docker_grafana/templates/provisioning/dashboards/dashboards.yml

+apiVersion: 1
+
+providers:
+  # <string> an unique provider name
+- name: 'Pixelflut'
+  # <int> org id. will default to orgId 1 if not specified
+  # orgId: 1
+  # <string, required> name of the dashboard folder. Required
+  folder: 'Pixelflut'
+  # <string> folder UID. will be automatically generated if not specified
+  # folderUid: ''
+  # <string, required> provider type. Required
+  type: file
+  # <bool> disable dashboard deletion
+  # disableDeletion: false
+  # <bool> enable dashboard editing
+  editable: true
+  # <int> how often Grafana will scan for changed dashboards
+  updateIntervalSeconds: 10
+  # <bool> allow updating provisioned dashboards from the UI
+  allowUiUpdates: true
+  options:
+    # <string, required> path to dashboard files on disk. Required
+    path: /etc/grafana/provisioning/dashboards/pixelflut
+

intern/docker_grafana/templates/provisioning/datasources/datasources.yml

+
+apiVersion: 1
+
+datasources:
+
+  - name: MQTT_Flux
+    type: influxdb
+    access: proxy
+    url: http://{{ int_ip4 }}:{{ mqtt_influxdb_port }}
+    jsonData:
+      version: Flux
+      organization: mqtt
+      defaultBucket: mqtt
+      tlsSkipVerify: true
+    secureJsonData:
+      token: {{ influxdb_token }}
+
+  - name: MQTT_InfluxQL
+    type: influxdb
+    access: proxy
+    url: http://{{ int_ip4 }}:{{ mqtt_influxdb_port }}
+    # This database should be mapped to a bucket
+    database: mqtt
+    jsonData:
+      httpMode: GET
+      httpHeaderName1: 'Authorization'
+    secureJsonData:
+      httpHeaderValue1: 'Token {{ influxdb_token }}'
+
+{% if inventory_hostname == 'hix' %}
+
+  - name: Prometheus
+    type: prometheus
+    access: proxy
+    url: http://{{ int_ip4 }}:9090
+
+{% endif %}
+
+{% if inventory_hostname == 'ogg' %}
+
+  - name: Pixelflut
+    type: prometheus
+    access: proxy
+    url: http://pixelflut.warpzone.lan:9090
+    uuid: P0FAC05DE14135586
+
+{% endif %}

intern/docker_homeassistant/templates/config/configuration.yaml

@@ -54,6 +54,33 @@ influxdb:
   token: {{ influxdb_token }}
   default_measurement: units
 
+# Homematic CCU2
+# https://www.home-assistant.io/integrations/homematic/
+homematic:
+  local_port: {{ homematic_callback_port }}
+  interfaces:
+    rf:
+      host: {{ homematic.ccu2_host }}
+      resolvenames: json
+      callback_ip: {{ int_ip4 }}
+      callback_port: {{ homematic_callback_port }}
+    ip:
+      host: {{ homematic.ccu2_host }}
+      port: 2010
+      callback_ip: {{ int_ip4 }}
+      callback_port: {{ homematic_callback_port }}
+    groups:
+      host: {{ homematic.ccu2_host }}
+      port: 9292
+      resolvenames: json
+      path: /groups
+      callback_ip: {{ int_ip4 }}
+      callback_port: {{ homematic_callback_port }}
+  hosts:
+    ccu2:
+      host: {{ homematic.ccu2_host }}
+
+
 # zonenstatus wird vom hauptschalter gesteuert, switch02 ping ist nicht mehr notwendig
 # https://www.home-assistant.io/integrations/ping/
 #binary_sensor:

intern/docker_homeassistant/templates/docker-compose.yml

@@ -7,6 +7,8 @@ services:
 
     image: homeassistant/home-assistant:2023.3
     restart: always
+    ports:
+      - "{{ int_ip4 }}:{{ homematic_callback_port }}:{{ homematic_callback_port }}"
     volumes:
       - "/etc/localtime:/etc/localtime:ro"
       - "{{ basedir }}/config:/config"