created major large-scale changes

vars/aria_api.yml.example

@@ -1,6 +0,0 @@
-aria:
-  scheme: http
-  hostname: localhost
-  port: "6800"
-  secret: ~
-  credentals: ~

vars/aria_settings.yml

@@ -0,0 +1,146 @@
+# @TODO use Ansible vault for secret and some credentials values
+aria:
+  containerized: true
+  rpc:
+    enabled: false
+    listen_all: true
+    scheme: http
+    hostname: localhost
+    port: 6800
+    secret: ~
+    credentials: ~
+  # dest: "{{ ansible_user_home.stdout }}/downloads/aria2"
+  log: warn
+  alloc: falloc # choices are "falloc", "prealloc", "trunc", or "none"
+  dcache: 64M
+  conn:
+    # netrc:
+    #   path: "{{ ansible_user_home.stdout }}/.netrc"
+    max:
+      attempts: 3
+      per_server: 3
+    split: 6
+    proxy:
+      enabled: true
+      uri: "localhost:9050"
+      excluded:
+        - "127.0.0.1"
+        - "::1"
+  dl:
+    max:
+      concurrent: 30
+    resume: true
+    overwriting: true
+    autorenaming: true
+    # stats:
+    #   path: "{{ ansible_user_home.stdout }}/.aria2/dl.log"
+    algorithm: adaptive # choices are "inorder", "feedback", "adaptive"
+  ul:
+    max:
+      overall: 5M
+      per_entry: 0
+  http:
+    gzip: true
+    cache: false
+    sustain: true
+    agent: "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0"
+  ftp:
+    mode: passive # choices are "passive" or "active"
+    data_type: binary # choices are "binary" or "ascii"
+  trnt:
+    dht:
+      enabled: true
+      port: 6881-6999
+      entrypoint: ~
+      # path: "{{ ansible_user_home.stdout }}/.aria2/dht.dat"
+      # path6: "{{ ansible_user_home.stdout }}/.aria2/dht6.dat"
+    local_discovery: true
+    encrypt: true
+    peers:
+      agent: "Deluge 1.3.15"
+      prefix: "-DE13F0-"
+      max: 100
+      exchange: true
+    seeding:
+      ratio: 2.0
+      time: 0
+    trackers:
+      - http://1337.abcvg.info:80/announce
+      - http://bt1.archive.org:6969/announce
+      - http://ipv4announce.sktorrent.eu:6969/announce
+      - http://nyaa.tracker.wf:7777/announce
+      - http://torrentsmd.com:8080/announce
+      - http://tracker.bt4g.com:2095/announce
+      - http://tracker.dhitechnical.com:6969/announce
+      - http://tracker.mywaifu.best:6969/announce
+      - http://tracker.renfei.net:8080/announce
+      - http://tracker.waaa.moe:6969/announce
+      - http://tracker.xn--djrq4gl4hvoi.top:80/announce
+      - http://www.wareztorrent.com:80/announce
+      - https://021912.xyz:443/announce
+      - https://1337.abcvg.info:443/announce
+      - https://banananetwork.qzz.io:443/announce
+      - https://orgtgju.org:443/announce
+      - https://t.213891.xyz:443/announce
+      - https://torrents.tmtime.dev:443/announce
+      - https://tr.abiir.top:443/announce
+      - https://tr.nyacat.pw:443/announce
+      - https://tr.zukizuki.org:443/announce
+      - https://tracker.7471.top:443/announce
+      - https://tracker.anibt.net:443/announce
+      - https://tracker.gcrenwp.top:443/announce
+      - https://tracker.kuroy.me:443/announce
+      - https://tracker.leechshield.link:443/announce
+      - https://tracker.manager.v6.navy:443/announce
+      - https://tracker.nekomi.cn:443/announce
+      - https://tracker.pmman.tech:443/announce
+      - https://tracker.zhuqiy.com:443/announce
+      - https://tracker1.520.jp:443/announce
+      - udp://anime-tracker.aruku.kro.kr:8081/announce
+      - udp://bittorrent-tracker.e-n-c-r-y-p-t.net:1337/announce
+      - udp://coeus.torrentonline.cc:42069/announce
+      - udp://evan.im:6969/announce
+      - udp://mail.segso.net:6969/announce
+      - udp://martin-gebhardt.eu:25/announce
+      - udp://ns575949.ip-51-222-82.net:6969/announce
+      - udp://open.demonii.com:1337/announce
+      - udp://open.ftorrent.com:443/announce
+      - udp://open.stealth.si:80/announce
+      - udp://open.tracker.ink:6969/announce
+      - udp://opentor.org:2710/announce
+      - udp://p4p.arenabg.com:1337/announce
+      - udp://seedpeer.net:6969/announce
+      - udp://t.overflow.biz:6969/announce
+      - udp://torrentclub.online:1984/announce
+      - udp://tracker-udp.gbitt.info:80/announce
+      - udp://tracker.004430.xyz:1337/announce
+      - udp://tracker.aruku.ovh:8081/announce
+      - udp://tracker.auctor.tv:6969/announce
+      - udp://tracker.bittor.pw:1337/announce
+      - udp://tracker.bluefrog.pw:2710/announce
+      - udp://tracker.breizh.pm:6969/announce
+      - udp://tracker.corpscorp.online:80/announce
+      - udp://tracker.dler.com:6969/announce
+      - udp://tracker.ducks.party:1984/announce
+      - udp://tracker.gmi.gd:6969/announce
+      - udp://tracker.hismz.cn:6969/announce
+      - udp://tracker.opentorrent.top:6969/announce
+      - udp://tracker.opentrackr.org:1337/announce
+      - udp://tracker.peerfect.org:6969/announce
+      - udp://tracker.publictracker.xyz:6969/announce
+      - udp://tracker.qu.ax:6969/announce
+      - udp://tracker.skyts.net:6969/announce
+      - udp://tracker.t-1.org:6969/announce
+      - udp://tracker.teambelgium.net:6969/announce
+      - udp://tracker.torrent.eu.org:451/announce
+      - udp://tracker.trackarr.org:6969/announce
+      - udp://tracker.tryhackx.org:6969/announce
+      - udp://tracker.wildkat.net:6969/announce
+      - udp://yuptracker-eu.gaijinent.com:27022/announce
+      - udp://zer0day.ch:1337/announce
+      - wss://tracker.openwebtorrent.com:443/announce
+  meta:
+    follow: mem
+    lang: en
+    protocol_pref: ftp # choices are "ftp", "http", "https"
+    locs: []

vars/caddy_settings.yml

@@ -0,0 +1,3 @@
+caddy:
+  containerized: true
+  scheme: http

vars/certbot_settings@homeserver.yml

@@ -0,0 +1,10 @@
+certbot:
+  mode: "{{ mode | default('prod') }}"
+  containerized: true
+  auth_method: webroot
+  port: ~
+  email: ajt95@prole.biz
+  domains:
+    - "{{ inventory_hostname }}"
+    - "*.{{ inventory_hostname }}"
+  cron: "2 6 24 1 *"

vars/certbot_settings@vps.yml

@@ -0,0 +1,10 @@
+certbot:
+  mode: "{{ mode | default('prod') }}"
+  containerized: false
+  auth_method: dns
+  port: 53
+  email: ajt95@prole.biz
+  domains:
+    - "{{ inventory_hostname }}"
+    - "*.{{ inventory_hostname }}"
+  cron: ~

vars/crowdsec.yml

@@ -1,2 +0,0 @@
-crowdsec:
-  port: 8181

vars/crowdsec_settings.yml

@@ -0,0 +1,9 @@
+crowdsec:
+  containerized: false
+  port: 6050
+  colls:
+    - "crowdsecurity/base-http-scenarios"
+    - "crowdsecurity/proftpd"
+  parsers: []
+  scenarios: []
+  postoverflows: []

vars/email_settings.yml

@@ -0,0 +1,9 @@
+email:
+  smtp:
+    auth_meth: login
+    host: smtp.startmail.com
+    port: 465
+    conn_mode: ssl
+    username: rika@sukaato.moe
+    password: "{{ lookup('password', './.tmp/' + inventory_hostname + '-user@email/email.pass', chars=['ascii_lowercase', 'digits'], length=8) }}"
+    alias: admin@sukaato.moe

vars/flexget_settings.yml

@@ -1,2 +1,3 @@
 flexget:
+  enabled: true
   download_mode: direct

vars/gitea_settings.yml

@@ -0,0 +1,16 @@
+gitea:
+  containerized: true
+  subdomain: git
+  trusted:
+    proxies:
+      - "127.0.0.1"
+      - "::1"
+  db:
+    type: mysql
+    name: "{{ mysql.users.admin.databases.gitea.name }}"
+  ssh:
+    port: 2323
+  site:
+    registration:
+      enabled: true
+    landing: explore

vars/glance_settings.yml

@@ -0,0 +1,10 @@
+glance:
+  containerized: true
+  port: 8080
+  proxied: true
+  timezone:
+    id: America/New_York
+    name: New York, United States of America
+  weather_loc: Hancock, MD
+  search:
+    engine: duckduckgo

vars/headscale_settings.yml

@@ -0,0 +1,23 @@
+headscale:
+  users:
+    admin:
+      username: admin
+      dname: Administrator
+      email: rika@sukaato.moe
+      pfp: ~
+  scheme: http
+  port: 9191
+  # @NOTE https://headscale.net/stable/ref/tls/
+  grpc:
+    expose: false
+    secure: true
+    port: 50443
+  magic_dns:
+    domain: "cyberia.net"
+    nameservers:
+      - "https://dns.nextdns.io/5a5ac6"
+      - 9.9.9.9
+  clients:
+    - name: staging1.test
+      description: "my homelab server"
+

vars/local_facts.yml

@@ -0,0 +1,3 @@
+local_facts:
+  user_id: rika
+  user_dir: /home/rika

vars/local_facts.yml.example

@@ -1,3 +0,0 @@
-local_facts:
-  user_id: ""
-  user_dir: ""

vars/mysql_settings.yml

@@ -0,0 +1,17 @@
+mysql:
+  containerized: true
+  password: "{{ lookup('password', './.tmp/' + inventory_hostname + '-root@mysql/mysql.pass', chars=['ascii_lowercase', 'digits'], length=8) }}"
+  users:
+    admin:
+      username: admin
+      # @TODO see if manual creation of additional databases is necessary for the DBMS server 
+      databases:
+        init:
+          name: testdb
+        nextcloud:
+          name: nextcloud
+        gitea:
+          name: gitea
+        opengist:
+          name: opengist
+      password: "{{ lookup('password', './.tmp/' + inventory_hostname + '-user@mysql/mysql.pass', chars=['ascii_lowercase', 'digits'], length=8) }}"

vars/nextcloud_settings.yml

@@ -0,0 +1,12 @@
+nextcloud:
+  containerized: true
+  subdomain: cloud
+  rewrite_ip: false
+  trusted:
+    proxies:
+      - "127.0.0.1"
+      - "::1"
+  db:
+    type: mysql
+    name: "{{ mysql.users.admin.databases.nextcloud.name }}"
+

vars/opengist_settings.yml

@@ -0,0 +1,15 @@
+gist:
+  containerized: true
+  subdomain: gist
+  ssh:
+    port: 2323
+  search:
+    priority:
+      - content
+      - description
+      - filename
+      - topic
+      - title
+  db:
+    type: mysql
+    name: "{{ mysql.users.admin.databases.opengist.name }}"

vars/podpose_settings.yml

@@ -0,0 +1,24 @@
+compose:
+  mode: "{{ mode | default('prod') }}"
+  containers:
+    vpn:
+      name: wgclient
+    webserver:
+      name: revproxy0
+    ssl:
+      name: sslcerts
+    cache:
+      name: cache0
+    db:
+      name: db0
+    cloud:
+      name: cloud
+    forge:
+      name: forge
+    pastebin:
+      name: gist
+    tail:
+      name: tailclient
+    dash:
+      name: dash
+

vars/redis_settings.yml

@@ -0,0 +1,3 @@
+redis:
+  containerized: true
+  password: "{{ lookup('password', './.tmp/' + inventory_hostname + '-redis/redis.pass', chars=['ascii_lowercase', 'digits'], length=8) }}"

vars/source_code.yml

@@ -0,0 +1,33 @@
+source_code:
+  ssh_user: git
+  # host: "50.116.54.76:3000"
+  host: git.sukaato.moe
+  user: admin
+  http_password: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          63313633623936623132356235636366303065653261386165363437623163376566366463353266
+          3130646239623865366231646437353632303864386563660a636332653338303334396332626539
+          38626166326132333663313264326364643537373535626138363265626130613332303363643338
+          6535623863346530370a393638653135623964346262353838626137663130363437366533333431
+          35366261616561303632346462643239333665323366333032626532623039323030336130383234
+          6633343964386431326335383564653937343330613232313637
+  repos:
+    compose:
+      name: "skato-compose"
+      rpath: /dependent
+      run: true
+    # @TODO turn skato-quartz 'content' or 'content/Research' subdirectory into separate archive
+    # @TODO turn skato-blog 'themes/sukaato' subdirectory into git submodule for hugo static site
+    # @TODO turn skato-blog 'content' into separate archive
+    blog_theme:
+      name: "skato-blog-theme"
+      run: false
+    blog:
+      name: "skato-blog"
+      run: true
+    cli:
+      name: "skato-cli"
+      run: false
+    site:
+      name: sukaato
+      run: false

vars/sox_prox.yml

@@ -1,3 +0,0 @@
-sox:
-  hostname: localhost
-  port: "9050"

vars/surge_settings.yml

@@ -0,0 +1,4 @@
+surge:
+  containerized: true
+  service:
+    enabled: false

vars/tail_net.yml.example

@@ -1,18 +0,0 @@
-tail:
-  users:
-    - username: ""
-      dname: ""
-      email: ""
-      pfp: ~
-  scheme: https
-  domain: localhost
-  port: ":8080"
-  grpc:
-    expose: false
-    secure: true
-    port: ":50443"
-  magic_dns:
-    domain: ""
-    nameservers:
-      - 9.9.9.9
-

vars/tailscale_settings.yml

@@ -0,0 +1,3 @@
+tailscale:
+    containerized: true
+    scheme: http

vars/tor_settings.yml

@@ -0,0 +1,4 @@
+tor:
+  proxy:
+    hostname: localhost
+    port: "9050"

vars/vpn_server.yml.example

@@ -1,17 +0,0 @@
-vpn_server:
-  driver:
-    name: dsnet
-    version: "v0.8.1"
-  interface: dsnet
-  forwards:
-    - [tcp,"80"] # HTTP
-    - [tcp,"443"] # HTTPS
-    - [tcp,"465"] # SMTP
-    - [tcp,"587"] # SMTP
-    - [tcp,"995"] # POP3
-    - [tcp,"110"] # POP3
-    - [tcp,"143"] # IMAP
-    - [tcp,"993"] # IMAP
-  clients:
-    - name: ""
-      desc: "my homelab server"

vars/vpn_settings.yml

@@ -0,0 +1,17 @@
+vpn:
+  server:
+    driver:
+      name: dsnet
+    interface: dsnet
+    forwards:
+      - [tcp,"80"] # HTTP
+      - [tcp,"443"] # HTTPS
+      - [tcp,"465"] # SMTP
+      - [tcp,"587"] # SMTP
+      - [tcp,"995"] # POP3
+      - [tcp,"110"] # POP3
+      - [tcp,"143"] # IMAP
+      - [tcp,"993"] # IMAP
+  clients:
+    - name: staging1.test
+      desc: "my homelab server"

vars/wireguard_settings.yml

@@ -0,0 +1,3 @@
+wireguard:
+  debug: false
+  ip_forward: false