Dustin C. Hatch
a433d1b01b
I've moved handling of DNS to the border firewall instead of a dedicated virtual machine. Originally, the VM was necessary because the UniFi Security Gateway sucked and could not (easily) handle the complex configuration I wanted to use. Since moving to the new firewall, this is no longer a problem. Having DNS on a VM is problematic when full-network outages occur, like the one that happened on 16 August 2022. When everything starts back up, DNS is unavailable. libvirt VM autostart does not work for machines that have been migrated between hosts (the auto-start flag is not migrated, and libvirt "forgets" that the VM was supposed to autostart if it is migrated away and back). I plan to script a solution for this at some point, but I still think it makes more sense for the firewall to handle it. It will certainly make it come up quicker regardless.
189 lines
2.5 KiB
INI
189 lines
2.5 KiB
INI
[all:vars]
|
|
ansible_python_interpreter=/usr/bin/python3
|
|
|
|
[alertmanager:children]
|
|
metricspi
|
|
|
|
[aria2]
|
|
file0.pyrocufflink.blue
|
|
|
|
[bitwarden_rs]
|
|
bw0.pyrocufflink.blue
|
|
|
|
[blackbox-exporter:children]
|
|
metricspi
|
|
|
|
[burp-client]
|
|
bw0.pyrocufflink.blue
|
|
cloud0.pyrocufflink.blue
|
|
file0.pyrocufflink.blue
|
|
hass2.pyrocufflink.blue
|
|
|
|
[burp-server]
|
|
burp1.pyrocufflink.blue
|
|
|
|
[certbot]
|
|
|
|
[collectd]
|
|
mtrcs0.pyrocufflink.red
|
|
|
|
[collectd:children]
|
|
pyrocufflink
|
|
|
|
[collectd-prometheus:children]
|
|
collectd
|
|
|
|
[collectd-sensors]
|
|
nvr1.pyrocufflink.blue
|
|
|
|
[dch-proxy]
|
|
|
|
[dch-vpn]
|
|
|
|
[dhcpcd:children]
|
|
vm-hosts
|
|
|
|
[dhcpd:children]
|
|
pyrocufflink-dhcp
|
|
|
|
[docker]
|
|
build0-amd64.pyrocufflink.blue
|
|
|
|
[docker:children]
|
|
bitwarden_rs
|
|
|
|
[file-servers]
|
|
file0.pyrocufflink.blue
|
|
|
|
[frigate]
|
|
nvr1.pyrocufflink.blue
|
|
|
|
[gitea]
|
|
git0.pyrocufflink.blue
|
|
|
|
[grafana]
|
|
mtrcs0.pyrocufflink.red
|
|
|
|
[graylog]
|
|
logs0.pyrocufflink.blue
|
|
|
|
[hassdb]
|
|
|
|
[home-assistant]
|
|
hass2.pyrocufflink.blue
|
|
|
|
[jenkins-slave]
|
|
build0-amd64.pyrocufflink.blue
|
|
|
|
[k8s-controller]
|
|
k8s-ctrl0.pyrocufflink.blue
|
|
|
|
[k8s-node]
|
|
k8s-amd64-n0.pyrocufflink.blue
|
|
k8s-amd64-n1.pyrocufflink.blue
|
|
k8s-amd64-n2.pyrocufflink.blue
|
|
|
|
[kubelet:children]
|
|
k8s-controller
|
|
k8s-node
|
|
|
|
[metricspi]
|
|
mtrcs0.pyrocufflink.red
|
|
|
|
[motioneye]
|
|
|
|
[named-server:children]
|
|
pyrocufflink-dns
|
|
|
|
[nextcloud]
|
|
cloud0.pyrocufflink.blue
|
|
|
|
[ntpd]
|
|
dc0.pyrocufflink.blue
|
|
|
|
[nut]
|
|
serial0.pyrocufflink.blue
|
|
|
|
[postgresql]
|
|
cloud0.pyrocufflink.blue
|
|
|
|
[protonvpn:children]
|
|
pyrocufflink-dns
|
|
|
|
[public-web]
|
|
web0.pyrocufflink.blue
|
|
|
|
[pxe]
|
|
pxe0.pyrocufflink.blue
|
|
|
|
[pyrocufflink]
|
|
build0-amd64.pyrocufflink.blue
|
|
burp1.pyrocufflink.blue
|
|
bw0.pyrocufflink.blue
|
|
cloud0.pyrocufflink.blue
|
|
dc0.pyrocufflink.blue
|
|
dc2.pyrocufflink.blue
|
|
file0.pyrocufflink.blue
|
|
git0.pyrocufflink.blue
|
|
hass2.pyrocufflink.blue
|
|
jenkins0.pyrocufflink.blue
|
|
k8s-amd64-n0.pyrocufflink.blue
|
|
k8s-amd64-n1.pyrocufflink.blue
|
|
k8s-amd64-n2.pyrocufflink.blue
|
|
k8s-ctrl0.pyrocufflink.blue
|
|
logs0.pyrocufflink.blue
|
|
matrix0.pyrocufflink.blue
|
|
nvr1.pyrocufflink.blue
|
|
pxe0.pyrocufflink.blue
|
|
serial0.pyrocufflink.blue
|
|
smtp1.pyrocufflink.blue
|
|
web0.pyrocufflink.blue
|
|
|
|
[pyrocufflink-dhcp]
|
|
|
|
[pyrocufflink-dns]
|
|
|
|
[radius:children]
|
|
samba-dc
|
|
|
|
[rw-root]
|
|
hass2.pyrocufflink.blue
|
|
nvr1.pyrocufflink.blue
|
|
serial0.pyrocufflink.blue
|
|
|
|
[samba-dc]
|
|
dc0.pyrocufflink.blue
|
|
dc2.pyrocufflink.blue
|
|
|
|
[smtp-relay]
|
|
smtp1.pyrocufflink.blue
|
|
|
|
[squid]
|
|
|
|
[synapse]
|
|
matrix0.pyrocufflink.blue
|
|
|
|
[victoria-metrics]
|
|
|
|
[victoria-metrics:children]
|
|
metricspi
|
|
|
|
[vmagent:children]
|
|
victoria-metrics
|
|
|
|
[vmalert:children]
|
|
metricspi
|
|
|
|
[vm-hosts]
|
|
|
|
[wheelhost]
|
|
file0.pyrocufflink.blue
|
|
|
|
[zezere]
|
|
|
|
[zigbee2mqtt:children]
|
|
home-assistant
|
|
|
|
[zwavejs2mqtt:children]
|
|
home-assistant
|