Files
configpolicy/hosts
Dustin C. Hatch a0378feda8 nextcloud: Move database to db0
Moving the Nextcloud database to the central PostgreSQL server will
allow it to take advantage of the monitoring and backups in place there.
For backups specifically, this will make it easier to switch from BURP
to Restic, since now only the contents of the filesystem need backed up.

The PostgreSQL server on _db0_ requires certificate authentication for
all clients.  The certificate for Nextcloud is stored in a Secret in
Kubernetes, so we need to use the _nextcloud-db-cert_ role to install
the script to fetch it.  Nextcloud configuration doesn't expose the
parameters for selecting the certificate and private key files, but
fortunately, they can be encoded in the value provided to the `host`
parameter, though it makes for a rather cumbersome value.
2024-09-02 21:03:33 -05:00

194 lines
2.5 KiB
INI

[all:vars]
ansible_python_interpreter=/usr/bin/python3
[aria2]
file0.pyrocufflink.blue
[bitwarden_rs]
bw0.pyrocufflink.blue
[btop]
chromie.pyrocufflink.blue
[burp-client]
bw0.pyrocufflink.blue
cloud0.pyrocufflink.blue
file0.pyrocufflink.blue
git0.pyrocufflink.blue
matrix0.pyrocufflink.blue
[burp-server]
burp1.pyrocufflink.blue
[certbot]
[collectd]
[collectd:children]
pyrocufflink
[collectd-prometheus:children]
collectd
[collectd-sensors:children]
vm-hosts
[collectd-sensors]
chromie.pyrocufflink.blue
nvr2.pyrocufflink.blue
[dch-proxy]
haproxy0.pyrocufflink.blue
[dch-vpn]
[dhcpcd:children]
vm-hosts
[dhcpd:children]
pyrocufflink-dhcp
[docker]
[docker:children]
bitwarden_rs
[file-servers]
file0.pyrocufflink.blue
[frigate:children]
frigate-prod
frigate-test
[frigate-prod]
nvr2.pyrocufflink.blue
[frigate-test]
[gitea]
git0.pyrocufflink.blue
[graylog]
[hassdb]
[home-assistant]
[jellyfin]
file0.pyrocufflink.blue
[jenkins-slave]
[journal2ntfy:children]
burp-server
[k8s-controller]
k8s-ctrl0.pyrocufflink.blue
[k8s-node]
[kubelet:children]
k8s-controller
k8s-node
[minio-backups]
chromie.pyrocufflink.blue
[minio:children]
burp-server
minio-backups
[motioneye]
[nfs-client:children]
k8s-node
[needproxy]
nvr2.pyrocufflink.blue
[networkd]
vmhost0.pyrocufflink.blue
vmhost1.pyrocufflink.blue
[nextcloud]
cloud0.pyrocufflink.blue
[nextcloud-db]
db0.pyrocufflink.blue
[ntpd]
[nut-monitor:children]
vm-hosts
[nut-monitor]
burp1.pyrocufflink.blue
[postgresql]
db0.pyrocufflink.blue
[public-web]
web0.pyrocufflink.blue
[pxe]
pxe0.pyrocufflink.blue
[pyrocufflink]
burp1.pyrocufflink.blue
bw0.pyrocufflink.blue
chromie.pyrocufflink.blue
cloud0.pyrocufflink.blue
db0.pyrocufflink.blue
dc-grumbly.pyrocufflink.blue
dc-headphone.pyrocufflink.blue
file0.pyrocufflink.blue
git0.pyrocufflink.blue
haproxy0.pyrocufflink.blue
k8s-ctrl0.pyrocufflink.blue
matrix0.pyrocufflink.blue
nvr2.pyrocufflink.blue
pxe0.pyrocufflink.blue
smtp1.pyrocufflink.blue
vmhost0.pyrocufflink.blue
vmhost1.pyrocufflink.blue
web0.pyrocufflink.blue
[pyrocufflink-dhcp]
[radius:children]
samba-dc
[repohost]
file0.pyrocufflink.blue
[rw-root]
[samba-dc]
dc-grumbly.pyrocufflink.blue
dc-headphone.pyrocufflink.blue
[smtp-relay]
smtp1.pyrocufflink.blue
[squid]
[synapse]
matrix0.pyrocufflink.blue
[unifi]
[vm-hosts]
vmhost0.pyrocufflink.blue
vmhost1.pyrocufflink.blue
[wheelhost]
file0.pyrocufflink.blue
[zezere]
[zigbee2mqtt:children]
home-assistant
[zwavejs2mqtt:children]
home-assistant