Moving the Nextcloud database to the central PostgreSQL server will allow it to take advantage of the monitoring and backups in place there. For backups specifically, this will make it easier to switch from BURP to Restic, since now only the contents of the filesystem need backed up. The PostgreSQL server on _db0_ requires certificate authentication for all clients. The certificate for Nextcloud is stored in a Secret in Kubernetes, so we need to use the _nextcloud-db-cert_ role to install the script to fetch it. Nextcloud configuration doesn't expose the parameters for selecting the certificate and private key files, but fortunately, they can be encoded in the value provided to the `host` parameter, though it makes for a rather cumbersome value.
194 lines
2.5 KiB
INI
194 lines
2.5 KiB
INI
[all:vars]
|
|
ansible_python_interpreter=/usr/bin/python3
|
|
|
|
[aria2]
|
|
file0.pyrocufflink.blue
|
|
|
|
[bitwarden_rs]
|
|
bw0.pyrocufflink.blue
|
|
|
|
[btop]
|
|
chromie.pyrocufflink.blue
|
|
|
|
[burp-client]
|
|
bw0.pyrocufflink.blue
|
|
cloud0.pyrocufflink.blue
|
|
file0.pyrocufflink.blue
|
|
git0.pyrocufflink.blue
|
|
matrix0.pyrocufflink.blue
|
|
|
|
[burp-server]
|
|
burp1.pyrocufflink.blue
|
|
|
|
[certbot]
|
|
|
|
[collectd]
|
|
|
|
[collectd:children]
|
|
pyrocufflink
|
|
|
|
[collectd-prometheus:children]
|
|
collectd
|
|
|
|
[collectd-sensors:children]
|
|
vm-hosts
|
|
|
|
[collectd-sensors]
|
|
chromie.pyrocufflink.blue
|
|
nvr2.pyrocufflink.blue
|
|
|
|
[dch-proxy]
|
|
haproxy0.pyrocufflink.blue
|
|
|
|
[dch-vpn]
|
|
|
|
[dhcpcd:children]
|
|
vm-hosts
|
|
|
|
[dhcpd:children]
|
|
pyrocufflink-dhcp
|
|
|
|
[docker]
|
|
|
|
[docker:children]
|
|
bitwarden_rs
|
|
|
|
[file-servers]
|
|
file0.pyrocufflink.blue
|
|
|
|
[frigate:children]
|
|
frigate-prod
|
|
frigate-test
|
|
|
|
[frigate-prod]
|
|
nvr2.pyrocufflink.blue
|
|
|
|
[frigate-test]
|
|
|
|
[gitea]
|
|
git0.pyrocufflink.blue
|
|
|
|
[graylog]
|
|
|
|
[hassdb]
|
|
|
|
[home-assistant]
|
|
|
|
[jellyfin]
|
|
file0.pyrocufflink.blue
|
|
|
|
[jenkins-slave]
|
|
|
|
[journal2ntfy:children]
|
|
burp-server
|
|
|
|
[k8s-controller]
|
|
k8s-ctrl0.pyrocufflink.blue
|
|
|
|
[k8s-node]
|
|
|
|
[kubelet:children]
|
|
k8s-controller
|
|
k8s-node
|
|
|
|
[minio-backups]
|
|
chromie.pyrocufflink.blue
|
|
|
|
[minio:children]
|
|
burp-server
|
|
minio-backups
|
|
|
|
[motioneye]
|
|
|
|
[nfs-client:children]
|
|
k8s-node
|
|
|
|
[needproxy]
|
|
nvr2.pyrocufflink.blue
|
|
|
|
[networkd]
|
|
vmhost0.pyrocufflink.blue
|
|
vmhost1.pyrocufflink.blue
|
|
|
|
[nextcloud]
|
|
cloud0.pyrocufflink.blue
|
|
|
|
[nextcloud-db]
|
|
db0.pyrocufflink.blue
|
|
|
|
[ntpd]
|
|
|
|
[nut-monitor:children]
|
|
vm-hosts
|
|
|
|
[nut-monitor]
|
|
burp1.pyrocufflink.blue
|
|
|
|
[postgresql]
|
|
db0.pyrocufflink.blue
|
|
|
|
[public-web]
|
|
web0.pyrocufflink.blue
|
|
|
|
[pxe]
|
|
pxe0.pyrocufflink.blue
|
|
|
|
[pyrocufflink]
|
|
burp1.pyrocufflink.blue
|
|
bw0.pyrocufflink.blue
|
|
chromie.pyrocufflink.blue
|
|
cloud0.pyrocufflink.blue
|
|
db0.pyrocufflink.blue
|
|
dc-grumbly.pyrocufflink.blue
|
|
dc-headphone.pyrocufflink.blue
|
|
file0.pyrocufflink.blue
|
|
git0.pyrocufflink.blue
|
|
haproxy0.pyrocufflink.blue
|
|
k8s-ctrl0.pyrocufflink.blue
|
|
matrix0.pyrocufflink.blue
|
|
nvr2.pyrocufflink.blue
|
|
pxe0.pyrocufflink.blue
|
|
smtp1.pyrocufflink.blue
|
|
vmhost0.pyrocufflink.blue
|
|
vmhost1.pyrocufflink.blue
|
|
web0.pyrocufflink.blue
|
|
|
|
[pyrocufflink-dhcp]
|
|
|
|
[radius:children]
|
|
samba-dc
|
|
|
|
[repohost]
|
|
file0.pyrocufflink.blue
|
|
|
|
[rw-root]
|
|
|
|
[samba-dc]
|
|
dc-grumbly.pyrocufflink.blue
|
|
dc-headphone.pyrocufflink.blue
|
|
|
|
[smtp-relay]
|
|
smtp1.pyrocufflink.blue
|
|
|
|
[squid]
|
|
|
|
[synapse]
|
|
matrix0.pyrocufflink.blue
|
|
|
|
[unifi]
|
|
|
|
[vm-hosts]
|
|
vmhost0.pyrocufflink.blue
|
|
vmhost1.pyrocufflink.blue
|
|
|
|
[wheelhost]
|
|
file0.pyrocufflink.blue
|
|
|
|
[zezere]
|
|
|
|
[zigbee2mqtt:children]
|
|
home-assistant
|
|
|
|
[zwavejs2mqtt:children]
|
|
home-assistant
|