2023-10-05 12:08:18 +00:00
|
|
|
---
|
|
|
|
|
# Root password
|
|
|
|
|
bootstrap__root_pass: '{{lookup("bitwarden", "root-pass")}}'
|
|
|
|
|
# Consul
|
2023-10-05 16:14:47 +00:00
|
|
|
bootstrap__consul_encryption_key: '{{lookup("bitwarden", "consul/cluster", field="encryption-key")}}'
|
|
|
|
|
bootstarp__consul_agent_acl_token: '{{lookup("bitwarden", "consul/acl-tokens", field="agent-default")}}'
|
|
|
|
|
bootstrap__consul_certs_ca_crt: '{{lookup("bitwarden", "consul/certs", file="ca.pem")}}'
|
|
|
|
|
bootstrap__consul_certs_client_crt: '{{lookup("bitwarden", "consul/certs", file="client.pem")}}'
|
|
|
|
|
bootstrap__consul_certs_client_key: '{{lookup("bitwarden", "consul/certs", file="client-key.pem")}}'
|
2023-10-05 12:08:18 +00:00
|
|
|
# SSHGuard
|
|
|
|
|
bootstrap__sshguard_whitelist_extra: ['{{lookup("bitwarden", "sshguard/whitelist", field="jakubgs-home")}}']
|
|
|
|
|
# Wireguard
|
|
|
|
|
wireguard_consul_acl_token: '{{lookup("bitwarden", "consul/acl-tokens", field="wireguard")}}'
|
2023-10-10 10:12:43 +00:00
|
|
|
|
|
|
|
|
# TODO: cleanup after certbot role fixed
|
|
|
|
|
certbot_services_to_stop: []
|
