Ben Vincent
b3347f9226
- migrate media applications to new cephfs pool + incus - enable exporting haproxy - move ceph-client-setup to only apply to non-lxc hosts - ensure unrar is installed for nzbget - updated jellyfin use of data_dir - set lxc instances for jellyfin to use /shared/apps/jellyfin Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/299
81 lines
2.5 KiB
YAML
81 lines
2.5 KiB
YAML
---
|
|
|
|
hiera_include:
|
|
- nzbget
|
|
- profiles::media::nzbget
|
|
- profiles::nginx::ldapauth
|
|
|
|
profiles::packages::include:
|
|
unrar: {}
|
|
|
|
# manage nzbget
|
|
nzbget::params::user: nzbget
|
|
nzbget::params::group: media
|
|
nzbget::params::manage_group: false
|
|
|
|
# additional altnames
|
|
profiles::pki::vault::alt_names:
|
|
- nzbget.main.unkin.net
|
|
- nzbget.service.consul
|
|
- nzbget.query.consul
|
|
- "nzbget.service.%{facts.country}-%{facts.region}.consul"
|
|
|
|
# manage a simple nginx reverse proxy
|
|
profiles::nginx::simpleproxy::nginx_vhost: 'nzbget.query.consul'
|
|
profiles::nginx::simpleproxy::nginx_aliases:
|
|
- nzbget.main.unkin.net
|
|
- nzbget.service.consul
|
|
- nzbget.query.consul
|
|
- "nzbget.service.%{facts.country}-%{facts.region}.consul"
|
|
profiles::nginx::simpleproxy::proxy_port: 6789
|
|
profiles::nginx::simpleproxy::proxy_host: 127.0.0.1
|
|
profiles::nginx::simpleproxy::proxy_path: '/'
|
|
profiles::nginx::simpleproxy::use_default_location: false
|
|
nginx::client_max_body_size: 20M
|
|
|
|
ldap_binddn: 'cn=svc_nzbget,ou=services,ou=users,dc=main,dc=unkin,dc=net'
|
|
ldap_template: '(&(uid=%(username)s)(memberOf=ou=nzbget_access,ou=groups,dc=main,dc=unkin,dc=net))'
|
|
|
|
profiles::nginx::simpleproxy::locations:
|
|
arrstack_web_healthcheck:
|
|
location_cfg_append:
|
|
rewrite: '/consul/health / break'
|
|
|
|
# configure consul service
|
|
consul::services:
|
|
nzbget:
|
|
service_name: 'nzbget'
|
|
tags:
|
|
- 'media'
|
|
- 'nzbget'
|
|
address: "%{facts.networking.ip}"
|
|
port: 443
|
|
checks:
|
|
- id: 'nzbget_http_check'
|
|
name: 'nzbget HTTP Check'
|
|
http: "https://%{facts.networking.fqdn}:443/consul/health"
|
|
method: 'GET'
|
|
tls_skip_verify: true
|
|
interval: '10s'
|
|
timeout: '1s'
|
|
profiles::consul::client::node_rules:
|
|
- resource: service
|
|
segment: nzbget
|
|
disposition: write
|
|
|
|
profiles::yum::global::repos:
|
|
rpmfusion-free:
|
|
name: rpmfusion-free
|
|
descr: rpmfusion-free repository
|
|
target: /etc/yum.repos.d/rpmfusion.repo
|
|
baseurl: https://download1.rpmfusion.org/free/el/updates/%{facts.os.release.major}/%{facts.os.architecture}
|
|
gpgkey: https://download1.rpmfusion.org/free/el/RPM-GPG-KEY-rpmfusion-free-el-%{facts.os.release.major}
|
|
mirrorlist: absent
|
|
rpmfusion-nonfree:
|
|
name: rpmfusion-nonfree
|
|
descr: rpmfusion-nonfree repository
|
|
target: /etc/yum.repos.d/rpmfusion.repo
|
|
baseurl: https://download1.rpmfusion.org/nonfree/el/updates/%{facts.os.release.major}/%{facts.os.architecture}
|
|
gpgkey: https://download1.rpmfusion.org/nonfree/el/RPM-GPG-KEY-rpmfusion-nonfree-el-%{facts.os.release.major}
|
|
mirrorlist: absent
|