48 lines
1.2 KiB
YAML
48 lines
1.2 KiB
YAML
---
|
|
ansible_host: 204.110.191.229
|
|
ansible_python_interpreter: /usr/bin/python3
|
|
ansible_ssh_common_args: '-o StrictHostKeyChecking=accept-new'
|
|
|
|
# OpenSearch configuration
|
|
opensearch_heap_min: "4g"
|
|
opensearch_heap_max: "4g"
|
|
|
|
# OpenSearch security — admin credentials
|
|
opensearch_admin_password_hash: "$2b$12$gp3Lk2cCejFzjfacq1Ax0OHapD5XOUNqMN2TtzmA7EMpcZ6wcB71a"
|
|
opensearch_admin_password: "1QW8gf8DNfqfkC1saSiw"
|
|
|
|
# Firewall — Caddy needs HTTP/HTTPS open for Let's Encrypt + traffic
|
|
firewall_allow_rules:
|
|
- port: 80
|
|
proto: tcp
|
|
comment: HTTP
|
|
- port: 443
|
|
proto: tcp
|
|
comment: HTTPS
|
|
- port: 514
|
|
proto: udp
|
|
from_ip: 204.110.188.0/22
|
|
comment: Syslog UDP (VNTX)
|
|
- port: 514
|
|
proto: udp
|
|
from_ip: 10.0.0.0/8
|
|
comment: Syslog UDP (home LAN)
|
|
- port: 514
|
|
proto: udp
|
|
from_ip: 100.64.0.0/10
|
|
comment: Syslog UDP (Tailscale)
|
|
- port: 514
|
|
proto: tcp
|
|
from_ip: 204.110.188.0/22
|
|
comment: Syslog TCP (VNTX)
|
|
- port: 514
|
|
proto: tcp
|
|
from_ip: 10.0.0.0/8
|
|
comment: Syslog TCP (home LAN)
|
|
- port: 514
|
|
proto: tcp
|
|
from_ip: 100.64.0.0/10
|
|
comment: Syslog TCP (Tailscale)
|
|
|
|
# Fluent Bit — uses same admin credentials as Dashboards
|
|
fluentbit_opensearch_password: "{{ opensearch_admin_password }}"
|