pi-ansible/group_vars/all/vars.yml

# vim: ft=yaml.ansible
---
hostname: pi
timezone: Europe/Copenhagen

hdd_name: storage
hdd_mount_point: /opt/{{ hdd_name }}

ssd_name: pi-ssd
ssd_mount_point: /opt/{{ ssd_name }}

users:
  - name: ubuntu
    comment: System Administration
    password: $6$YitakVLuUxjnPfDd$aFnEDcc98y6MlRYxLPAhb.eHsKqSIz385i4VrHW1Q8b986IqUhtu62gaOIALzM4FAU3dnWaHNUTGxY0zgA6jC0
    groups:
      - sudo
    ssh_keys:
      - sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIFWZGLov8wPBNxuvnaPK+8vv6wK5hHUVEFzXKsN9QeuBAAAADHNzaDpzYW1zYXB0aQ== ssh:samsapti
      - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPd/4fQV7CL8/KVwbo/phiV5UdXFBIDlkZ+ps8C7FeRf cardno:14 336 332

open_ports:
  - { port: '22', proto: 'tcp', comment: 'SSH' }
  - { port: '53', proto: 'tcp', comment: 'Pi-hole (not port-forwarded)' }
  - { port: '53', proto: 'udp', comment: 'Pi-hole (not port-forwarded)' }
  - { port: '80', proto: 'tcp', comment: 'HTTP' }
  - { port: '81', proto: 'tcp', comment: 'Pi-hole (not port-forwarded)' }
  - { port: '443', proto: 'tcp', comment: 'HTTPS' }
  - { port: '443', proto: 'udp', comment: 'HTTPS' }
  - { port: '4001', proto: 'tcp', comment: 'IPFS Kubo P2P' }
  - { port: '4001', proto: 'udp', comment: 'IPFS Kubo P2P' }
  - { port: '5001', proto: 'tcp', comment: 'IPFS Kubo RPC API (not port-forwarded)' }
  - { port: '18080', proto: 'tcp', comment: 'monerod P2P' }
  - { port: '18089', proto: 'tcp', comment: 'monerod RPC' }
  - { port: '51820', proto: 'udp', comment: 'WireGuard' }