phfroidmont/self-hosting
1
0
Fork 0
mirror of https://github.com/phfroidmont/self-hosting.git synced 2025-12-25 05:36:59 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Scaleway hosts basic setup

Browse source
This commit is contained in:
Paul-Henri Froidmont 2018-07-20 21:54:32 +02:00
parent 1e93c4ae3d
commit 2bffaaa3e1
10 changed files with 161 additions and 42 deletions
Download patch file Download diff file Expand all files Collapse all files

2
.gitignore vendored
View file

@ -1,3 +1,3 @@
.idea .idea
.vagrant .vagrant
playbook.retry *.retry

46
group_vars/k8s.yml Normal file
View file

@ -0,0 +1,46 @@
---
ansible_user: deploy
ansible_become: true
ansible_port: 2242
harden_linux_root_password: "{{k8s_scaleway_root_password}}"
harden_linux_deploy_user: deploy
harden_linux_deploy_user_password: "{{k8s_scaleway_deploy_user_password}}"
harden_linux_deploy_user_home: /home/deploy
harden_linux_deploy_user_public_keys:
- ~/.ssh/id_rsa.pub
harden_linux_sshd_settings_user:
"^Port ": "Port 2242"
harden_linux_ufw_defaults_user:
"^DEFAULT_FORWARD_POLICY": 'DEFAULT_FORWARD_POLICY="ACCEPT"'
harden_linux_ufw_rules:
- rule: "allow"
to_port: "2242"
protocol: "tcp"
- rule: "allow"
to_port: "7000"
protocol: "udp"
harden_linux_ufw_allow_networks:
- "10.0.0.0/8"
- "172.16.0.0/12"
- "192.168.0.0/16"
harden_linux_sysctl_settings_user:
"net.ipv4.ip_forward": 1
"net.ipv6.conf.default.forwarding": 1
"net.ipv6.conf.all.forwarding": 1
harden_linux_ufw_logging: 'on'
harden_linux_sshguard_whitelist:
- "127.0.0.0/8"
- "::1/128"
- "212.83.165.111"
- "10.3.0.0/24"
- "10.200.0.0/16"
peervpn_conf_networkname: "peervpn"
peervpn_conf_psk: "{{k8s_peervpn_pre_shared_key}}"
peervpn_conf_initpeers: "master1.banditlair.com 7000"
peervpn_conf_enabletunneling: "yes"
peervpn_conf_interface: "tap0"
peervpn_conf_port: 7000
peervpn_conf_enableipv6: "no"

2
host_vars/master1.banditlair.com Normal file
View file

@ -0,0 +1,2 @@
---
peervpn_conf_ifconfig4: "10.3.0.001/24"

2
host_vars/master2.banditlair.com Normal file
View file

@ -0,0 +1,2 @@
---
peervpn_conf_ifconfig4: "10.3.0.002/24"

2
host_vars/master3.banditlair.com Normal file
View file

@ -0,0 +1,2 @@
---
peervpn_conf_ifconfig4: "10.3.0.003/24"

2
host_vars/node1.banditlair.com Normal file
View file

@ -0,0 +1,2 @@
---
peervpn_conf_ifconfig4: "10.3.0.101/24"

2
host_vars/node2.banditlair.com Normal file
View file

@ -0,0 +1,2 @@
---
peervpn_conf_ifconfig4: "10.3.0.102/24"

19
hosts Normal file
View file

@ -0,0 +1,19 @@
[k8s-kubectl]
localhost ansible_connection=local ansible_become_user=froidmpa
[k8s-ca]
localhost ansible_connection=local ansible_become_user=froidmpa
[k8s-etcd]
master[1:3].banditlair.com
[k8s-master]
master[1:3].banditlair.com
[k8s-node]
node[1:2].banditlair.com
[k8s:children]
k8s-master
k8s-node

10
k8s.yml Normal file
View file

@ -0,0 +1,10 @@
---
- hosts: k8s
roles:
- role: githubixx.harden-linux
tags: role-harden-linux
- role: githubixx.peervpn
tags: role-peervpn
vars_files:
- "passwords.yml"

116
passwords.yml
View file

@ -1,42 +1,76 @@
$ANSIBLE_VAULT;1.1;AES256 $ANSIBLE_VAULT;1.1;AES256
64306138653665636263346163376562326634323266326535393335373639393930393161306363 32376561323838393733333362333832393539373363623932613365396339393435653066633862
3862316262623932613164396339373663396664613939380a376337386431643434373533373039 3766393065636135646136656533356337623762306564380a646236643133343361363365396464
64663861383635643765306461636334303465386232313964396336306561653030303164666231 38666435333964323330386266346234643762376262316363333435386339643534396561333463
6335616463323762620a323662393165333563333734306263363161363065363461653635303837 3866666566623835390a393161663938326432653731626165383939343530313865653535643230
39333435626238613232666332393836363639376437343738343032646166613530323761343761 31663035363536376164626566623435666433376365653433353034623232653335366530303930
34313837333035633539316132316364386261316433343135313035333437613638633863303137 37643835663339633534613431363838353738353461623633353362323763333837613164383532
32313538386238343232613465623236613931323335396131663461666532356231663132613138 61643332646130376132636338366330326561653830303236653638663239623831623463313361
34653730643233336638663530653363346630353965633966666234653162333037353238613138 34666431353132663237326633636661393365376539393666626630623433316231383561616335
61616566373062636564356264326436636137326530333037376364633237663330393264633237 34353231323431646231613639313766636338396362323865373863633864326538343963323564
65643562333662653439623133366337313461356536313662303062386130363264666432363834 61643230396333316562616466633031393938373739343436653337336530663132613263633561
35623236613039333262653139613766303266386334643931353837363133656134303666623565 36323732646236343333303238663363656665613362636466383363336132653966316338613136
62643862666662356165643164356639363033373839326135376237326530376262353033666438 61326336356634613837643634643364313136343665383138616234346239376336353034366533
65373235646338333237383766656637613031626638656363393431353337376665353662393235 34333338653832393835343666633762316563353431326135396463336334653032353231633962
66333834633532623539313062666130353938663533303837363733613539346233326264376338 61356136633366623862316135633833666539306236393632326234386161306665643032323730
34343735643236303162376132613133323136303334366136633736383766353834356137323865 39643032333562386632616137353637393764313630633433373638626235663465396138653534
32346464666639643936316163383063616264663264366232373964373636366434386464363165 36373230373638383333643637323163356235383063353461626333373838636565346134383333
31313462346137346136613831353332626133653563623235393030353131643563376666386665 31303238323930336264303539336131306334383366653531613766383165336530393763316230
34376233616633396630633866343566376530653866613335656539303937616238613265396131 62363436336334343432663564306262333233366465353663313734313565313131376130623164
34666130333565353566346331663731346138313639383164303532383636373264623261666637 33316130383432656262363365303364636139336336633362386363373031636230663030323338
37326631656339303030323231356365633539393561343636393466343334306234303531643666 37313665613764666435376530343064623266666163333931643130643963636438303636343666
32393332636666333637666536396631633330323933646465653662306239653061386266666366 30376461633738643339656234663564363561323831323036353661306235646661396237356235
30386532306262643731623239646539393035396330316136383466373966623535643338383335 32613239393732316234343438646634626465633334326665393737346165386164396334323662
30643037626635616132393635343436646436616466383930313334396165316566613133386131 34646563613562396131313532613738383764323638363139326535666637386634346666386465
63333933636537306635313634313137623632336566313664363365653565303034396562343537 63646435366162653838643363353339653463626362393637623735623034613934666566633562
63393861306136333436343539326137613830663831323637316166383439333463643833326232 36386465323431653665646231663664316334383938396537633766376438623834643263653334
38636166666537303164633137623235386635383233653433363033303161303737623032613761 37323034616436626265343262653532623031366666633536346665376163343433646464313563
39356266646536363165643636356364343761323866376638393734313430353437303461663230 61633064333531623635373538396566396535656463313830393333613064393337656335653739
36316332373365323263623661393366353939633865663564316336356165306531386261323531 37656137356231643333653032326665326439353437326261386435373636343233306138646563
31613239363863613636353263666438343164323632326437313935316236396430636432386635 65386230633435646562343534396233633535656362333236313536396339323462373534336231
36393837376437383339313661643065363438326532363435363837656262336539643435653864 31326530306463383864343035666361356332323566353031313163643135653136653432333030
62343730316338616639386239343934323766636230623564313663323834343332383262353732 33616338333236303466353562393530373061666266613530303131616162336566653530353139
38666461393666363266326631336334343861373765323333376130373766303031336339643536 36346665613530393062303533363963363539656163613961373231643465633837633339353638
64616534353066363335343934303635356532356666376662356534373434383036613765396338 39336563313135626463643338353731656666396133616637376430356236623439616234393865
66373434346233316234376165343731313064643934313362356239616538616162303834316534 65626566346532346465373932633833616430366534613361616661303665663663633163316236
33623730313539666264363838666666386136633136393066396534383434346665626134643739 30656661353266313765326364343537323133623562356439633332303263366533353161383361
33393930383364376335643631623533626535366332616463643937313265316335373038373165 37373335373838383739313737396235623934633330336263666366316665666236313536303165
66316632323966633432353733616130303564366461323666663266643362626366396365313635 36303538396665303135363131336330666664313330396531306437396261383038663165343530
36633263656638323032643833303963353531626534616666623330653336393133333161313832 30636431616262353331306331646163333631366533326537623435613365356137343938363361
32386531346232643530653863376330333437376539626238313034626334356632393235643839 64626264633830306636303832373632343136353330376131396665313961316434356332653039
36323566666131333462326663383730633063313766343338663266616639373432343036393338 31323732306533616238393839643731333737636531336433353762616564366638666636313963
3136 65646335323761336537323661613339313537383839363064316536316164653561363064353938
33386535623562626135346431663835663834316638643736393437333465343562646339323330
30366239396238323137656261303133343039356261373232303338376665666264323032383030
32653663373961346633633639623131633030633865623062376265383136306334313535373365
36373634346366396565333631303566343163646263353030363830306232646633376261326639
66656539323534373434346164383035363738383031373739666263303639623333653630323561
64643361383939303564306364613538383530376365383130646532343335356533303461353434
31663235666339663935623039396639383732663432383631653234353731623739646161616563
31636235306436323261363235323061653733386233633531386664643564653766613632313636
38346632623764303936653538656464636131306263353935353736313236396566326130366565
63623632363338646430366265623661373766613137393236613638313261336664396266316230
64656264383830316566353534356534313038353864663633633866633134313266623436323637
31393934306434316664616433333130356563313539333431666563376330353533353432366463
33393735353662623239643264636339373965336330663965636232333562373432636161663331
64396330346566346634393630393265353137373466333130353131343131336331626533623962
33663832323638386630336666396133386263353037306133346362303738343164376637336430
38336461353763386164333433313136383566653838383233623036613335393632396461303638
37616163366530353233386565613730653866363465616461336439303338636565623132313665
31316665633936303763386530653332303831383334623537353635616332313663303734663235
35306438663066323665373439623337373065346663623230386439323735633763363838663537
31626362666431306239306331653638313432633933316232396162396231663232343739663738
39613336333337346637333137333731383662653666313365343565393033306535343964383739
34316331366532313963333561396161333737303637383839613035303031356437666131653933
35643934643136643130313033343830613165386265643736633165346563376534313637633537
33326435373535323837653536336234353239303238386231623064643632633339653836623335
30666532653432636430316434363233366464383331353137613536323135663265376463303261
63323131383034373633653961346630646639643563653561306533356531643237386230323439
34393935366165363735346232343239656161613331333331393866366661656230653063653236
36363863303330626231343530353132663366663863353335313662653235396233623437303036
63393363626639643666643033666331346166633264653439623763313361623433383834396562
31613738306562633863613966343261653032306636636336613637643234303432663963383033
38386331326332653361303963636666646430303937336130323531613838666465376365303533
63326664653532373865336332616165623636393163623762303062383261326431653835303266
63663261383734613136653063316265303531363531313232643936386561313832326562666131
633831383762656334616561613238396334