144 lines
3.9 KiB
Plaintext
144 lines
3.9 KiB
Plaintext
variant: fcos
|
|
version: 1.6.0
|
|
ignition:
|
|
config:
|
|
merge:
|
|
- local: users/arr.ign
|
|
- local: users/gitea.ign
|
|
- local: users/homeassistant.ign
|
|
- local: users/jdownloader.ign
|
|
- local: users/kiwix.ign
|
|
- local: users/komga.ign
|
|
- local: users/navidrome.ign
|
|
- local: users/nextcloud.ign
|
|
- local: users/nginx.ign
|
|
- local: users/pairdrop.ign
|
|
- local: users/paperless.ign
|
|
- local: users/pihole.ign
|
|
- local: users/qbittorrent.ign
|
|
- local: users/synapse.ign
|
|
- local: users/tga.ign
|
|
- local: users/wallabag.ign
|
|
passwd:
|
|
users:
|
|
- name: tga
|
|
ssh_authorized_keys:
|
|
- ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPU3HVxgnW01J1p7fzs3urKETfkhH++liutmaqe4xe20 tga@fedora
|
|
groups:
|
|
- sudo
|
|
- wheel
|
|
- name: zero
|
|
storage:
|
|
disks:
|
|
- device: /dev/disk/by-id/ata-WDC_WD120EFBX-68B0EN0_5QKYB19B
|
|
wipe_table: false
|
|
partitions:
|
|
- number: 1
|
|
start_mib: 0
|
|
wipe_partition_entry: false
|
|
should_exist: true
|
|
resize: false
|
|
- device : /dev/disk/by-id/ata-WDC_WD120EFGX-68CPHN0_WD-B00K2ELD
|
|
wipe_table: false
|
|
partitions:
|
|
- number: 1
|
|
start_mib: 0
|
|
wipe_partition_entry: false
|
|
should_exist: true
|
|
resize: false
|
|
filesystems:
|
|
- device: /dev/disk/by-label/nas
|
|
format: btrfs
|
|
path: /var/mnt/nas
|
|
wipe_filesystem: false
|
|
label: nas
|
|
uuid: ddc68e10-2b26-4267-ad9c-8ee7753497d9
|
|
mount_options:
|
|
- defaults
|
|
- noatime
|
|
- nofail
|
|
with_mount_unit: true
|
|
files:
|
|
- path: /opt/bin/enable-all-quadlets.sh
|
|
contents:
|
|
local: init/enable-all-quadlets.sh
|
|
mode: 0755
|
|
- path: /opt/bin/configure-firewalld.sh
|
|
contents:
|
|
local: init/configure-firewalld.sh
|
|
mode: 0755
|
|
- path: /opt/bin/add-secrets.sh
|
|
contents:
|
|
local: files/add-secrets.sh
|
|
mode: 0755
|
|
- path: /etc/containers/systemd/samba.container
|
|
contents:
|
|
local: quadlets/samba/samba.container
|
|
- path: /root/.secrets
|
|
mode: 0600
|
|
contents:
|
|
local: /home/root/.secrets
|
|
- path: /root/scripts/move-downloads-nextcloud.sh
|
|
mode: 0755
|
|
contents:
|
|
local: /home/root/move-downloads-nextcloud.sh
|
|
- path: /root/scripts/copy-music.sh
|
|
mode: 0755
|
|
contents:
|
|
local: /home/root/copy-music.sh
|
|
- path: /etc/ssh/sshd_config.d/99-custom
|
|
mode: 0644
|
|
contents:
|
|
local: files/sshd_config
|
|
- path: /etc/smartmontools/smartd.conf
|
|
mode: 0644
|
|
overwrite: true
|
|
contents:
|
|
local: files/smartd.conf
|
|
- path: /etc/sudoers.d/99-poweroff
|
|
mode: 0644
|
|
contents:
|
|
local: files/poweroff
|
|
- path: /root/jail.local
|
|
mode: 0644
|
|
contents:
|
|
local: files/jail.local
|
|
systemd:
|
|
units:
|
|
- name: fstrim.timer
|
|
enabled: true
|
|
mask: false
|
|
- name: docker.service
|
|
enabled: false
|
|
mask: true
|
|
- name: enable-all-quadlets.service
|
|
enabled: false
|
|
contents_local: init/enable-all-quadlets.service
|
|
mask: false
|
|
- name: configure-firewalld.service
|
|
enabled: false
|
|
contents_local: init/configure-firewalld.service
|
|
mask: false
|
|
- name: move-downloads-nextcloud.timer
|
|
enabled: false
|
|
contents_local: files/move-downloads-nextcloud.timer
|
|
mask: false
|
|
- name: move-downloads-nextcloud.service
|
|
enabled: false
|
|
contents_local: files/move-downloads-nextcloud.service
|
|
mask: false
|
|
- name: copy-music.timer
|
|
enabled: false
|
|
contents_local: files/copy-music.timer
|
|
mask: false
|
|
- name: copy-music.service
|
|
enabled: false
|
|
contents_local: files/copy-music.service
|
|
mask: false
|
|
- name: install-additional-packages.service
|
|
enabled: true
|
|
contents_local: files/install-additional-packages.service
|
|
mask: false
|
|
boot_device:
|
|
layout: aarch64
|