dotfiles/system.yaml at master · GinShio/dotfiles · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
config:
  backup: true
  banner: true
  create: true
  dotpath: system
  ignoreempty: false
  keepdot: false
  longkey: false
  showdiff: false
  workdir: ~/cyber/dotfiles
  import_variables:
    - config.d/70-variables-dev.yaml
    - config.d/80-vps-apps.yaml
actions:
  authentik-perms: |
    id -u authentik >/dev/null 2>&1 && \
    chown -R authentik:authentik {{@@ vps.apps.sso.home_dir @@}} && \
    chmod 600 {{@@ vps.apps.sso.home_dir @@}}/.env || true
  miniflux-perms: |
    id -u miniflux >/dev/null 2>&1 && \
    chown miniflux:miniflux /var/lib/miniflux/miniflux.conf /var/lib/miniflux/miniflux_admin_password && \
    chmod 600 /var/lib/miniflux/miniflux.conf /var/lib/miniflux/miniflux_admin_password || true
  nginx-link: ln -sf /etc/nginx/sites-mine/* /etc/nginx/sites-enabled/ || true
  nginx-reload: systemctl reload nginx || true
  systemd-reload: systemctl daemon-reload || true
dotfiles:
  d_authentik:
    dst: "{{@@ vps.apps.sso.home_dir @@}}"
    src: authentik/
    actions:
      - authentik-perms
  f_bluetooth:
    dst: /etc/bluetooth/main.conf
    src: bluetooth/main.conf
  d_grub:
    dst: /etc/default/grub.d/
    src: grub
  d_miniflux:
    dst: "{{@@ vps.apps.rss.home_dir @@}}"
    src: miniflux/
    actions:
      - miniflux-perms
  d_nginx:
    dst: /etc/nginx/sites-mine/
    src: nginx/
    actions:
      - nginx-link
      - nginx-reload
  f_ssh:
    dst: /etc/ssh/sshd_config
    src: ssh/sshd_config
  d_sudoers:
    dst: /etc/sudoers.d/
    src: sudoers
  d_sysctl:
    dst: /etc/sysctl.d/
    src: sysctl
  d_systemd_develop:
    dst: /etc/systemd/system/
    src: systemd/develop/
  d_systemd_service:
    dst: /etc/systemd/system/
    src: systemd/service/
    actions:
      - systemd-reload
  d_systemd-logind:
    dst: /etc/systemd/logind.conf.d/
    src: systemd-logind/
  d_systemd-user:
    dst: /etc/systemd/user@.service.d/
    src: systemd-user/
profiles:
  personal:
    import:
      - roles/system/develop.yaml
  khronos3d:
    import:
      - roles/system/develop.yaml
  vps:
    import:
      - roles/system/service.yaml