mirror of
https://github.com/RWejlgaard/pez-infra.git
synced 2026-07-04 15:46:16 +00:00
Rasmus "Pez" Wejlgaard
3945b8cafc
Stopped and removed containers on london-b. Removed compose definition, Caddy reverse proxy route for rss.pez.sh, and london-b host_vars entry.
38 lines
1 KiB
YAML
38 lines
1 KiB
YAML
---
|
|
host_role: storage
|
|
host_description: "Primary storage (ZFS), Docker services"
|
|
host_location: "London"
|
|
prometheus_location: london
|
|
|
|
docker_services:
|
|
- jellyseerr
|
|
- navidrome
|
|
- slskd
|
|
- smartctl-exporter
|
|
- plex-exporter
|
|
- bookshelf
|
|
|
|
# Snap-managed services (deployed by media_stack role)
|
|
snap_services:
|
|
- overseerr
|
|
|
|
# APT-managed user services (deployed by media_stack role)
|
|
apt_user_services:
|
|
- syncthing@pez
|
|
|
|
zfs_pools:
|
|
- hdd
|
|
|
|
docker_daemon_extra:
|
|
metrics-addr: "0.0.0.0:9323"
|
|
data-root: "/hdd/docker"
|
|
storage-driver: "zfs"
|
|
|
|
common_ufw_allowed_ports:
|
|
- { port: 32400, proto: tcp, comment: "Plex Media Server" }
|
|
- { port: 6881, proto: tcp, comment: "BitTorrent" }
|
|
- { port: 6881, proto: udp, comment: "BitTorrent" }
|
|
# SMB is reachable over Tailscale via the tailscale0 allow-all rule; this
|
|
# entry additionally allows the local London LAN. Deliberately NOT open to
|
|
# the public internet (see PESO-145).
|
|
- { port: 445, proto: tcp, from_ip: "192.168.1.0/24", comment: "Samba (LAN only)" }
|