mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 10:59:59 +00:00
Prageeth Panicker
bf37d5e7b3
Tor: use the shared tor block (bond 0.5, enabled when svc-net-tor is in the node's groups, tor pinned on in both variants) so a node serves one network, onion on a Tor node and clearnet otherwise. SPOT and sizing: WAZUH_INDEXER_URL replaces four hand-built copies of the indexer URL, and the indexer heap is half of mem_limit instead of a hardcoded 1g (unchanged for the current 2g limit). Fixes: bcrypt_hash rejects secrets over 72 bytes; the Keycloak group-removal helper uses the same resolver as the add helper and checks every response (the realm is no longer URL-encoded, matching the add helper), and a failed cleanup fails an otherwise passing test; the swarm certs generator removes a stale container before each attempt; vm.max_map_count is set before the early handler flush; securityadmin failed_when now needs rc 0 and the success marker. The regenerated role README also picks up generator drift (mailu to stalwart).
56 lines
989 B
YAML
56 lines
989 B
YAML
---
|
|
- services:
|
|
container_backup:
|
|
enabled: true
|
|
sso:
|
|
enabled: true
|
|
shared: true
|
|
ldap:
|
|
enabled: true
|
|
shared: true
|
|
logout:
|
|
enabled: true
|
|
shared: true
|
|
dashboard:
|
|
enabled: true
|
|
shared: true
|
|
matomo:
|
|
enabled: true
|
|
shared: true
|
|
prometheus:
|
|
enabled: true
|
|
shared: true
|
|
css:
|
|
enabled: true
|
|
shared: true
|
|
tor:
|
|
enabled: true
|
|
|
|
- services:
|
|
container_backup:
|
|
enabled: false
|
|
shared: false # nocheck: variants-static-override backup shared stays literally true
|
|
sso:
|
|
enabled: false
|
|
shared: false
|
|
ldap:
|
|
enabled: false
|
|
shared: false
|
|
logout:
|
|
enabled: false
|
|
shared: false
|
|
dashboard:
|
|
enabled: false
|
|
shared: false
|
|
matomo:
|
|
enabled: false
|
|
shared: false
|
|
prometheus:
|
|
enabled: false
|
|
shared: false
|
|
css:
|
|
enabled: false
|
|
shared: false
|
|
tor:
|
|
enabled: true
|