Files
computer-playbook/group_vars/all/09_networks.yml
Kevin Veen-Birkenbach 3cc4014edf feat(coturn): add dedicated web-svc-coturn role with schema, ports, network, and docker-compose template
- registered subnet 192.168.104.48/28 for coturn in group_vars/all/09_networks.yml
- defined public ports for stun/turn and relay port range in group_vars/all/10_ports.yml
- removed obsolete TODO.md and env.j2 from role
- added schema/main.yml with credentials validation (user_password, auth_secret)
- refactored tasks to load sys-stk-back-stateless instead of sys-stk-full-stateful
- implemented docker-compose.yml.j2 with auth-secret + lt-cred-mech and TLS config
- restructured vars/main.yml with docker, ports, credentials, and certificates
- updated config/main.yml.j2 with canonical domain and service definitions

Conversation: https://chatgpt.com/share/68d6c4a8-d524-800f-9592-e8a3407cd721
2025-09-26 18:52:13 +02:00

129 lines
3.7 KiB
YAML

defaults_networks:
internet:
ip4: "127.0.0.1" # Change this in inventory to the ip4 address of your server
ip6: "::01" # Change this in inventory to the ip6 address of your server
local:
# The default docker subnetworking does lead to overlapping and to huge networks.
# Due to this reason networks with 16 ips are created.
# This should be sufficient for the most cases
# /28 Networks, 14 Usable Ip Addresses
web-app-akaunting:
subnet: 192.168.101.0/28
web-app-confluence:
subnet: 192.168.101.16/28
web-app-baserow:
subnet: 192.168.101.32/28
web-app-mobilizon:
subnet: 192.168.101.48/28
web-app-bluesky:
subnet: 192.168.101.64/28
web-app-friendica:
subnet: 192.168.101.80/28
web-app-funkwhale:
subnet: 192.168.101.96/28
web-app-gitea:
subnet: 192.168.101.112/28
web-app-gitlab:
subnet: 192.168.101.128/28
web-app-joomla:
subnet: 192.168.101.144/28
web-app-keycloak:
subnet: 192.168.101.160/28
web-app-wordpress:
subnet: 192.168.101.176/28
web-app-listmonk:
subnet: 192.168.101.192/28
web-app-jira:
subnet: 192.168.101.208/28
web-app-matomo:
subnet: 192.168.101.224/28
web-app-mastodon:
subnet: 192.168.101.240/28
web-app-matrix:
subnet: 192.168.102.0/28
web-app-mailu:
# Use one of the last container ips for dns resolving so that it isn't used
dns_resolver: 192.168.102.29
subnet: 192.168.102.16/28
web-app-moodle:
subnet: 192.168.102.32/28
web-app-bookwyrm:
subnet: 192.168.102.48/28
web-app-nextcloud:
subnet: 192.168.102.64/28
web-app-openproject:
subnet: 192.168.102.80/28
web-app-peertube:
subnet: 192.168.102.96/28
web-app-phpmyadmin:
subnet: 192.168.102.112/28
web-app-pixelfed:
subnet: 192.168.102.128/28
web-app-pgadmin:
subnet: 192.168.102.144/28
web-app-snipe-it:
subnet: 192.168.102.160/28
web-app-taiga:
subnet: 192.168.102.176/28
web-app-yourls:
subnet: 192.168.102.192/28
web-app-discourse:
subnet: 192.168.102.208/28
web-app-sphinx:
subnet: 192.168.102.224/28
web-app-lam:
subnet: 192.168.103.0/28
web-app-phpldapadmin:
subnet: 192.168.103.16/28
web-app-fusiondirectory:
subnet: 192.168.103.32/28
web-app-navigator:
subnet: 192.168.103.48/28
web-app-espocrm:
subnet: 192.168.103.64/28
web-app-syncope:
subnet: 192.168.103.80/28
web-svc-collabora:
subnet: 192.168.103.96/28
web-svc-simpleicons:
subnet: 192.168.103.112/28
web-svc-libretranslate:
subnet: 192.168.103.128/28
web-app-pretix:
subnet: 192.168.103.144/28
web-app-mig:
subnet: 192.168.103.160/28
web-svc-logout:
subnet: 192.168.103.176/28
web-app-chess:
subnet: 192.168.103.192/28
web-app-magento:
subnet: 192.168.103.208/28
web-app-bridgy-fed:
subnet: 192.168.103.224/28
web-app-xwiki:
subnet: 192.168.103.240/28
web-app-openwebui:
subnet: 192.168.104.0/28
web-app-flowise:
subnet: 192.168.104.16/28
web-app-minio:
subnet: 192.168.104.32/28
web-svc-coturn:
subnet: 192.168.104.48/28
# /24 Networks / 254 Usable Clients
web-app-bigbluebutton:
# This network variable isn't used.
# It's registered here to make transparent which network bbb is using and to avoid conflicts.
subnet: 10.7.7.0/24
svc-db-postgres:
subnet: 192.168.200.0/24
svc-db-mariadb:
subnet: 192.168.201.0/24
svc-db-openldap:
subnet: 192.168.202.0/24
svc-ai-ollama:
subnet: 192.168.203.0/24 # Big network to bridge applications into ai