mirror of
				https://github.com/kevinveenbirkenbach/computer-playbook.git
				synced 2025-11-03 19:58:14 +00:00 
			
		
		
		
	- registered subnet 192.168.104.48/28 for coturn in group_vars/all/09_networks.yml - defined public ports for stun/turn and relay port range in group_vars/all/10_ports.yml - removed obsolete TODO.md and env.j2 from role - added schema/main.yml with credentials validation (user_password, auth_secret) - refactored tasks to load sys-stk-back-stateless instead of sys-stk-full-stateful - implemented docker-compose.yml.j2 with auth-secret + lt-cred-mech and TLS config - restructured vars/main.yml with docker, ports, credentials, and certificates - updated config/main.yml.j2 with canonical domain and service definitions Conversation: https://chatgpt.com/share/68d6c4a8-d524-800f-9592-e8a3407cd721
		
			
				
	
	
		
			106 lines
		
	
	
		
			3.2 KiB
		
	
	
	
		
			YAML
		
	
	
	
	
	
			
		
		
	
	
			106 lines
		
	
	
		
			3.2 KiB
		
	
	
	
		
			YAML
		
	
	
	
	
	
ports:
 | 
						|
  # Ports which are exposed to localhost
 | 
						|
  localhost:
 | 
						|
    database:
 | 
						|
      svc-db-postgres:    5432
 | 
						|
      svc-db-mariadb:     3306
 | 
						|
    # https://developer.mozilla.org/de/docs/Web/API/WebSockets_API
 | 
						|
    websocket:
 | 
						|
      web-app-mastodon:   4001
 | 
						|
      web-app-espocrm:    4002
 | 
						|
    oauth2_proxy:
 | 
						|
      web-app-phpmyadmin: 4181
 | 
						|
      web-app-lam: 4182
 | 
						|
      web-app-openproject: 4183
 | 
						|
      web-app-yourls: 4184
 | 
						|
      web-app-pgadmin: 4185
 | 
						|
      web-app-phpldapadmin: 4186
 | 
						|
      web-app-fusiondirectory: 4187
 | 
						|
      web-app-gitea: 4188
 | 
						|
      web-app-snipe-it: 4189
 | 
						|
    ldap:
 | 
						|
      svc-db-openldap: 389
 | 
						|
    http:
 | 
						|
      # Ports which are exposed to the World Wide Web
 | 
						|
      web-app-nextcloud: 8001
 | 
						|
      web-app-gitea: 8002
 | 
						|
      web-app-wordpress: 8003
 | 
						|
      web-app-mediawiki: 8004
 | 
						|
      web-app-confluence: 8005
 | 
						|
      web-app-yourls: 8006
 | 
						|
      web-app-mailu: 8007
 | 
						|
      web-app-elk: 8008
 | 
						|
      web-app-mastodon: 8009
 | 
						|
      web-app-pixelfed: 8010
 | 
						|
      web-app-peertube: 8011
 | 
						|
      web-app-funkwhale: 8012
 | 
						|
      web-app-roulette-wheel: 8013
 | 
						|
      web-app-joomla: 8014
 | 
						|
      web-app-jira: 8015
 | 
						|
      web-app-pgadmin: 8016
 | 
						|
      web-app-baserow: 8017
 | 
						|
      web-app-matomo: 8018
 | 
						|
      web-app-listmonk: 8019
 | 
						|
      web-app-discourse: 8020
 | 
						|
      web-app-matrix_synapse: 8021
 | 
						|
      web-app-matrix_element: 8022
 | 
						|
      web-app-openproject: 8023
 | 
						|
      web-app-gitlab: 8024
 | 
						|
      web-app-akaunting: 8025
 | 
						|
      web-app-moodle: 8026
 | 
						|
      web-app-taiga: 8027
 | 
						|
      web-app-friendica: 8028
 | 
						|
      web-app-desktop: 8029
 | 
						|
      web-app-bluesky_api: 8030
 | 
						|
      web-app-bluesky_web: 8031
 | 
						|
      web-app-keycloak: 8032
 | 
						|
      web-app-lam: 8033
 | 
						|
      web-app-phpmyadmin: 8034
 | 
						|
      web-app-snipe-it: 8035
 | 
						|
      web-app-sphinx: 8036
 | 
						|
      web-app-phpldapadmin: 8037
 | 
						|
      web-app-fusiondirectory: 8038
 | 
						|
      web-app-navigator: 8039
 | 
						|
      web-app-espocrm: 8040
 | 
						|
      web-app-syncope: 8041
 | 
						|
      web-svc-collabora: 8042
 | 
						|
      web-app-mobilizon: 8043
 | 
						|
      web-svc-simpleicons: 8044
 | 
						|
      web-svc-libretranslate: 8045
 | 
						|
      web-app-pretix: 8046
 | 
						|
      web-app-mig: 8047
 | 
						|
      web-svc-logout: 8048
 | 
						|
      web-app-bookwyrm: 8049
 | 
						|
      web-app-chess: 8050
 | 
						|
      web-app-bluesky_view: 8051
 | 
						|
      web-app-magento: 8052
 | 
						|
      web-app-bridgy-fed: 8053
 | 
						|
      web-app-xwiki: 8054
 | 
						|
      web-app-openwebui: 8055
 | 
						|
      web-app-flowise: 8056
 | 
						|
      web-app-minio_api: 8057
 | 
						|
      web-app-minio_console: 8058
 | 
						|
      web-app-bigbluebutton: 48087    # This port is predefined by bbb. @todo Try to change this to a 8XXX port
 | 
						|
  public:
 | 
						|
    # The following ports should be changed to 22 on the subdomain via stream mapping
 | 
						|
    ssh:
 | 
						|
      web-app-gitea:          2201
 | 
						|
      web-app-gitlab:         2202
 | 
						|
    ldaps:
 | 
						|
      svc-db-openldap:        636
 | 
						|
    stun:
 | 
						|
      web-app-bigbluebutton:  3478  # Not sure if it's right placed here or if it should be moved to localhost section
 | 
						|
      # Occupied by BBB:      3479
 | 
						|
      web-app-nextcloud:      3480
 | 
						|
      web-app-coturn:         3481
 | 
						|
    turn:
 | 
						|
      web-app-bigbluebutton:  5349  # Not sure if it's right placed here or if it should be moved to localhost section
 | 
						|
      web-app-nextcloud:      5350  # Not used yet
 | 
						|
      web-app-coturn:         5351
 | 
						|
    federation:
 | 
						|
      web-app-matrix_synapse: 8448
 | 
						|
    relay_port_ranges:
 | 
						|
      web-app-coturn_start:   49152
 | 
						|
      web-app-coturn_end:     65535
 | 
						|
 |