Experiment

This commit is contained in:
Jeff 2023-06-04 09:22:55 -04:00
parent 173f9cd225
commit 7dbdf17e83
2 changed files with 23 additions and 16 deletions

View File

@ -5,6 +5,7 @@ passwd:
- name: core - name: core
ssh_authorized_keys: ssh_authorized_keys:
- ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDR7q2FfdizNkvel66N/jHcwlEA8R5JEOneKXshMWqkX jeff@station-1 - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDR7q2FfdizNkvel66N/jHcwlEA8R5JEOneKXshMWqkX jeff@station-1
password_hash: $y$j9T$kNtG1zoLVEs5WhA3pE5Eh1$sKckG1SOcZ/p5Vw/4bqSgttLOW5z6WonOtoW6E91mt3
systemd: systemd:
units: units:
- name: adguardhome.service - name: adguardhome.service
@ -35,22 +36,28 @@ systemd:
[Install] [Install]
WantedBy=multi-user.targetstorage: WantedBy=multi-user.targetstorage:
files: storage:
- path: /etc/hostname disks:
mode: 0644 - device: /dev/nvme0n1
contents: wipe_table: true
inline: server-0 partitions:
luks: - number: 1
- name: data label: var
device: /dev/vdb - number: 2
label: swap
filesystems: filesystems:
- path: /var/lib/data - path: /var
device: /dev/mapper/data device: /dev/disk/by-partlabel/var
format: btrfs format: btrfs
label: DATA wipe_filesystem: true
label: var
with_mount_unit: true with_mount_unit: true
- path: /var/lib/data - device: /dev/disk/by-partlabel/swap
device: /dev/disk/by-id/coreos-boot-disk format: swap
format: ext4 wipe_filesystem: true
label: BOOT
with_mount_unit: true with_mount_unit: true
luks:
- name: static-key
device: /dev/nvme0n1
key_file:
inline: grub.pbkdf2.sha512.10000.8398C220CCB0807EEE0C5C007F475AFD4247506DC186F3F09ACD0D6F8AB9955B4DCB3E4FAC91900E7C507791394D80887C786CF81519F5D44FBB10C901524BEE.3B935E208D0DBEDCDB4634555D1540A3D903A5463197D847B65A54264964739E746CC86FD1A2C809BEA42DE2F68F45445F7FD93B021B3B127FD5CB3EDC30975E

View File

@ -1 +1 @@
{"ignition":{"version":"3.3.0"},"passwd":{"users":[{"name":"core","sshAuthorizedKeys":["ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDR7q2FfdizNkvel66N/jHcwlEA8R5JEOneKXshMWqkX jeff@station-1"]}]},"systemd":{"units":[{"contents":"[Unit]\nDescription=AdGuardHome\nAfter=network-online.target\nWants=network-online.target\n\n[Service]\nTimeoutStartSec=0\nExecStartPre=-/bin/podman kill adguardhome\nExecStartPre=-/bin/podman rm adguardhome\nExecStartPre=/bin/podman pull adguard/adguardhome\nExecStart=docker run \\\n --name adguardhome \\\n --restart unless-stopped \\\n -v /my/own/workdir:/opt/adguardhome/work \\\n -v /my/own/confdir:/opt/adguardhome/conf \\\n -p 53:53/tcp -p 53:53/udp \\\n -p 67:67/udp -p 68:68/udp \\\n -p 80:80/tcp -p 443:443/tcp -p 443:443/udp -p 3000:3000/tcp \\\n -p 853:853/tcp \\\n -p 784:784/udp -p 853:853/udp -p 8853:8853/udp \\\n -p 5443:5443/tcp -p 5443:5443/udp \\\n -d adguard/adguardhome\n\n[Install]\nWantedBy=multi-user.targetstorage:\n","enabled":true,"name":"adguardhome.service"}]}} {"ignition":{"version":"3.3.0"},"passwd":{"users":[{"name":"core","passwordHash":"$y$j9T$kNtG1zoLVEs5WhA3pE5Eh1$sKckG1SOcZ/p5Vw/4bqSgttLOW5z6WonOtoW6E91mt3","sshAuthorizedKeys":["ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDR7q2FfdizNkvel66N/jHcwlEA8R5JEOneKXshMWqkX jeff@station-1"]}]},"storage":{"disks":[{"device":"/dev/nvme0n1","partitions":[{"label":"var","number":1},{"label":"swap","number":2}],"wipeTable":true}],"filesystems":[{"device":"/dev/disk/by-partlabel/var","format":"btrfs","label":"var","path":"/var","wipeFilesystem":true},{"device":"/dev/disk/by-partlabel/swap","format":"swap","wipeFilesystem":true}],"luks":[{"device":"/dev/nvme0n1","keyFile":{"compression":"","source":"data:,grub.pbkdf2.sha512.10000.8398C220CCB0807EEE0C5C007F475AFD4247506DC186F3F09ACD0D6F8AB9955B4DCB3E4FAC91900E7C507791394D80887C786CF81519F5D44FBB10C901524BEE.3B935E208D0DBEDCDB4634555D1540A3D903A5463197D847B65A54264964739E746CC86FD1A2C809BEA42DE2F68F45445F7FD93B021B3B127FD5CB3EDC30975E"},"name":"static-key"}]},"systemd":{"units":[{"contents":"# Generated by Butane\n[Unit]\nRequires=systemd-fsck@dev-disk-by\\x2dpartlabel-var.service\nAfter=systemd-fsck@dev-disk-by\\x2dpartlabel-var.service\n\n[Mount]\nWhere=/var\nWhat=/dev/disk/by-partlabel/var\nType=btrfs\n\n[Install]\nRequiredBy=local-fs.target","enabled":true,"name":"var.mount"},{"contents":"# Generated by Butane\n[Swap]\nWhat=/dev/disk/by-partlabel/swap\n\n[Install]\nRequiredBy=swap.target","enabled":true,"name":"dev-disk-by\\x2dpartlabel-swap.swap"},{"contents":"[Unit]\nDescription=AdGuardHome\nAfter=network-online.target\nWants=network-online.target\n\n[Service]\nTimeoutStartSec=0\nExecStartPre=-/bin/podman kill adguardhome\nExecStartPre=-/bin/podman rm adguardhome\nExecStartPre=/bin/podman pull adguard/adguardhome\nExecStart=docker run \\\n --name adguardhome \\\n --restart unless-stopped \\\n -v /my/own/workdir:/opt/adguardhome/work \\\n -v /my/own/confdir:/opt/adguardhome/conf \\\n -p 53:53/tcp -p 53:53/udp \\\n -p 67:67/udp -p 68:68/udp \\\n -p 80:80/tcp -p 443:443/tcp -p 443:443/udp -p 3000:3000/tcp \\\n -p 853:853/tcp \\\n -p 784:784/udp -p 853:853/udp -p 8853:8853/udp \\\n -p 5443:5443/tcp -p 5443:5443/udp \\\n -d adguard/adguardhome\n\n[Install]\nWantedBy=multi-user.targetstorage:\n","enabled":true,"name":"adguardhome.service"}]}}