12545a7c76
- Terraform + Ansible + K3s + Vault + Consul + Observability - Decentralized network architecture (own datacenters) - Complete Ansible playbooks: - bootstrap.yml: OS setup, packages, SSH - hardening.yml: Security (UFW, fail2ban, auditd, Trivy) - k3s-install.yml: Lightweight Kubernetes cluster - Production inventory with NODE1, NODE3 - Group variables for all nodes - Security check cron script - Multi-DC ready with Consul support
66 lines
1.5 KiB
YAML
66 lines
1.5 KiB
YAML
# DAARION Network - Production Inventory
|
|
# Version: 1.0.0
|
|
# Updated: 2026-01-10
|
|
|
|
all:
|
|
vars:
|
|
ansible_python_interpreter: /usr/bin/python3
|
|
timezone: "UTC"
|
|
|
|
# K3s configuration
|
|
k3s_version: "v1.29.0+k3s1"
|
|
k3s_token: "{{ vault_k3s_token }}"
|
|
|
|
# Network
|
|
daarion_network_cidr: "10.42.0.0/16"
|
|
daarion_service_cidr: "10.43.0.0/16"
|
|
|
|
children:
|
|
# Master nodes - control plane
|
|
masters:
|
|
hosts:
|
|
node1:
|
|
ansible_host: 144.76.224.179
|
|
ansible_user: root
|
|
ansible_ssh_pass: "{{ vault_node1_password }}"
|
|
node_role: master
|
|
datacenter: hetzner-de
|
|
location: "Nuremberg, Germany"
|
|
|
|
# Worker nodes - compute
|
|
workers:
|
|
hosts:
|
|
node3:
|
|
ansible_host: 80.77.35.151
|
|
ansible_port: 33147
|
|
ansible_user: zevs
|
|
ansible_become: yes
|
|
ansible_become_pass: "{{ vault_node3_password }}"
|
|
node_role: worker
|
|
datacenter: remote-dc
|
|
location: "Remote Datacenter"
|
|
gpu: true
|
|
gpu_type: "rtx3090"
|
|
gpu_memory: "24GB"
|
|
|
|
# GPU nodes (subset of workers)
|
|
gpu_nodes:
|
|
hosts:
|
|
node3:
|
|
|
|
# Database nodes
|
|
database_nodes:
|
|
hosts:
|
|
node1:
|
|
node3:
|
|
|
|
# Local development
|
|
local_dev:
|
|
hosts:
|
|
node2:
|
|
ansible_host: localhost
|
|
ansible_connection: local
|
|
node_role: development
|
|
datacenter: local
|
|
location: "MacBook Pro M4"
|