20 lines
676 B
Plaintext
20 lines
676 B
Plaintext
# Encrypt with: ansible-vault encrypt group_vars/all/vault.yml
|
|
|
|
vault_hetzner_s3_access_key: "REPLACE_ME"
|
|
vault_hetzner_s3_secret_key: "REPLACE_ME"
|
|
|
|
vault_grafana_admin_password: "REPLACE_ME"
|
|
|
|
vault_wireguard_server_private_key: "REPLACE_ME_BASE64"
|
|
vault_wireguard_server_public_key: "REPLACE_ME_BASE64"
|
|
|
|
vault_wireguard_peers:
|
|
- name: admin-laptop
|
|
public_key: REPLACE_ME
|
|
allowed_ips: 10.8.0.10/32
|
|
|
|
# bcrypt hash of the wg-easy web-UI password.
|
|
# Generate with: python3 -c "import bcrypt; print(bcrypt.hashpw(b'YOURPASSWORD', bcrypt.gensalt(12)).decode())"
|
|
# or: htpasswd -bnBC 12 '' YOURPASSWORD | tr -d ':\n'
|
|
vault_wg_easy_password_hash: "REPLACE_ME_BCRYPT_HASH"
|