default configs

2024-05-13 12:32:27 +02:00 · 2024-05-13 12:32:27 +02:00 · ed5eb24eda
parent 66a8abbeef
commit ed5eb24eda
4 changed files with 262 additions and 0 deletions
--- a/alaka-defaults.yml
+++ b/alaka-defaults.yml
@ -0,0 +1,97 @@
+GLOBALS:
+    bbb_url: https://talk.example.com/bigbluebutton/
+    bbb_secret: your_super_secret_password
+    turn_url: "turns:talk.example.com:5349?transport=tcp"
+    turn_secret: your_super_secret_password
+    basic_auth_password: your_super_secret_password
+    loki_url: https://loki.monitoring.example.com/loki/api/v1/push
+    basic_auth_hash: your_super_secret_password
+authentik:
+    env:
+        EXTRA_DOMAINS: ', `example.com`'
+        DEFAULT_LANGUAGE: de
+        APPLICATIONS: '{"Calendar": "https://nextcloud.example.com/apps/calendar/", "BBB": "https://nextcloud.example.com/apps/bbb"}'
+    uncomment:
+        - calendar.svg
+        - bbb.jpg
+    execute:
+       - worker set_admin_pass
+       - worker apply_blueprints
+       - worker add_applications
+       - local set_icons
+nextcloud:
+    env: 
+        DEFAULT_QUOTA: "100 MB"
+        APPS: "calendar"
+        BBB_URL: "{{bbb_url}}"
+    uncomment:
+        - compose.apps.yml
+        - SECRET_BBB_SECRET_VERSION
+    secrets:
+        bbb_secret: "{{bbb_secret}}"
+    execute:
+        - app install_bbb
+        - app set_default_quota
+        - app install_apps
+        - app run_occ 'app:disable dashboard'
+wordpress:
+    env:
+        LOCALE: 'de_DE'
+        DEFAULT_USER_ROLE: administrator
+    uncomment:
+        - EXTRA_DOMAINS
+    execute:
+        - app core_install
+matrix-synapse:
+    env: 
+        ENCRYPTED_BY_DEFAULT: off
+        TURN_URIS: '[{{turn_url}}]'
+        RETENTION_MAX_LIFETIME: 2y
+        ALLOWED_LIFETIME_MAX: 2y
+    uncomment:
+        - POST_DEPLOY_CMDS
+        - compose.turn.yml
+        - TURN_ENABLED
+        - TURN_ALLOW_GUESTS
+        - SECRET_TURN_SHARED_SECRET_VERSION
+    secrets:
+        turn_shared_secret: "{{turn_secret}}"
+wekan:
+    uncomment:
+        - PASSWORD_LOGIN_ENABLED
+backup-bot-two:
+    uncomment:
+        - SECRET_AWS_SECRET_ACCESS_KEY_VERSION
+        - compose.s3.yml
+onlyoffice:
+    env:
+        AUTO_ASSEMBLY_ENABLED: "true"     
+outline:
+    env:
+        DEFAULT_LANGUAGE: de_DE
+hedgedoc:
+    env:
+        CMD_ALLOW_ANONYMOUS: true
+        CMD_ALLOW_ANONYMOUS_EDITS: true
+        CMD_ALLOW_FREEURL: true
+        CMD_COOKIE_POLICY: none
+traefik:
+    env:
+        DASHBOARD_ENABLED: false
+        METRICS_ENABLED: 1
+        BASIC_AUTH: 1
+    secrets:
+        usersfile: "{{basic_auth_hash}}"
+    uncomment:
+        - compose.host.yml
+        - compose.metrics.yml
+        - compose.basicauth.yml
+        - SECRET_USERSFILE_VERSION
+monitoring-ng:
+    env:
+        LOKI_PUSH_URL: "{{loki_url}}"
+    uncomment:
+        - compose.promtail.yml
+        - SECRET_BASIC_AUTH_VERSION
+    secrets:
+        basic_auth: "{{basic_auth_password}}"
--- a/alaka-smtp.yml
+++ b/alaka-smtp.yml
@ -0,0 +1,107 @@
+GLOBALS:
+    smtp_password: your_super_secret_password
+    smtp_password_urlencoded: your_super_secret_password
+    smtp_user: noreply
+    smtp_domain: example.com
+    smtp_host: mail.example.com
+authentik:
+    env:
+        AUTHENTIK_EMAIL__HOST: "{{smtp_host}}"
+        AUTHENTIK_EMAIL__USERNAME: "{{smtp_user}}@{{smtp_domain}}"
+        AUTHENTIK_EMAIL__FROM: "{{smtp_user}}@{{smtp_domain}}"
+    secrets:
+        email_pass: "{{smtp_password}}"
+nextcloud:
+    env: 
+        SMTP_AUTHTYPE: LOGIN
+        SMTP_HOST: "{{smtp_host}}"
+        SMTP_SECURE: tls
+        SMTP_NAME: "{{smtp_user}}@{{smtp_domain}}"
+        SMTP_PORT: 587
+        MAIL_FROM_ADDRESS: "{{smtp_user}}"
+        MAIL_DOMAIN: "{{smtp_domain}}"
+    uncomment:
+        - compose.smtp.yml
+        - SECRET_SMTP_PASSWORD_VERSION
+        - compose.apps.yml
+    secrets:
+        smtp_password: "{{smtp_password}}"
+wordpress:
+    env:
+        SMTP_HOST: "{{smtp_host}}"
+        MAIL_FROM: "{{smtp_user}}@{{smtp_domain}}"
+        SMTP_USER: "{{smtp_user}}@{{smtp_domain}}"
+        ADMIN_EMAIL: "{{smtp_user}}@{{smtp_domain}}"
+    uncomment:
+        - SMTP_PORT
+        - SMTP_AUTH
+        - SMTP_OVERRIDE_FROM
+        - SMTP_TLS
+        - SECRET_SMTP_PASSWORD_VERSION
+        - compose.smtp.yml
+        - compose.mailrelay.yml
+    secrets:
+        smtp_password: "{{smtp_password}}"
+vikunja:
+    env:
+        SMTP_HOST: "{{smtp_host}}"
+        SMTP_AUTHTYPE: login
+        SMTP_USER: "{{smtp_user}}"
+        SMTP_FROM_EMAIL: "{{smtp_user}}@{{smtp_domain}}"
+    uncomment:
+        - compose.smtp.yml
+        - SMTP_ENABLED
+        - SECRET_SMTP_PASSWORD_VERSION
+    secrets:
+        smtp_password: "{{smtp_password}}"
+matrix-synapse:
+    env: 
+        ADMIN_EMAIL: "{{smtp_user}}@{{smtp_domain}}"
+        SMTP_APP_NAME: mail
+        SMTP_FROM: "{{smtp_user}}@{{smtp_domain}}"
+        SMTP_HOST: "{{smtp_host}}"
+        SMTP_PORT: 587
+        SMTP_USER: "{{smtp_user}}@{{smtp_domain}}"
+    uncomment:
+        - compose.smtp.yml
+        - SMTP_ENABLED
+        - SECRET_SMTP_PASSWORD_VERSION
+    secrets:
+        smtp_password: "{{smtp_password}}"
+wekan:
+    env:
+        MAIL_URL: "smtp://{{smtp_user}}%40{{smtp_domain}}:{{smtp_password_urlencoded}}@{{smtp_host}}:587"
+        MAIL_FROM: "Wekan Notifications <{{smtp_user}}@{{smtp_domain}}>"
+outline:
+    env:
+        SMTP_HOST: "{{smtp_host}}"
+        SMTP_PORT: 465
+        SMTP_USERNAME: "{{smtp_user}}@{{smtp_domain}}"
+        SMTP_FROM_EMAIL: "{{smtp_user}}@{{smtp_domain}}"
+    uncomment:
+        - compose.smtp.yml
+        - SMTP_ENABLED
+        - SMTP_SECURE
+        - SECRET_SMTP_PASSWORD_VERSION
+    secrets:
+        smtp_password: "{{smtp_password}}"
+rallly:
+    env:
+        SUPPORT_EMAIL: "{{smtp_user}}@{{smtp_domain}}"
+        SMTP_HOST: "{{smtp_host}}"
+        SMTP_USER: "{{smtp_user}}@{{smtp_domain}}"
+    secrets:
+        smtp_pwd: "{{smtp_password}}"
+pretix:
+    env:
+        SMTP_FROM: "{{smtp_user}}@{{smtp_domain}}"
+        SMTP_HOST: "{{smtp_host}}"
+        SMTP_USER: "{{smtp_user}}@{{smtp_domain}}"
+        SMTP_PORT: 587
+        SMTP_TLS: on
+        SMTP_SSL: off
+    secrets: 
+        smtp_password: "{{smtp_password}}"
+traefik:
+    env:
+        LETS_ENCRYPT_EMAIL: "{{smtp_user}}@{{smtp_domain}}"
--- a/alaka-subdomains.yml
+++ b/alaka-subdomains.yml
@ -0,0 +1,28 @@
+authentik:
+    subdomain: login.example.com
+nextcloud:
+    subdomain: files.example.com
+wordpress:
+    subdomain: blog.example.com
+vikunja:
+    subdomain: todo.example.com
+matrix-synapse:
+    subdomain: matrix.example.com
+element-web:
+    subdomain: chat.example.com
+wekan:
+    subdomain: board.example.com
+backup-bot-two:
+    subdomain: backup.example.com
+onlyoffice:
+    subdomain: office.example.com
+outline:
+    subdomain: outline.example.com
+rallly:
+    subdomain: poll.example.com
+hedgedoc:
+    subdomain: pad.example.com
+pretix:
+    subdomain: tickets.example.com
+monitoring-ng:
+    subdomain: monitoring.example.com
--- a/alaka-versions.yml
+++ b/alaka-versions.yml
@ -0,0 +1,30 @@
+authentik:
+    version: 3.2.4+2023.6.1
+wekan:
+    version: 2.1.0+v7.30
+nextcloud:
+    version: 5.0.3+27.0.1-fpm
+onlyoffice:
+    version: 2.6.2+7.4.0
+collabora:
+    version: 2.7.1+23.05.10.1.1
+wordpress:
+    version: 2.5.2+6.3.0
+vikunja:
+    version: 0.4.0+0.22.1
+matrix-synapse:
+    version: 5.0.2+v1.93.0
+element-web:
+    version: 0.7.0+v1.11.63
+rallly:
+    version: 0.4.1+2.11.1
+hedgedoc:
+    version: 1.0.1+1.9.9
+pretix:
+    version: 1.0.0+2024.1.0
+traefik:
+    version: 2.4.3+v2.10.5
+backup-bot-two:
+    version: chaos
+monitoring-ng:
+    version: 1.1.0+v1.7.0