ansible: add xray_client role + playbook + [xray] inventory group

- New role: xray_client (deploys Xray VLESS+Reality client container)
- New playbook: xray-client.yml
- New inventory group: [xray] (emby-sascha, emby-chris)
- pfannkuchen.sh: new command 'xray'
- Prepared for migration from FRP to Xray tunnel
This commit is contained in:
sascha 2026-04-10 22:13:41 +02:00
parent 2650391432
commit 73281a3ac6
6 changed files with 98 additions and 17 deletions

View file

@ -12,7 +12,6 @@ ansible_user=root
[media]
emby-sascha ansible_host=10.6.1.103
jellyfin ansible_host=10.5.1.112
immich ansible_host=10.4.1.107
emby-chris ansible_host=10.7.1.106
@ -30,15 +29,24 @@ dockhand ansible_host=10.4.1.116
n8n ansible_host=10.4.1.113
openclaw ansible_host=10.4.1.100
monitoring ansible_host=10.1.1.111
# automation ansible_host=10.1.1.115 # deprecated - VM abschalten sobald bereit
automation1 ansible_host=10.5.85.5
outline ansible_host=10.1.1.100
funkwerk-ai ansible_host=10.1.1.10
[communication]
matrix ansible_host=10.4.1.110
[infrastructure]
pbs ansible_host=10.3.1.10 ansible_user=root
[83]
auris-integration ansible_host=10.5.83.151 ansible_user=fia ansible_password=kronerew ansible_become_password=kronerew base_user=fia
susi ansible_host=10.5.83.8 ansible_user=sascha ansible_password=GT500r8 ansible_become_password=GT500r8 base_user=sascha
tunnel-test ansible_host=10.6.1.99
[hetzner]
pfannkuchen ansible_host=159.69.245.190 ansible_user=root ansible_ssh_private_key_file=~/.ssh/id_ed25519
test-vps ansible_host=78.46.186.211 ansible_user=root ansible_port=22 ansible_ssh_private_key_file=~/.ssh/id_ed25519
pfannkuchen ansible_host=159.69.245.190 ansible_user=root ansible_port=2505 ansible_ssh_private_key_file=~/.ssh/id_ed25519
[nvidia]
tdarr
@ -55,7 +63,6 @@ node7
[frp]
emby-sascha
emby-chris
jellyfin
[wireguard]
node1
@ -66,12 +73,21 @@ node5
node6
node7
[hawser:children]
media
arr
docker
auto
communication
hetzner
[all:children]
media
arr
docker
auto
communication
infrastructure
hetzner
proxmox
@ -83,16 +99,10 @@ auto
communication
proxmox
hetzner
infrastructure
# Credentials liegen in group_vars/ (nicht im INI, da kein Jinja2-Support)
[kubernetes]
kube-ctrl ansible_host=10.3.1.100
kube-work1 ansible_host=10.3.1.101
kube-work2 ansible_host=10.3.1.102
[kubernetes:vars]
ansible_user=sascha
ansible_become=true
ansible_ssh_extra_args='-o StrictHostKeyChecking=no'
[xray]
emby-sascha
emby-chris