netcup VPS: Inventory-Eintrag + sysctl-Override (BBR/fq, ohne VM-Werte)

- [vps]-Gruppe mit netcup (194.13.80.132) ins Inventory, in [all:children]
- sysctl-Rolle: Loop auf Variable sysctl_params umgestellt (defaults/main.yml)
- group_vars/vps: VPS-Override (fq ergaenzt, swappiness/dirty_ratio weggelassen)
- .gitignore: id_ed25519 (privater Key!) + iso-builder/output ergaenzt

Entspricht dem live gesetzten /etc/sysctl.d/99-net-tuning.conf (15.06.2026).
Dry-run gegen netcup: changed=0 (idempotent), andere Hosts unveraendert.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
Sascha 2026-06-15 21:23:29 +02:00 committed by sascha
parent e8a521da09
commit d857b72cf8
5 changed files with 91 additions and 49 deletions

View file

@ -10,6 +10,16 @@ node7 ansible_host=10.5.85.17
[proxmox:vars]
ansible_user=root
[infrastructure]
# Infrastructure hosts (placeholder for backup:children)
node1
node2
node3
node4
node5
node6
node7
[media]
emby-sascha ansible_host=10.6.1.103
immich ansible_host=10.4.1.107
@ -27,26 +37,26 @@ dockhand ansible_host=10.4.1.116
[auto]
n8n ansible_host=10.4.1.113
openclaw ansible_host=10.4.1.100
hermes ansible_host=10.4.1.100
monitoring ansible_host=10.1.1.111
automation1 ansible_host=10.5.85.5
outline ansible_host=10.1.1.100
funkwerk-ai ansible_host=10.1.1.10
k3s-control ansible_host=10.3.1.110
k3s-worker2 ansible_host=10.3.1.112
k3s-worker3 ansible_host=10.3.1.113
k3s-worker1 ansible_host=10.3.1.111
satisfactory ansible_host=10.3.1.120
wolfstack-vm ansible_host=10.1.1.110
[communication]
matrix ansible_host=10.4.1.110
[infrastructure]
pbs ansible_host=10.3.1.10 ansible_user=root
[83]
auris-integration ansible_host=10.5.83.151 ansible_user=fia ansible_password=kronerew ansible_become_password=kronerew base_user=fia
susi ansible_host=10.5.83.8 ansible_user=sascha ansible_password=GT500r8 ansible_become_password=GT500r8 base_user=sascha
tunnel-test ansible_host=10.6.1.99
[hetzner]
test-vps ansible_host=78.46.186.211 ansible_user=root ansible_port=22 ansible_ssh_private_key_file=~/.ssh/id_ed25519
pfannkuchen ansible_host=159.69.245.190 ansible_user=root ansible_port=2505 ansible_ssh_private_key_file=~/.ssh/id_ed25519
pfannkuchen ansible_host=159.69.245.190 ansible_user=root ansible_port=2505
[vps]
# netcup VPS (Nuernberg) - WireGuard-Hub + Caddy Reverse Proxy, seit 13.06.2026
netcup ansible_host=194.13.80.132 ansible_user=root
[nvidia]
tdarr
@ -60,10 +70,6 @@ node4
node6
node7
[frp]
emby-sascha
emby-chris
[wireguard]
node1
node2
@ -73,14 +79,6 @@ node5
node6
node7
[hawser:children]
media
arr
docker
auto
communication
hetzner
[all:children]
media
arr
@ -90,6 +88,7 @@ communication
infrastructure
hetzner
proxmox
vps
[backup:children]
media
@ -103,6 +102,12 @@ infrastructure
# Credentials liegen in group_vars/ (nicht im INI, da kein Jinja2-Support)
[xray]
emby-sascha
emby-chris
[hawser:children]
media
arr
docker
auto
communication
hetzner