Sascha
bc765668a6
Nachgezogener Arbeitsstand des Homelabs: - neue host_vars (k3s-*, gluster-*, docmost, paperless, kometa, thelounge, satisfactory, wolfstack-vm) - neue Rollen/Playbooks (net_watchdog, patchmon-agent, tc_ratelimit, sops-age, rotate-ssh-key, dns-doh, remove-postfix, checkrr-deploy) - diverse Rollen-Updates (base, borg, dns_resolver, frp_client, hawser, nvidia) Ausgeklammert (bleiben uncommittet): host_vars/docmost/vars.yml (Klartext-Token -> sollte vault-konform via vault_* referenziert werden). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
16 lines
391 B
YAML
16 lines
391 B
YAML
---
|
|
- name: DNS resolver auf DoH setzen (via automation1)
|
|
copy:
|
|
content: |
|
|
nameserver 10.5.85.5
|
|
dest: /etc/resolv.conf
|
|
mode: '0644'
|
|
when: inventory_hostname != 'automation1'
|
|
|
|
- name: dnscrypt-proxy stoppen auf VMs (nicht noetig)
|
|
systemd:
|
|
name: dnscrypt-proxy
|
|
state: stopped
|
|
enabled: false
|
|
when: inventory_hostname != 'automation1'
|
|
ignore_errors: true
|