Files
infra/ansible/.env.example
T
DmitryandClaude Opus 5 c676be81ec Capture current Ansible control plane state
Commit the accumulated infrastructure work that was living only in the
working tree: monitoring stack, emergency access/bot, gyro allocator,
grimmory, adguard, backup audit and the OpenCode agent definitions.

Also ignore Python bytecode, local archives and Nix/direnv artifacts.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GTocXkGUUazHdKKd3r9k71
2026-08-26 21:39:28 +03:00

26 lines
1.2 KiB
Bash

export PROXMOX_HOST=192.168.1.10
export PROXMOX_USER='ansible@pve'
export PROXMOX_TOKEN_ID='homelab'
export PROXMOX_TOKEN_SECRET='replace-me'
export PROXMOX_VALIDATE_CERTS=false
# Optional local SSH-forward port when the control node reaches PVE through ru-vps.
# export PROXMOX_PORT=18006
# Override if the downloaded template name differs.
export PVE_LXC_OSTEMPLATE='local:vztmpl/debian-13-standard_13.1-2_amd64.tar.zst'
# Monitoring secrets. Keep actual values in ignored ansible/.env or Ansible Vault.
export MONITORING_TELEGRAM_BOT_TOKEN='replace-me'
export MONITORING_TELEGRAM_CHAT_ID='replace-me'
export MONITORING_GRAFANA_ADMIN_PASSWORD='replace-me'
export MONITORING_PVE_API_USER='monitoring@pve'
export MONITORING_PVE_API_TOKEN_ID='prometheus'
export MONITORING_PVE_API_TOKEN_SECRET='replace-me'
# Emergency reverse SSH Telegram bot. Keep actual values in ignored ansible/.env
# or Ansible Vault. Host keys are pinned public keys in the form "ssh-ed25519 AAAA...".
export EMERGENCY_BOT_TOKEN='replace-me'
export EMERGENCY_ALLOWED_USER_IDS='replace-me'
export EMERGENCY_VPS_HOST_KEY='ssh-ed25519 replace-me'
export EMERGENCY_MINI_PC_HOST_KEY='ssh-ed25519 replace-me'