89 lines
2.2 KiB
YAML
89 lines
2.2 KiB
YAML
# Alliance Boréale - Inventaire Production
|
|
# Membre: Chezlepro Inc. (clp)
|
|
# Domaine: chezlepro.ca
|
|
# Date: 2025-10-31
|
|
# Nomenclature: v4 (CRB-2)
|
|
|
|
---
|
|
all:
|
|
children:
|
|
# ========================================
|
|
# COUCHE 2 : RÉSEAU & DNS
|
|
# ========================================
|
|
dns_servers:
|
|
hosts:
|
|
ns1.infra.chezlepro.ca:
|
|
ansible_host: 10.0.2.10
|
|
# ansible_host: <IP_PUBLIQUE> # Décommenter si accès direct
|
|
vmid: 02001
|
|
vm_name: clp-infra-dns-master-prod-01
|
|
dns_role: master
|
|
dns_zone_primary: chezlepro.ca
|
|
|
|
ns2.infra.chezlepro.ca:
|
|
ansible_host: 10.0.2.11
|
|
# ansible_host: <IP_PUBLIQUE> # Décommenter si accès direct
|
|
vmid: 02002
|
|
vm_name: clp-infra-dns-slave-prod-01
|
|
dns_role: slave
|
|
dns_zone_primary: chezlepro.ca
|
|
|
|
vars:
|
|
# Variables communes DNS
|
|
pdns_backend: pgsql
|
|
pdns_dnssec_enabled: true
|
|
pdns_api_enabled: true
|
|
pdns_webserver_enabled: true
|
|
pdns_webserver_port: 8081
|
|
|
|
# ========================================
|
|
# GROUPES LOGIQUES
|
|
# ========================================
|
|
dns_masters:
|
|
hosts:
|
|
ns1.infra.chezlepro.ca:
|
|
|
|
dns_slaves:
|
|
hosts:
|
|
ns2.infra.chezlepro.ca:
|
|
|
|
# PostgreSQL (pour PowerDNS)
|
|
postgresql_servers:
|
|
hosts:
|
|
ns1.infra.chezlepro.ca:
|
|
ns2.infra.chezlepro.ca:
|
|
|
|
# ==========================================
|
|
# VARIABLES GLOBALES
|
|
# ==========================================
|
|
vars:
|
|
# Membre
|
|
member_slug: clp
|
|
member_legal_name: "Chezlepro Inc."
|
|
member_domain: chezlepro.ca
|
|
|
|
# Réseau
|
|
network_internal_subnet: 10.0.0.0/8
|
|
network_dns_subnet: 10.0.2.0/24
|
|
|
|
# Ansible
|
|
ansible_user: ansible
|
|
ansible_become: true
|
|
ansible_python_interpreter: /usr/bin/python3
|
|
|
|
# Timezone
|
|
timezone: America/Toronto
|
|
|
|
# NTP
|
|
ntp_servers:
|
|
- 0.ca.pool.ntp.org
|
|
- 1.ca.pool.ntp.org
|
|
- 2.ca.pool.ntp.org
|
|
|
|
# SSH
|
|
ssh_port: 22
|
|
ssh_permit_root_login: false
|
|
ssh_password_authentication: false
|
|
|
|
# Sécurité
|
|
firewall_backend: nftables
|