top.sls 2.3 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143
  1. base:
  2. # Base config for all minions
  3. '*':
  4. - ffinfo
  5. - apt
  6. - bash
  7. - certs
  8. - icinga2
  9. - kernel
  10. - locales
  11. - mosh
  12. - motd
  13. - needrestart
  14. - network
  15. - ntp
  16. - postfix
  17. - rsyslog
  18. - salt-minion
  19. - screen
  20. - snmpd
  21. - ssh
  22. - sysctl
  23. - systemd
  24. - timezone
  25. - vim
  26. - unattended-upgrades
  27. - utils
  28. #
  29. # Roles
  30. #
  31. # Router
  32. nodes:{{ grains['id'] }}:roles:router:
  33. - match: pillar
  34. - bird
  35. # acme
  36. nodes:{{ grains['id'] }}:roles:acme:
  37. - match: pillar
  38. - acme
  39. # Batman node
  40. nodes:{{ grains['id'] }}:roles:batman:
  41. - match: pillar
  42. - batman
  43. - respondd
  44. # Batman gateway
  45. nodes:{{ grains['id'] }}:roles:batman_gw:
  46. - match: pillar
  47. - dhcp-server
  48. # Build-Server
  49. nodes:{{ grains['id'] }}:roles:build:
  50. - match: pillar
  51. - build
  52. # burp client/server
  53. nodes:{{ grains['id'] }}:tags:backup:
  54. - match: pillar
  55. - burp.client
  56. nodes:{{ grains['id'] }}:roles:burp.server:
  57. - match: pillar
  58. - burp.server
  59. # Fastd
  60. nodes:{{ grains['id'] }}:roles:fastd:
  61. - match: pillar
  62. - fastd
  63. # Grafana
  64. nodes:{{ grains['id'] }}:roles:grafana:
  65. - match: pillar
  66. - grafana
  67. # gogs
  68. nodes:{{ grains['id'] }}:roles:gogs:
  69. - match: pillar
  70. - gogs
  71. # graylog
  72. nodes:{{ grains['id'] }}:roles:graylog:
  73. - match: pillar
  74. - graylog
  75. # KVM hosts
  76. nodes:{{ grains['id'] }}:roles:kvm:
  77. - match: pillar
  78. - kvm
  79. # (Authoritive?) DNS server
  80. nodes:{{ grains['id'] }}:roles:dns-server:
  81. - match: pillar
  82. - dns-server
  83. # Webfrontend
  84. nodes:{{ grains['id'] }}:roles:frontend:
  85. - match: pillar
  86. - nginx
  87. # DSL / PPPoE
  88. nodes:{{ grains['id'] }}:roles:pppoe:
  89. - match: pillar
  90. - pppoe
  91. # InfluxDB
  92. nodes:{{ grains['id'] }}:roles:influxdb:
  93. - match: pillar
  94. - influxdb
  95. # webserver
  96. nodes:{{ grains['id'] }}:roles:webserver:
  97. - match: pillar
  98. - nginx
  99. # yanic
  100. nodes:{{ grains['id'] }}:roles:yanic:
  101. - match: pillar
  102. - yanic
  103. # Docker
  104. nodes:{{ grains['id'] }}:roles:docker:
  105. - match: pillar
  106. - docker
  107. # LibreNMS
  108. nodes:{{ grains['id'] }}:roles:librenms:
  109. - match: pillar
  110. - librenms
  111. #
  112. # Grains
  113. #
  114. # apu2
  115. # Disabled for now
  116. # productname:apu2:
  117. # - match: grain
  118. # - apu2
  119. # Hardware nodes
  120. 'G@virtual:physical and not G@productname:apu2':
  121. - hardware