Adds 4-layer inventory system as Single Source of Truth: - inventory/physical.yaml: Physical hosts (Hestia, Proxmox, TrueNAS, ER605) - inventory/proxmox.yaml: VMs and LXC containers (dockerino, media, homeassistant) - inventory/truenas.yaml: ZFS pools, disks, datasets, NFS exports - inventory/network.yaml: VLANs, subnets, DNS All files have PLACEHOLDER fields to be filled with real data using the discovery commands in inventory/README.md
79 lines
1.9 KiB
YAML
79 lines
1.9 KiB
YAML
# ===========================================
|
|
# INVENTÁRIO DE REDE
|
|
# ===========================================
|
|
# TODO: Descobrir IPs reais via:
|
|
# - ER605 Admin UI: LAN settings
|
|
# - AdGuard: 10.0.0.2 → Settings > DHCP
|
|
# ===========================================
|
|
|
|
network:
|
|
domain: "hackerfortress.cc"
|
|
gateway: "PLACEHOLDER" # IP do ER605 na VLAN1
|
|
|
|
# ===========================================
|
|
# Subnets e VLANs
|
|
# ===========================================
|
|
vlans:
|
|
1:
|
|
name: "infra"
|
|
subnet: "10.0.0.0/24"
|
|
gateway: "PLACEHOLDER"
|
|
dhcp_server: true
|
|
dhcp_range:
|
|
start: "10.0.0.100"
|
|
end: "10.0.0.200"
|
|
static_leases:
|
|
# TODO: Adicionar leases fixos已知
|
|
# "MAC_ADDRESS": "IP"
|
|
"hestia-mac": "PLACEHOLDER"
|
|
"truenas-mac": "PLACEHOLDER"
|
|
"proxmox-mac": "PLACEHOLDER"
|
|
|
|
10:
|
|
name: "geral"
|
|
subnet: "10.0.10.0/24"
|
|
gateway: "PLACEHOLDER"
|
|
dhcp_server: true
|
|
dhcp_range:
|
|
start: "10.0.10.100"
|
|
end: "10.0.10.200"
|
|
|
|
20:
|
|
name: "iot"
|
|
subnet: "10.0.20.0/24"
|
|
gateway: "PLACEHOLDER"
|
|
dhcp_server: true
|
|
dhcp_range:
|
|
start: "10.0.20.100"
|
|
end: "10.0.20.200"
|
|
|
|
30:
|
|
name: "guests"
|
|
subnet: "10.0.30.0/24"
|
|
gateway: "PLACEHOLDER"
|
|
dhcp_server: true
|
|
dhcp_range:
|
|
start: "10.0.30.100"
|
|
end: "10.0.30.200"
|
|
|
|
# ===========================================
|
|
# DNS — Services
|
|
# ===========================================
|
|
dns_services:
|
|
adguard:
|
|
ip: "10.0.0.2"
|
|
port: 53
|
|
web_ui: "http://10.0.0.2"
|
|
roles:
|
|
- dns-recursive
|
|
- dns-blocklist
|
|
|
|
# ===========================================
|
|
# Port Forwards (ER605)
|
|
# ===========================================
|
|
# TODO: ER605 Admin UI > NAT > Port Forwarding
|
|
forwarding:
|
|
# external_port: [protocol, internal_ip, internal_port, description]
|
|
#443: ["TCP", "10.0.0.50", "443", "Picsur HTTPS"]
|
|
#80: ["TCP", "10.0.0.50", "80", "Picsur HTTP"]
|