feat: Update configuration for Nextcloud and Certbot, add image and video organization scripts

ansible/host_vars/gpu-01.lab.alexpires.me.yml

@@ -47,6 +47,7 @@ fw_allowed_ports:
   - { rule: "allow", port: "8999", proto: "tcp", from: "10.19.4.0/24" } # ComfyUI - SimpleHttpServer (local network)
   - { rule: "allow", port: "8012", proto: "tcp", from: "10.19.4.0/24" } # Qwen2 (local network)
   - { rule: "allow", port: "8012", proto: "tcp", from: "10.5.5.5/32" } # Qwen2 (Laptop)
+  - { rule: "allow", port: "9090", proto: "tcp", from: "10.19.4.0/24" } # local network
 ufw_outgoing_traffic:
   - 22 # SSH
   - 53 # DNS
@@ -95,3 +96,13 @@ comfyui_user_pubkey: "ecdsa-sha2-nistp521 AAAAE2VjZHNhLXNoYTItbmlzdHA1MjEAAAAIbm
 
 # Kokoro FastAPI settings (we don't set home because it is not expected to use a lot a disk space)
 kokoro_user_pubkey: "ecdsa-sha2-nistp521 AAAAE2VjZHNhLXNoYTItbmlzdHA1MjEAAAAIbmlzdHA1MjEAAACFBAHHOPBR9p9kq5Cqzpe4cr3jHnweaYrHPXv5sXNzt+sCXP54uc5rWUBhxW2OQVvQzJ47dEVhEKi4WSC7LcuKS2G5AQDzWXNiasHvYIYQU3F/EknVCZnsiXYqXphYkJA6rJCNRnISZCIC1mocq6PB7J08ONdRFCvjfUBuVRT8BNGXNmQ/zQ=="
+
+# Let's Encrypt / Certbot
+cloudns_auth_id: "{{ lookup('env', 'CLOUDNS_AUTH_ID') }}"
+cloudns_auth_password: "{{ lookup('env', 'CLOUDNS_PASSWORD') }}"
+cloudns_nameserver: "109.201.133.111"
+certbot_email: c.alexandre.pires@alexpires.me
+certbot_domains:
+  - "gpu-01.lab.alexpires.me"
+
+certbot_cockpit_domain: "gpu-01.lab.alexpires.me"

ansible/host_vars/vh-01.lab.alexpires.me.yml

@@ -19,6 +19,23 @@ packages_blocklist:
   - yp-tools
   - ypbind
 
+misc_modules_blocklist:
+  - bluetooth
+  - bnep
+  - btusb
+  - can
+  - cpia2
+  - firewire-core
+  - floppy
+  - ksmbd
+  - n_hdlc
+  - net-pf-31
+  - pcspkr
+  - soundcore
+  - usb-midi
+  - uvcvideo
+  - v4l2_common
+
 # Users
 login_users:
   - username: "{{ ansible_user }}"
@@ -106,7 +123,7 @@ virt_vfio_devices:
   - { dev: "0000:05:00.0", vendor: "c0a9", device: "5415" } # Micron/Crucial Technology T500 NVMe PCIe SSD
 
 virt_extra_grub_args: >
-  rd.driver.blacklist=nouveau modprobe.blacklist=nouveau ipv6.disable=1 audit=1 audit_backlog_limit=8192
+  rd.driver.blacklist=nouveau modprobe.blacklist=nouveau ipv6.disable=1 audit=1 audit_backlog_limit=8192 usbcore.autosuspend=-1
 
 virt_vfio_ids:
   - 10de:1430 # NVIDIA Corporation M2000 [Maxwell GM107GL]
@@ -142,6 +159,9 @@ virt_machines:
     mac_address: "52:54:00:cd:dd:2d"
     block_devs: []
     guest_agent: true
+    virtio_fs:
+      - source: "/mnt/usb"
+        target: "usb"
     host_devs:
       # Micron/Crucial Technology T500 NVMe PCIe SSD
       - type: "pci"
@@ -221,6 +241,9 @@ virt_machines:
     mac_address: "52:54:00:cd:dd:2e"
     block_devs: []
     guest_agent: true
+    virtio_fs:
+      - source: "/mnt/usb"
+        target: "usb"
     host_devs:
       # Micron/Crucial Technology T500 NVMe PCIe SSD
       - type: "pci"
@@ -306,8 +329,8 @@ virt_machines:
     virtio_fs:
       - source: "/mnt/srv"
         target: "srv"
-      - source: "/mnt/storage"
-        target: "storage"
+      - source: "/mnt/md0"
+        target: "md0"
     user_data: |
       #cloud-config
       hostname: dev-01
@@ -336,3 +359,4 @@ cloudns_nameserver: "109.201.133.111"
 certbot_email: c.alexandre.pires@alexpires.me
 certbot_domains:
   - "vh-01.lab.alexpires.me"
+certbot_cockpit_domain: "vh-01.lab.alexpires.me"