Improved AI roles

This commit is contained in:
2025-06-02 22:52:04 +02:00
parent 54f7e5536a
commit 755e14a602
12 changed files with 144 additions and 73 deletions
+7 -1
View File
@@ -31,8 +31,9 @@ sshd_max_auth_tries: 10
# Firewall ports
ufw_enable: true
fw_allowed_ports:
- { rule: "allow", port: "8000", proto: "tcp" }
- { rule: "allow", port: "22", proto: "tcp" }
- { rule: "allow", port: "8000", proto: "tcp" }
- { rule: "allow", port: "8080", proto: "tcp" }
ufw_outgoing_traffic:
- 22 # SSH
@@ -41,6 +42,7 @@ ufw_outgoing_traffic:
- 123 # NTP
- 443 # HTTPS
- 853 # DNS over TLS
- 11434 # Ollama
ufw_default_forward_policy: "ACCEPT"
@@ -73,3 +75,7 @@ unattended_reboot_time: "04:30"
# Duo Security
duo_users: ["*", "!provision"]
duo_api_hostname: api-7cda1654.duosecurity.com
# podman services settings
open_webui_home: "/srv/open-webui"
mcp_home: "/srv/mcp"
+3 -7
View File
@@ -35,7 +35,6 @@ packages_blocklist: []
ufw_enable: true
fw_allowed_ports:
- { rule: "allow", port: "22", proto: "tcp" }
- { rule: "allow", port: "8080", proto: "tcp" }
- { rule: "allow", port: "11434", proto: "tcp" }
ufw_outgoing_traffic:
@@ -45,7 +44,6 @@ ufw_outgoing_traffic:
- 123 # NTP
- 443 # HTTPS
- 853 # DNS over TLS
- 8000
ufw_default_forward_policy: "ACCEPT"
@@ -71,8 +69,6 @@ unattended_reboot_time: "04:30"
duo_users: ["*", "!provision"]
duo_api_hostname: api-7cda1654.duosecurity.com
# open_web_ui settings
open_webui_home: "/mnt/data/ai"
open_webui_network_name: "ai-network"
open_webui_user: "ai"
open_webui_group: "ai"
# podman services settings
ollama_home: "/mnt/data/ollama"
kokora_home: "/mnt/data/kokoro"