From 51662e1dc310c438ff12d1f27e8d0758da557c27 Mon Sep 17 00:00:00 2001
From: Mark Janssen <mark@sig-io.nl>
Date: Wed, 18 Sep 2024 23:57:02 +0200
Subject: [PATCH] homeassistant vm

---
 group_vars/homeassistant.yaml | 12 ++++++++++++
 inventory                     |  4 ++++
 roles/common/tasks/vm.yaml    |  2 +-
 3 files changed, 17 insertions(+), 1 deletion(-)
 create mode 100644 group_vars/homeassistant.yaml

diff --git a/group_vars/homeassistant.yaml b/group_vars/homeassistant.yaml
new file mode 100644
index 0000000..9f5146b
--- /dev/null
+++ b/group_vars/homeassistant.yaml
@@ -0,0 +1,12 @@
+acme_bootstrap_certs: yes
+acme_san_domains:
+  - [ homeassistant.bitlair.nl ]
+
+group_nft_input:
+  - "# Allow web-traffic from world"
+  - "tcp dport { http, https } accept"
+  - "# mqtt from world"
+  - "tcp dport { 1883 } accept"
+
+nginx_sites:
+  - server_name: "homeassistant.bitlair.nl"
diff --git a/inventory b/inventory
index e66fa9a..8d835ac 100644
--- a/inventory
+++ b/inventory
@@ -43,6 +43,9 @@ wiki.bitlair.nl
 [shell]
 shell.bitlair.nl
 
+[homeassistant]
+homeassistant.bitlair.nl
+
 [debian:children]
 bank
 fotos
@@ -56,3 +59,4 @@ music
 services
 wiki
 shell
+homeassistant
diff --git a/roles/common/tasks/vm.yaml b/roles/common/tasks/vm.yaml
index e1921ec..f70850c 100644
--- a/roles/common/tasks/vm.yaml
+++ b/roles/common/tasks/vm.yaml
@@ -10,7 +10,7 @@
   ansible.builtin.lineinfile:
     path: /etc/default/grub
     regexp: ^GRUB_CMDLINE_LINUX_DEFAULT
-    line: 'GRUB_CMDLINE_LINUX_DEFAULT="quiet console=ttyS0,115200n1 console=tty0"'
+    line: 'GRUB_CMDLINE_LINUX_DEFAULT="quiet net.ifnames=0 console=ttyS0,115200n1 console=tty0"'
   notify:
     - Update grub
   tags: