/
/
/
Ansible role that provisions my storage server.
1# Arr Stack Environment Configuration
2# Generated by Ansible - DO NOT EDIT MANUALLY
3
4# User and Group Configuration
5PUID={{ storage_uid }}
6PGID={{ storage_gid }}
7TZ={{ storage_timezone }}
8UMASK_SET=022
9
10# Gluetun VPN Configuration
11{% if gluetun_enabled and vpn_service_provider is defined and vpn_service_provider != "" %}
12VPN_SERVICE_PROVIDER={{ vpn_service_provider }}
13VPN_TYPE=wireguard
14SERVER_COUNTRIES={{ vpn_server_countries | default("Netherlands") }}
15SERVER_REGIONS={{ vpn_server_regions | default("Europe") }}
16
17# Wireguard VPN Credentials (from vault)
18{% if vault_storage.wireguard_private_key is defined and vault_storage.wireguard_private_key != "" %}
19WIREGUARD_PRIVATE_KEY={{ vault_storage.wireguard_private_key }}
20{% endif %}
21{% if vault_storage.wireguard_preshared_key is defined and vault_storage.wireguard_preshared_key != "" %}
22WIREGUARD_PRESHARED_KEY={{ vault_storage.wireguard_preshared_key }}
23{% endif %}
24{% if vault_storage.wireguard_addresses is defined and vault_storage.wireguard_addresses != "" %}
25WIREGUARD_ADDRESSES={{ vault_storage.wireguard_addresses }}
26{% endif %}
27
28# OpenVPN Credentials (alternative to Wireguard)
29{% if vault_storage.openvpn_user is defined and vault_storage.openvpn_user != "" %}
30OPENVPN_USER={{ vault_storage.openvpn_user }}
31{% endif %}
32{% if vault_storage.openvpn_password is defined and vault_storage.openvpn_password != "" %}
33OPENVPN_PASSWORD={{ vault_storage.openvpn_password }}
34{% endif %}
35{% endif %}
36
37# Health Check Settings
38HEALTH_VPN_DURATION_INITIAL=30s
39HEALTH_SUCCESS_WAIT_DURATION=5s
40
41# DNS Settings
42DOT=off
43BLOCK_MALICIOUS=on
44BLOCK_SURVEILLANCE=off
45BLOCK_ADS=off
46
47# Firewall Settings
48FIREWALL=on
49FIREWALL_VPN_INPUT_PORTS={{ sonarr_port }},{{ radarr_port }},{{ prowlarr_port }},{{ readarr_port }}
50
51# Service Resource Limits
52ARR_MEM_LIMIT={{ arr_memory_limit }}
53ARR_CPU_LIMIT={{ arr_cpu_limit }}
54
55# Download Paths
56DOWNLOADS_PATH={{ arr_downloads_dir }}
57MEDIA_PATH={{ storage_base_path }}/media
58
59# Service Ports (internal)
60SONARR_PORT={{ sonarr_port }}
61RADARR_PORT={{ radarr_port }}
62PROWLARR_PORT={{ prowlarr_port }}
63READARR_PORT={{ readarr_port }}