ansible rework

ansible/inventory/group_vars/all/s3.yaml

@@ -0,0 +1,39 @@
+---
+# S3 Object Storage Configuration
+# These should be overridden in vault or environment-specific vars
+
+# S3 Endpoint Configuration
+s3_region: hel1
+s3_endpoint: "https://{{ s3_region }}.your-objectstorage.com"
+
+# S3 Credentials
+# WARNING: Store these in ansible-vault encrypted file!
+# Override these in group_vars/all/vault.yaml (encrypted)
+s3_access_key: "{{ vault_s3_access_key | default('') }}"
+s3_secret_key: "{{ vault_s3_secret_key | default('') }}"
+
+# S3 Bucket names
+s3_bucket_terraform_main: asxpio-terraform-main
+s3_bucket_terraform_repl: asxpio-terraform-repl
+s3_bucket_backups_main: asxpio-backups-main
+s3_bucket_backups_repl: asxpio-backups-repl
+s3_bucket_immich_main: asxpio-immich-main
+s3_bucket_immich_repl: asxpio-immich-repl
+
+# S3 Buckets to mount on servers (non-replication only)
+s3_buckets:
+  - name: "{{ s3_bucket_terraform_main }}"
+    mount_point: /mnt/s3/terraform
+    owner: root
+    group: root
+    mode: "0755"
+  - name: "{{ s3_bucket_backups_main }}"
+    mount_point: /mnt/s3/backups
+    owner: root
+    group: root
+    mode: "0755"
+  - name: "{{ s3_bucket_immich_main }}"
+    mount_point: /mnt/s3/immich
+    owner: root
+    group: docker
+    mode: "0775"