let's try actually using hiera

4 files changed, 23 insertions, 4 deletions

diff --git a/hiera/data/common.yaml b/hiera/data/common.yaml
index d9e1a25..fe19671 100644
--- a/hiera/data/common.yaml
+++ b/hiera/data/common.yaml
@@ -1,2 +1,11 @@
 ---
-{}
+default_user: doy
+vpn_ips:
+  hornet: '10.49.0.2'
+  mail: '10.49.0.3'
+  partofme: '10.49.0.4'
+  phone: '10.49.0.5'
+  tozt: '10.49.0.6'
+
+# when updating this value, also rm /opt/metabase/metabase.jar
+metabase::version: 'v0.45.3'
\ No newline at end of file
diff --git a/hiera/data/node/mail.yaml b/hiera/data/node/mail.yaml
index d9e1a25..9267209 100644
--- a/hiera/data/node/mail.yaml
+++ b/hiera/data/node/mail.yaml
@@ -1,2 +1,4 @@
 ---
-{}
+persistent_data: '/media/persistent'
+base::extra_script: |
+  (cd /media/persistent && sudo docker-compose pull -q)
\ No newline at end of file
diff --git a/hiera/data/node/partofme.yaml b/hiera/data/node/partofme.yaml
index d9e1a25..fed4580 100644
--- a/hiera/data/node/partofme.yaml
+++ b/hiera/data/node/partofme.yaml
@@ -1,2 +1,7 @@
 ---
-{}
+# we don't want to store anything system-related on the persistent disk,
+# since we want it to be encrypted, and we can't really access it at boot
+# time to type in a password
+# persistent_data:
+base::extra_script: |
+  (sudo podman pull docker.io/pihole/pihole)
diff --git a/hiera/data/node/tozt.yaml b/hiera/data/node/tozt.yaml
index d9e1a25..c03fa5b 100644
--- a/hiera/data/node/tozt.yaml
+++ b/hiera/data/node/tozt.yaml
@@ -1,2 +1,5 @@
 ---
-{}
+persistent_data: '/media/persistent'
+base::extra_script: |
+  (cd /home/doy/coding/metabase-utils && git pull)
+  (sudo podman pull docker.io/vaultwarden/server)