Clean repository: organized structure and GitOps setup

- Organized root directory structure - Moved orphan files to proper locations - Updated .gitignore to ignore temporary files - Set up Gitea Runner for GitOps automation - Fixed Tailscale access issues - Added workflow for automated Nomad deployment
2025-10-09 06:13:45 +00:00
commit 89ee6f7967
306 changed files with 30781 additions and 0 deletions
--- a/deployment/ansible/inventories/production/README-csol-consul-nodes.md
+++ b/deployment/ansible/inventories/production/README-csol-consul-nodes.md
@@ -0,0 +1,108 @@
+# CSOL Consul 静态节点配置说明
+
+## 概述
+
+本目录包含CSOL（Cloud Service Operations Layer）的Consul静态节点配置文件。这些配置文件定义了Consul集群的服务器和客户端节点信息，便于团队成员快速了解和使用Consul集群。
+
+## 配置文件说明
+
+### 1. csol-consul-nodes.ini
+这是主要的Consul节点配置文件，包含所有服务器和客户端节点的详细信息。
+
+**文件结构：**
+- `[consul_servers]` - Consul服务器节点（7个节点）
+- `[consul_clients]` - Consul客户端节点（2个节点）
+- `[consul_cluster:children]` - 集群所有节点的组合
+- `[consul_servers:vars]` - 服务器节点的通用配置
+- `[consul_clients:vars]` - 客户端节点的通用配置
+- `[consul_cluster:vars]` - 整个集群的通用配置
+
+**使用方法：**
+```bash
+# 使用此配置文件运行Ansible Playbook
+ansible-playbook -i csol-consul-nodes.ini your-playbook.yml
+```
+
+### 2. csol-consul-nodes.json
+这是JSON格式的Consul节点配置文件，便于程序读取和处理。
+
+**文件结构：**
+- `servers` - 服务器节点列表
+- `clients` - 客户端节点列表
+- `configuration` - 集群配置信息
+- `notes` - 节点统计和备注信息
+
+**使用方法：**
+```bash
+# 使用jq工具查询JSON文件
+jq '.csol_consul_nodes.servers.nodes[].name' csol-consul-nodes.json
+
+# 使用Python脚本处理JSON文件
+python3 -c "import json; data=json.load(open('csol-consul-nodes.json')); print(data['csol_consul_nodes']['servers']['nodes'])"
+```
+
+### 3. consul-nodes.ini
+这是更新的Consul节点配置文件，替代了原有的旧版本。
+
+### 4. consul-cluster.ini
+这是Consul集群服务器节点的配置文件，主要用于集群部署和管理。
+
+## 节点列表
+
+### 服务器节点（7个）
+
+| 节点名称 | IP地址 | 区域 | 角色 |
+|---------|--------|------|------|
+| ch2 | 100.90.159.68 | Oracle Cloud KR | 服务器 |
+| ch3 | 100.86.141.112 | Oracle Cloud KR | 服务器 |
+| ash1d | 100.81.26.3 | Oracle Cloud US | 服务器 |
+| ash2e | 100.103.147.94 | Oracle Cloud US | 服务器 |
+| onecloud1 | 100.98.209.50 | Armbian | 服务器 |
+| de | 100.120.225.29 | Armbian | 服务器 |
+| bj-semaphore | 100.116.158.95 | Semaphore | 服务器 |
+
+### 客户端节点（2个）
+
+| 节点名称 | IP地址 | 端口 | 区域 | 角色 |
+|---------|--------|------|------|------|
+| master | 100.117.106.136 | 60022 | Oracle Cloud A1 | 客户端 |
+| ash3c | 100.116.80.94 | - | Oracle Cloud A1 | 客户端 |
+
+## 配置参数
+
+### 通用配置
+- `consul_version`: 1.21.5
+- `datacenter`: dc1
+- `encrypt_key`: 1EvGItLOB8nuHnSA0o+rO0zXzLeJl+U+Jfvuw0+H848=
+- `client_addr`: 0.0.0.0
+- `data_dir`: /opt/consul/data
+- `config_dir`: /etc/consul.d
+- `log_level`: INFO
+- `port`: 8500
+
+### 服务器特定配置
+- `consul_server`: true
+- `bootstrap_expect`: 7
+- `ui_config`: true
+
+### 客户端特定配置
+- `consul_server`: false
+
+## 注意事项
+
+1. **退役节点**：hcs节点已于2025-09-27退役，不再包含在配置中。
+2. **故障节点**：syd节点为故障节点，已隔离，不包含在配置中。
+3. **端口配置**：master节点使用60022端口，其他节点使用默认SSH端口。
+4. **认证信息**：所有节点使用统一的认证信息（用户名：ben，密码：3131）。
+5. **bootstrap_expect**：设置为7，表示期望有7个服务器节点形成集群。
+
+## 更新日志
+
+- 2025-06-17：初始版本，包含完整的CSOL Consul节点配置。
+
+## 维护说明
+
+1. 添加新节点时，请同时更新所有配置文件。
+2. 节点退役或故障时，请及时从配置中移除并更新说明。
+3. 定期验证节点可达性和配置正确性。
+4. 更新配置后，请同步更新此README文件。
--- a/deployment/ansible/inventories/production/consul-cluster.ini
+++ b/deployment/ansible/inventories/production/consul-cluster.ini
@@ -0,0 +1,47 @@
+# CSOL Consul 集群 Inventory - 更新时间: 2025-06-17
+# 此文件包含所有CSOL的Consul服务器节点信息
+
+[consul_servers]
+# Oracle Cloud 韩国区域 (KR)
+ch2 ansible_host=100.90.159.68 ansible_user=ben ansible_password=3131 ansible_become_password=3131
+ch3 ansible_host=100.86.141.112 ansible_user=ben ansible_password=3131 ansible_become_password=3131
+
+# Oracle Cloud 美国区域 (US)
+ash1d ansible_host=100.81.26.3 ansible_user=ben ansible_password=3131 ansible_become_password=3131
+ash2e ansible_host=100.103.147.94 ansible_user=ben ansible_password=3131 ansible_become_password=3131
+
+# Armbian 节点
+onecloud1 ansible_host=100.98.209.50 ansible_user=ben ansible_password=3131 ansible_become_password=3131
+de ansible_host=100.120.225.29 ansible_user=ben ansible_password=3131 ansible_become_password=3131
+
+# Semaphore 节点
+bj-semaphore ansible_host=100.116.158.95 ansible_user=root
+
+[consul_cluster:children]
+consul_servers
+
+[consul_servers:vars]
+# Consul服务器配置
+ansible_ssh_common_args='-o StrictHostKeyChecking=no'
+consul_version=1.21.5
+consul_datacenter=dc1
+consul_encrypt_key=1EvGItLOB8nuHnSA0o+rO0zXzLeJl+U+Jfvuw0+H848=
+consul_bootstrap_expect=7
+consul_server=true
+consul_ui_config=true
+consul_client_addr=0.0.0.0
+consul_bind_addr="{{ ansible_default_ipv4.address }}"
+consul_data_dir=/opt/consul/data
+consul_config_dir=/etc/consul.d
+consul_log_level=INFO
+consul_port=8500
+
+# === 节点说明 ===
+# 服务器节点 (7个):
+#   - Oracle Cloud KR: ch2, ch3
+#   - Oracle Cloud US: ash1d, ash2e
+#   - Armbian: onecloud1, de
+#   - Semaphore: bj-semaphore
+#
+# 注意: hcs节点已退役 (2025-09-27)
+# 注意: syd节点为故障节点，已隔离
--- a/deployment/ansible/inventories/production/consul-nodes.ini
+++ b/deployment/ansible/inventories/production/consul-nodes.ini
@@ -0,0 +1,65 @@
+# CSOL Consul 静态节点配置
+# 更新时间: 2025-06-17 (基于实际Consul集群信息更新)
+# 此文件包含所有CSOL的服务器和客户端节点信息
+
+[consul_servers]
+# 主要服务器节点 (全部为服务器模式)
+master ansible_host=100.117.106.136 ansible_user=ben ansible_password=3131 ansible_become_password=3131 ansible_port=60022
+ash3c ansible_host=100.116.80.94 ansible_user=ben ansible_password=3131 ansible_become_password=3131
+warden ansible_host=100.122.197.112 ansible_user=ben ansible_password=3131 ansible_become_password=3131
+
+[consul_clients]
+# 客户端节点
+bj-warden ansible_host=100.122.197.112 ansible_user=ben ansible_password=3131 ansible_become_password=3131
+bj-hcp2 ansible_host=100.116.112.45 ansible_user=root ansible_password=313131 ansible_become_password=313131
+bj-influxdb ansible_host=100.100.7.4 ansible_user=root ansible_password=313131 ansible_become_password=313131
+bj-hcp1 ansible_host=100.97.62.111 ansible_user=root ansible_password=313131 ansible_become_password=313131
+
+[consul_cluster:children]
+consul_servers
+consul_clients
+
+[consul_servers:vars]
+# Consul服务器配置
+consul_server=true
+consul_bootstrap_expect=3
+consul_datacenter=dc1
+consul_encrypt_key=1EvGItLOB8nuHnSA0o+rO0zXzLeJl+U+Jfvuw0+H848=
+consul_client_addr=0.0.0.0
+consul_bind_addr="{{ ansible_default_ipv4.address }}"
+consul_data_dir=/opt/consul/data
+consul_config_dir=/etc/consul.d
+consul_log_level=INFO
+consul_port=8500
+consul_ui_config=true
+
+[consul_clients:vars]
+# Consul客户端配置
+consul_server=false
+consul_datacenter=dc1
+consul_encrypt_key=1EvGItLOB8nuHnSA0o+rO0zXzLeJl+U+Jfvuw0+H848=
+consul_client_addr=0.0.0.0
+consul_bind_addr="{{ ansible_default_ipv4.address }}"
+consul_data_dir=/opt/consul/data
+consul_config_dir=/etc/consul.d
+consul_log_level=INFO
+
+[consul_cluster:vars]
+# 通用配置
+ansible_ssh_common_args='-o StrictHostKeyChecking=no'
+ansible_ssh_private_key_file=~/.ssh/id_ed25519
+consul_version=1.21.5
+
+# === 节点说明 ===
+# 服务器节点 (3个):
+#   - bj-semaphore: 100.116.158.95 (主要服务器节点)
+#   - kr-master: 100.117.106.136 (韩国主节点)
+#   - us-ash3c: 100.116.80.94 (美国服务器节点)
+#
+# 客户端节点 (4个):
+#   - bj-warden: 100.122.197.112 (北京客户端节点)
+#   - bj-hcp2: 100.116.112.45 (北京HCP客户端节点2)
+#   - bj-influxdb: 100.100.7.4 (北京InfluxDB客户端节点)
+#   - bj-hcp1: 100.97.62.111 (北京HCP客户端节点1)
+#
+# 注意: 此配置基于实际Consul集群信息更新，包含3个服务器节点
--- a/deployment/ansible/inventories/production/csol-consul-nodes.ini
+++ b/deployment/ansible/inventories/production/csol-consul-nodes.ini
@@ -0,0 +1,44 @@
+# Consul 静态节点配置
+# 此文件包含所有CSOL的服务器和客户端节点信息
+# 更新时间: 2025-06-17 (基于实际Consul集群信息更新)
+
+# === CSOL 服务器节点 ===
+# 这些节点运行Consul服务器模式，参与集群决策和数据存储
+
+[consul_servers]
+# 主要服务器节点 (全部为服务器模式)
+master ansible_host=100.117.106.136 ansible_user=ben ansible_password=3131 ansible_become_password=3131 ansible_port=60022
+ash3c ansible_host=100.116.80.94 ansible_user=ben ansible_password=3131 ansible_become_password=3131
+warden ansible_host=100.122.197.112 ansible_user=ben ansible_password=3131 ansible_become_password=3131
+
+# === 节点分组 ===
+
+[consul_cluster:children]
+consul_servers
+
+[consul_servers:vars]
+# Consul服务器配置
+consul_server=true
+consul_bootstrap_expect=3
+consul_datacenter=dc1
+consul_encrypt_key=1EvGItLOB8nuHnSA0o+rO0zXzLeJl+U+Jfvuw0+H848=
+consul_client_addr=0.0.0.0
+consul_bind_addr="{{ ansible_default_ipv4.address }}"
+consul_data_dir=/opt/consul/data
+consul_config_dir=/etc/consul.d
+consul_log_level=INFO
+consul_port=8500
+consul_ui_config=true
+
+[consul_cluster:vars]
+# 通用配置
+ansible_ssh_common_args='-o StrictHostKeyChecking=no'
+consul_version=1.21.5
+
+# === 节点说明 ===
+# 服务器节点 (3个):
+#   - master: 100.117.106.136 (韩国主节点)
+#   - ash3c: 100.116.80.94 (美国服务器节点)
+#   - warden: 100.122.197.112 (北京服务器节点，当前集群leader)
+#
+# 注意: 此配置基于实际Consul集群信息更新，所有节点均为服务器模式
--- a/deployment/ansible/inventories/production/csol-consul-nodes.json
+++ b/deployment/ansible/inventories/production/csol-consul-nodes.json
@@ -0,0 +1,126 @@
+{
+  "csol_consul_nodes": {
+    "updated_at": "2025-06-17",
+    "description": "CSOL Consul静态节点配置",
+    "servers": {
+      "description": "Consul服务器节点，参与集群决策和数据存储",
+      "nodes": [
+        {
+          "name": "ch2",
+          "host": "100.90.159.68",
+          "user": "ben",
+          "password": "3131",
+          "become_password": "3131",
+          "region": "Oracle Cloud KR",
+          "role": "server"
+        },
+        {
+          "name": "ch3",
+          "host": "100.86.141.112",
+          "user": "ben",
+          "password": "3131",
+          "become_password": "3131",
+          "region": "Oracle Cloud KR",
+          "role": "server"
+        },
+        {
+          "name": "ash1d",
+          "host": "100.81.26.3",
+          "user": "ben",
+          "password": "3131",
+          "become_password": "3131",
+          "region": "Oracle Cloud US",
+          "role": "server"
+        },
+        {
+          "name": "ash2e",
+          "host": "100.103.147.94",
+          "user": "ben",
+          "password": "3131",
+          "become_password": "3131",
+          "region": "Oracle Cloud US",
+          "role": "server"
+        },
+        {
+          "name": "onecloud1",
+          "host": "100.98.209.50",
+          "user": "ben",
+          "password": "3131",
+          "become_password": "3131",
+          "region": "Armbian",
+          "role": "server"
+        },
+        {
+          "name": "de",
+          "host": "100.120.225.29",
+          "user": "ben",
+          "password": "3131",
+          "become_password": "3131",
+          "region": "Armbian",
+          "role": "server"
+        },
+        {
+          "name": "bj-semaphore",
+          "host": "100.116.158.95",
+          "user": "root",
+          "region": "Semaphore",
+          "role": "server"
+        }
+      ]
+    },
+    "clients": {
+      "description": "Consul客户端节点，用于服务发现和健康检查",
+      "nodes": [
+        {
+          "name": "ch4",
+          "host": "100.117.106.136",
+          "user": "ben",
+          "password": "3131",
+          "become_password": "3131",
+          "port": 60022,
+          "region": "Oracle Cloud A1",
+          "role": "client"
+        },
+        {
+          "name": "ash3c",
+          "host": "100.116.80.94",
+          "user": "ben",
+          "password": "3131",
+          "become_password": "3131",
+          "region": "Oracle Cloud A1",
+          "role": "client"
+        }
+      ]
+    },
+    "configuration": {
+      "consul_version": "1.21.5",
+      "datacenter": "dc1",
+      "encrypt_key": "1EvGItLOB8nuHnSA0o+rO0zXzLeJl+U+Jfvuw0+H848=",
+      "client_addr": "0.0.0.0",
+      "data_dir": "/opt/consul/data",
+      "config_dir": "/etc/consul.d",
+      "log_level": "INFO",
+      "port": 8500,
+      "bootstrap_expect": 7,
+      "ui_config": true
+    },
+    "notes": {
+      "server_count": 7,
+      "client_count": 2,
+      "total_nodes": 9,
+      "retired_nodes": [
+        {
+          "name": "hcs",
+          "retired_date": "2025-09-27",
+          "reason": "节点退役"
+        }
+      ],
+      "isolated_nodes": [
+        {
+          "name": "syd",
+          "reason": "故障节点，已隔离"
+        }
+      ]
+    }
+  }
+}
--- a/deployment/ansible/inventories/production/group_vars/all.yml
+++ b/deployment/ansible/inventories/production/group_vars/all.yml
@@ -0,0 +1,20 @@
+# Nomad 集群全局配置
+# InfluxDB 2.x + Grafana 监控配置
+
+# InfluxDB 2.x 连接配置
+influxdb_url: "http://influxdb1.tailnet-68f9.ts.net:8086"
+influxdb_token: "VU_dOCVZzqEHb9jSFsDe0bJlEBaVbiG4LqfoczlnmcbfrbmklSt904HJPL4idYGvVi0c2eHkYDi2zCTni7Ay4w=="
+influxdb_org: "seekkey"                     # 组织名称
+influxdb_bucket: "VPS"        # Bucket 名称
+
+# 远程 Telegraf 配置 URL
+telegraf_config_url: "http://influxdb1.tailnet-68f9.ts.net:8086/api/v2/telegrafs/0f8a73496790c000"
+
+# 监控配置
+disk_usage_warning: 80               # 硬盘使用率警告阈值
+disk_usage_critical: 90              # 硬盘使用率严重告警阈值
+collection_interval: 30              # 数据收集间隔（秒）
+
+# Telegraf 优化配置
+telegraf_log_level: "ERROR"          # 只记录错误日志
+telegraf_disable_local_logs: true    # 禁用本地日志文件
--- a/deployment/ansible/inventories/production/hosts
+++ b/deployment/ansible/inventories/production/hosts
@@ -0,0 +1,37 @@
+[nomad_servers]
+# 服务器节点 (7个服务器节点)
+# ⚠️  警告：能力越大，责任越大！服务器节点操作需极其谨慎！
+# ⚠️  任何对服务器节点的操作都可能影响整个集群的稳定性！
+semaphore ansible_host=127.0.0.1 ansible_user=root ansible_password=3131 ansible_become_password=3131 ansible_ssh_common_args="-o PreferredAuthentications=password -o PubkeyAuthentication=no"
+ash1d ansible_host=ash1d.tailnet-68f9.ts.net ansible_user=ben ansible_password=3131 ansible_become_password=3131
+ash2e ansible_host=ash2e.tailnet-68f9.ts.net ansible_user=ben ansible_password=3131 ansible_become_password=3131
+ch2 ansible_host=ch2.tailnet-68f9.ts.net ansible_user=ben ansible_password=3131 ansible_become_password=3131
+ch3 ansible_host=ch3.tailnet-68f9.ts.net ansible_user=ben ansible_password=3131 ansible_become_password=3131
+onecloud1 ansible_host=onecloud1.tailnet-68f9.ts.net ansible_user=ben ansible_password=3131 ansible_become_password=3131
+de ansible_host=de.tailnet-68f9.ts.net ansible_user=ben ansible_password=3131 ansible_become_password=3131
+hcp1 ansible_host=hcp1.tailnet-68f9.ts.net ansible_user=root ansible_password=3131 ansible_become_password=3131
+
+[nomad_clients]
+# 客户端节点 (5个客户端节点)
+ch4 ansible_host=ch4.tailnet-68f9.ts.net ansible_user=ben ansible_password=3131 ansible_become_password=3131
+ash3c ansible_host=ash3c.tailnet-68f9.ts.net ansible_user=ben ansible_password=3131 ansible_become_password=3131
+browser ansible_host=browser.tailnet-68f9.ts.net ansible_user=ben ansible_password=3131 ansible_become_password=3131
+influxdb1 ansible_host=influxdb1.tailnet-68f9.ts.net ansible_user=ben ansible_password=3131 ansible_become_password=3131
+warden ansible_host=warden.tailnet-68f9.ts.net ansible_user=ben ansible_password=3131 ansible_become_password=3131
+
+[nomad_nodes:children]
+nomad_servers
+nomad_clients
+
+[nomad_nodes:vars]
+# NFS配置
+nfs_server=snail
+nfs_share=/fs/1000/nfs/Fnsync
+mount_point=/mnt/fnsync
+
+# Ansible配置
+ansible_ssh_common_args='-o StrictHostKeyChecking=no'
+gitea ansible_host=gitea ansible_user=ben ansible_password=3131 ansible_become_password=3131
+
+[gitea]
+gitea ansible_host=gitea ansible_user=ben ansible_password=3131 ansible_become_password=3131
--- a/deployment/ansible/inventories/production/inventory.ini
+++ b/deployment/ansible/inventories/production/inventory.ini
@@ -0,0 +1,98 @@
+[dev]
+dev1 ansible_host=dev1 ansible_user=ben ansible_become=yes ansible_become_pass=3131
+dev2 ansible_host=dev2 ansible_user=ben ansible_become=yes ansible_become_pass=3131
+
+[oci_kr]
+#ch2 ansible_host=ch2 ansible_user=ben ansible_become=yes ansible_become_pass=3131  # 过期节点，已移除 (2025-09-30)
+#ch3 ansible_host=ch3 ansible_user=ben ansible_become=yes ansible_become_pass=3131  # 过期节点，已移除 (2025-09-30)
+
+[oci_us]
+ash1d ansible_host=ash1d ansible_user=ben ansible_become=yes ansible_become_pass=3131
+ash2e ansible_host=ash2e ansible_user=ben ansible_become=yes ansible_become_pass=3131
+
+[oci_a1]
+ch4 ansible_host=ch4 ansible_user=ben ansible_become=yes ansible_become_pass=3131
+ash3c ansible_host=ash3c ansible_user=ben ansible_become=yes ansible_become_pass=3131
+
+
+[huawei]
+# hcs 节点已退役 (2025-09-27)
+[google]
+benwork ansible_host=benwork ansible_user=ben ansible_become=yes ansible_become_pass=3131
+
+[ditigalocean]
+# syd ansible_host=syd ansible_user=ben ansible_become=yes ansible_become_pass=3131  # 故障节点，已隔离
+
+[faulty_cloud_servers]
+# 故障的云服务器节点，需要通过 OpenTofu 和 Consul 解决
+# hcs 节点已退役 (2025-09-27)
+syd ansible_host=syd ansible_user=ben ansible_become=yes ansible_become_pass=3131
+
+[aws]
+#aws linux dnf
+awsirish ansible_host=awsirish ansible_user=ben ansible_become=yes ansible_become_pass=3131
+
+[proxmox]
+pve ansible_host=pve ansible_user=root ansible_become=yes ansible_become_pass=Aa313131@ben
+xgp ansible_host=xgp ansible_user=root ansible_become=yes ansible_become_pass=Aa313131@ben
+nuc12 ansible_host=nuc12 ansible_user=root ansible_become=yes ansible_become_pass=Aa313131@ben
+
+[lxc]
+#集中在三台机器，不要同时upgrade 会死掉，顺序调度来 (Debian/Ubuntu containers using apt)
+gitea ansible_host=gitea.tailnet-68f9.ts.net ansible_user=ben ansible_ssh_private_key_file=/root/.ssh/gitea ansible_become=yes ansible_become_pass=3131
+mysql ansible_host=mysql ansible_user=root ansible_become=yes ansible_become_pass=313131
+postgresql ansible_host=postgresql ansible_user=root ansible_become=yes ansible_become_pass=313131
+
+[nomadlxc]
+influxdb ansible_host=influxdb1 ansible_user=root ansible_become=yes ansible_become_pass=313131
+warden ansible_host=warden ansible_user=ben ansible_become=yes ansible_become_pass=3131
+[semaphore]
+#semaphoressh ansible_host=localhost ansible_user=root ansible_become=yes ansible_become_pass=313131 ansible_ssh_pass=313131  # 过期节点，已移除 (2025-09-30)
+
+[alpine]
+#Alpine Linux containers using apk package manager
+redis ansible_host=redis ansible_user=root ansible_become=yes ansible_become_pass=313131
+authentik ansible_host=authentik ansible_user=root ansible_become=yes ansible_become_pass=313131
+calibreweb ansible_host=calibreweb ansible_user=root ansible_become=yes ansible_become_pass=313131
+qdrant ansible_host=qdrant ansible_user=root ansible_become=yes
+
+[vm]
+kali ansible_host=kali ansible_user=ben ansible_become=yes ansible_become_pass=3131
+
+[hcp]
+hcp1 ansible_host=hcp1 ansible_user=root ansible_become=yes ansible_become_pass=313131
+hcp2 ansible_host=hcp2 ansible_user=root ansible_become=yes ansible_become_pass=313131
+
+[feiniu]
+snail ansible_host=snail ansible_user=houzhongxu ansible_ssh_pass=Aa313131@ben ansible_become=yes ansible_become_pass=Aa313131@ben
+
+[armbian]
+onecloud1 ansible_host=100.98.209.50 ansible_user=ben ansible_password=3131 ansible_become_password=3131
+de ansible_host=100.120.225.29 ansible_user=ben ansible_password=3131 ansible_become_password=3131
+
+[beijing:children]
+nomadlxc
+hcp
+
+[all:vars]
+ansible_ssh_common_args='-o StrictHostKeyChecking=no'
+
+[nomad_clients:children]
+nomadlxc
+hcp
+oci_a1
+huawei
+ditigalocean
+[nomad_servers:children]
+oci_us
+oci_kr
+semaphore
+armbian
+
+[nomad_cluster:children]
+nomad_servers
+nomad_clients
+
+[beijing:children]
+nomadlxc
+hcp
--- a/deployment/ansible/inventories/production/master-ash3c.ini
+++ b/deployment/ansible/inventories/production/master-ash3c.ini
@@ -0,0 +1,7 @@
+[target_nodes]
+master ansible_host=100.117.106.136 ansible_port=60022 ansible_user=ben ansible_become=yes ansible_become_pass=3131
+ash3c ansible_host=100.116.80.94 ansible_user=ben ansible_become=yes ansible_become_pass=3131
+semaphore ansible_host=100.116.158.95 ansible_user=ben ansible_become=yes ansible_become_pass=3131
+
+[target_nodes:vars]
+ansible_ssh_common_args='-o StrictHostKeyChecking=no'
--- a/deployment/ansible/inventories/production/nomad-clients.ini
+++ b/deployment/ansible/inventories/production/nomad-clients.ini
@@ -0,0 +1,14 @@
+# Nomad 客户端节点配置
+# 此文件包含需要配置为Nomad客户端的6个节点
+
+[nomad_clients]
+bj-hcp1 ansible_host=bj-hcp1 ansible_user=root ansible_password=313131 ansible_become_password=313131
+bj-influxdb ansible_host=bj-influxdb ansible_user=root ansible_password=313131 ansible_become_password=313131
+bj-warden ansible_host=bj-warden ansible_user=ben ansible_password=3131 ansible_become_password=3131
+bj-hcp2 ansible_host=bj-hcp2 ansible_user=root ansible_password=313131 ansible_become_password=313131
+kr-master ansible_host=master ansible_port=60022 ansible_user=ben ansible_password=3131 ansible_become_password=3131
+us-ash3c ansible_host=ash3c ansible_user=ben ansible_password=3131 ansible_become_password=3131
+
+[nomad_clients:vars]
+ansible_ssh_common_args='-o StrictHostKeyChecking=no'
+client_ip="{{ ansible_host }}"
--- a/deployment/ansible/inventories/production/nomad-cluster.ini
+++ b/deployment/ansible/inventories/production/nomad-cluster.ini
@@ -0,0 +1,12 @@
+[consul_servers:children]
+nomad_servers
+
+[consul_servers:vars]
+consul_cert_dir=/etc/consul.d/certs
+consul_ca_src=security/certificates/ca.pem
+consul_cert_src=security/certificates/consul-server.pem
+consul_key_src=security/certificates/consul-server-key.pem
+
+[nomad_cluster:children]
+nomad_servers
+nomad_clients
--- a/deployment/ansible/inventories/production/vault.ini
+++ b/deployment/ansible/inventories/production/vault.ini
@@ -0,0 +1,7 @@
+[vault_servers]
+master ansible_host=100.117.106.136 ansible_user=ben ansible_password=3131 ansible_become_password=3131 ansible_port=60022
+ash3c ansible_host=100.116.80.94 ansible_user=ben ansible_password=3131 ansible_become_password=3131
+warden ansible_host=warden ansible_user=ben ansible_become=yes ansible_become_pass=3131
+
+[vault_servers:vars]
+ansible_ssh_common_args='-o StrictHostKeyChecking=no'