Update to 2021-12-01 19:13

roles/pve/templates/dehydrated_hook.sh.j2

@@ -0,0 +1,11 @@
+#!/bin/bash
+
+{% if pve_letsencrypt %}
+if [ $1 == "{{ inventory_hostname }}" ]; then
+  cat /var/lib/dehydrated/certificates/certs/{{ inventory_hostname }}/privkey.pem > /etc/pve/local/pveproxy-ssl.key
+  cat /var/lib/dehydrated/certificates/certs/{{ inventory_hostname }}/fullchain.pem > /etc/pve/local/pveproxy-ssl.pem
+  chown root:www-data /etc/pve/local/pveproxy-ssl.{key,pem}
+  chmod 640 /etc/pve/local/pveproxy-ssl.{key,pem}
+  /bin/systemctl reload pveproxy
+fi
+{% endif %}

roles/pve/templates/filebeat.yml.j2

@@ -0,0 +1,11 @@
+- type: log
+  enabled: True
+  paths:
+    - /var/log/pve-*.log
+    - /var/log/pveam.log
+    - /var/log/pveproxy/access.log
+    - /var/log/openvswitch/*.log
+    - /var/log/vzdump/*.log
+  exclude_files:
+    - '\.[gx]z$'
+    - '\d+$'

roles/pve/templates/ksmtuned.conf.j2

@@ -0,0 +1,6 @@
+KSM_SLEEP_MSEC={{ pve_ksm_sleep_msec }}
+KSM_THRES_COEF={{ pve_ksm_thres_coef }}
+KSM_THRES_CONST={{ pve_ksm_thres_const }}
+KSM_NPAGES_BOOST={{ pve_ksm_npages_boost }}
+KSM_NPAGES_DECAY=-200
+KSM_NPAGES_MAX=4800

roles/pve/templates/o2cb.j2

@@ -0,0 +1,17 @@
+# O2CB_ENABLED: 'true' means to load the driver on boot.
+O2CB_ENABLED=true
+
+# O2CB_BOOTCLUSTER: If not empty, the name of a cluster to start.
+O2CB_BOOTCLUSTER=ocfs2
+
+# O2CB_HEARTBEAT_THRESHOLD: Iterations before a node is considered dead.
+O2CB_HEARTBEAT_THRESHOLD={{ pve_ocfs2_heartbeat_thres }}
+
+# O2CB_IDLE_TIMEOUT_MS: Time in ms before a network connection is considered dead.
+O2CB_IDLE_TIMEOUT_MS=30000
+
+# O2CB_KEEPALIVE_DELAY_MS: Max. time in ms before a keepalive packet is sent.
+O2CB_KEEPALIVE_DELAY_MS=2000
+
+# O2CB_RECONNECT_DELAY_MS: Min. time in ms between connection attempts.
+O2CB_RECONNECT_DELAY_MS=2000

roles/pve/templates/ocfs2.conf.j2

@@ -0,0 +1,12 @@
+{% for element in pve_cluster | selectattr("type","equalto","node") | sort(attribute='id')%}
+node:
+  ip_port = 7777
+  ip_address = {{ element.ip }}
+  number = {{ loop.index0 }}
+  name = {{ element.name }}
+  cluster = ocfs2
+
+{% endfor %}
+cluster:
+  node_count = {{ pve_cluster | selectattr("type","equalto","node") | list | length }}
+  name = ocfs2

roles/pve/templates/pve-hookd.service.j2

@@ -0,0 +1,11 @@
+[Unit]
+Description=PVE Hook daemon
+After=syslog.target network.target pveproxy.service
+
+[Service]
+Type=simple
+ExecStart=/usr/local/bin/pve-hookd --hookdir /etc/hooks
+Restart=on-failure
+
+[Install]
+WantedBy=multi-user.target

roles/pve/templates/pve-online-gre.service.j2

@@ -0,0 +1,12 @@
+[Unit]
+Description=Setup GRE tunnels with other PVE nodes
+After=pve-guests.service
+Requires=pve-cluster.service
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStart=/usr/local/bin/pve-online --update-gre
+
+[Install]
+WantedBy=multi-user.target

roles/pve/templates/pve-online.conf.j2

@@ -0,0 +1,7 @@
+[general]
+online_api  = {{ pve_online_api_key }}
+wan_bridge = {{ pve_wan_bridge }}
+{% if pve_vlan_bridge is defined %}
+vlan_bridge = {{ pve_vlan_bridge }}
+{% endif %}
+migrate_flush_arp = {{ (pve_migrate_flush_arp) | ternary('yes','no') }}

roles/pve/templates/vzdump.conf.j2

@@ -0,0 +1,6 @@
+mode: snapshot
+compress: 1
+pigz: 1
+mailnotification: failure
+mailto: {{ system_admin_email }}
+storage: {{ pve_dump_storage }}