server.yml

---
# Server datasheet
system:
    fqdn: host.domain.tld
    os: Debian “jessie”
    install-date: 2017-MM-DD
    # tput sgr0;for C in {1..7};do tput setaf $C;echo -n "■${C}■  ";tput sgr0;done;echo
    host-color: 7
    trespass-warning: Ez a szerver A/AZ CÉG használatában áll. Másoknak a belépés tilos.
    #trespass-warning: This server is used by COMPANY. Unauthorized entry is prohibited.
    backup-provider: Oktawave OCS
    mail-provider: Mailjet

# Package settings
package:
    apt:
        # See /package/apt-sources/
        sources:
            - apache-backports
            - dotdeb
            - nodejs
            - percona
            - goaccess
            - szepeviktor
    ca-certificates:
        # http://metadata.ftp-master.debian.org/changelogs/main/c/ca-certificates/testing_changelog
        install-testing: true
    adduser:
        firstuser:
            name: viktor
            ssh-key: ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBJnaM2JLvO4DWkmmSXys+jn0KhTRVkCfAAhv/1Pszs0DJTheQgOR9e3ThNCgR7CxIqZ5kXrZ+BIDtDs5IGrg9IA= szv-ecdsa
    openssh-server:
        port: 2222
    fail2ban:
        sender: admin@DOMAIN.TLD
    apache2:
        prg-http-user: user
        prg-http-pwd: secret
        prg-ssl-cn: prg.1.2.3.4.xip.io

# Mail server reputation
mail-server:
    monitoring:
        - http://www.projecthoneypot.org/
        - https://mxtoolbox.com/
        - https://www.rblmon.com/accounts/register/
        - https://rbltracker.com/
    registered:
        - https://www.dnswl.org/selfservice/
        - https://postmaster.live.com/snds/
        - https://ers.trendmicro.com/reputations/global_approved_list

# Custom data directories
data-dirs:

  directory name: /path/to/dir
  configuration files: /etc
  local data: /usr/local
  variable files: /var

# Clients using this server
clients:

  #Client Name:
  #  type: user account|empty domain|email account|cron job|SeoPanel|Piwik|OWA|website|mailman|mirror
  #  services:
  #      - service 1
  #      - service 2

  #Client Other:
  #  type: user account
  #  services:
  #      - service 2
  #      - service 3

# Services provided by this server
services:

  private:

    #service name 1:
    #  type: daemon|login script|cron job
    #  transport: tcp/123|php-ext|vhost|uds|name service
    #  source: non-packaged|non-repo
    #  location: /path/dir
    #  description: text
    #service name 2:
    #  type: tcp/123
    #  description: vhost.name
    irqbalance:
      type: daemon
    fail2ban:
      type: daemon
      transport: uds
    suhosin:
      type: php-ext
      source: non-packaged
      description: /usr/lib/php5/20121212
    mod-pagespeed:
      # daemon, apache module?
    drush:
      source: composer
      location: /opt/drush
    courier-mta:
      type: daemon
      transport: [ tcp/25, tcp/465, tcp/587 ]
    spamassassin:
      type: daemon
      transport: tcp/783
    monit:
      type: daemon
      transport: uds
    VMware Tools:
      transport: VMCI socket
      description: ATW/autorent
    unattended-upgrades:
      type: cron job
    unscd:
      type: daemon
      transport: name service
    mariadb:
      type: daemon
      transport: [ tcp/3306, uds ]
    php7.0-fpm:
      type: daemon
      transport: uds
    syslog-errors:
      type: cron job

  public:

    munin-node:
      type: daemon
      transport: tcp/4949
    apache2:
      type: daemon
      transport: [ tcp/80, tcp/443 ]
    antivirus mirror:
      type: vhost
      description: vhost.name
    can-send-email:
      type: vhost
      description: PHP script

# Package management
packaging:

  apt:
    list-command: dpkg -l
    location: /
  pip2:
    list-command: pip2 list
    location: /usr/local/lib/python2.7
  pip3:
    list-command: pip3 list
    location: /usr/local/lib/python3.4
  # Also PECL
  pear:
    list-command: pear list-channels && pear list -c CHANNEL && pear list -c pecl.php.net
    location: /usr/share/php
  node:
    list-command: npm -g list
    location: /usr/lib/node_modules
  ruby:
    list-command: gem list
    location: /usr/lib/ruby/vendor_ruby


# YAML editor: http://yaml-online-parser.appspot.com/
#     php -r 'var_export(yaml_parse(file_get_contents("server.yml")));'
...