From 0e85c1bd5d87480a02a5a1c0a240fcb475e20ed2 Mon Sep 17 00:00:00 2001
From: Nikolai Rodionov <allanger@badhouseplants.net>
Date: Mon, 27 Oct 2025 23:34:26 +0100
Subject: [PATCH] Add tiramisu

---
 taipei.yaml        | 32 ++++++++++++++++++++++++++++++++
 tokens/taipei.yaml | 16 ++++++++++++++++
 2 files changed, 48 insertions(+)
 create mode 100644 taipei.yaml
 create mode 100644 tokens/taipei.yaml

diff --git a/taipei.yaml b/taipei.yaml
new file mode 100644
index 0000000..beba3e0
--- /dev/null
+++ b/taipei.yaml
@@ -0,0 +1,32 @@
+k3s_cluster:
+  children:
+    server:
+      hosts:
+        46.62.236.148:
+          ansible_user: overlord
+  vars:
+    ansible_port: 22
+    k3s_version: v1.34.1+k3s1
+    api_endpoint: "46.62.236.148"
+    token: "${TOKEN}"
+    extra_server_args: |-
+        --write-kubeconfig-mode=644 \
+        --tls-san="46.62.236.148" \
+        --kubelet-arg "allowed-unsafe-sysctls=net.ipv4.ip_forward" \
+        --disable-cloud-controller \
+        --disable-helm-controller \
+        --disable metrics-server \
+        --disable local-storage \
+        --disable traefik \
+        --flannel-iface eth1 \
+        --flannel-backend none \
+        --disable coredns \
+        --disable servicelb \
+        --cluster-cidr=192.168.0.0/16 \
+        --disable-network-policy \
+        --cluster-init
+    extra_agent_args: |-
+        --kubelet-arg "allowed-unsafe-sysctls=net.ipv4.ip_forward" \
+        --flannel-iface eth1
+    extra_service_envs:
+      - 'NO_PROXY=10.0.0.0/16,192.168.0.0/16'
diff --git a/tokens/taipei.yaml b/tokens/taipei.yaml
new file mode 100644
index 0000000..ecd1e54
--- /dev/null
+++ b/tokens/taipei.yaml
@@ -0,0 +1,16 @@
+TOKEN: ENC[AES256_GCM,data:9JE+FUmUExD4ClG00zLd4a+TObaWuIGyPG6GklieSP3gaeWM+juHfXtxPsHhTD41b8DsN1fSIoGqR1XEkr+kGA==,iv:mA/+uMA9XAu6pDYkJ6f3dHtRcJHa+w2lu8Za5/yxlBc=,tag:Z5A2etDGTAXNrVvfS20AXw==,type:str]
+sops:
+    age:
+        - recipient: age1lzythn62c4yug8w2wskckpgyjyja6rreyvgmwl9hj4mjvm0tvq6sl68d4z
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBISjhsYlgvSW9LcTVSYkVl
+            d1p2dlZ2TUVNcXFweGtNTVc1WlhuUG1Sb0NFCjk2QkFqK1pHSUNGRDVwTXZ0cmNL
+            MHRRR0J5K1p1aTlaUUNmNStYQS9VSVEKLS0tIEErWGxRck16U0p2U0VXbkk4R3ZM
+            SVZuYzB6TCt4b2NPS0lBd2xvblMvZUkKmDo0+4t00VfgYzW0cyLW+3b6UtBMqoDR
+            C1oadlEdX9uMtz+d7mNmliv1oODMXeKNY6jQtHJCBRzFFqMrbtQXdA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-10-27T17:02:06Z"
+    mac: ENC[AES256_GCM,data:K2FGkEIwoT7vU59qorOF+5ip9GaL9VJFB6uJDicfyjXbA7i5dsmEtqew4WFqVOzHmcb+wojullXGlECwXr764sjOf9DqhxSqE2tKAtEoHNh0S1Prq7D198XYB8l7XF+C16j57+c34pLeHaJRDw4ydzquRhSpEKLKSgDhFXWrYhA=,iv:qrre9KAzM4XodHtQmDgpmzDpSJLz7Qd3FP/jo7V+c5A=,tag:2uOk0W9o6Tf4tIip70djOg==,type:str]
+    unencrypted_suffix: _unencrypted
+    version: 3.11.0