Development: Redeploy Artemis Production

group_vars/all.yml

@@ -1,7 +1,7 @@
 ---
 ansible_managed: "Ansible managed: Do not make changes here - they will be overwritten."
 
-no_proxy: "localhost,127.0.0.1/8,::1,131.159.0.0/16,2a09:80c0::/29,172.16.0.0/12,10.0.0.0/8,*.in.tum.de,*cit.tum.de"
+no_proxy: "localhost,127.0.0.1/8,::1,131.159.0.0/16,2a09:80c0::/29,172.16.0.0/12,10.0.0.0/8,.in.tum.de,.cit.tum.de"
 
 shared_monitoring_host_v4: "131.159.89.160"
 shared_monitoring_host_v6: "2a09:80c0:89:1::32"

group_vars/artemis_prod_like_common.yml

@@ -16,11 +16,11 @@ artemis_ssh_priv_key_value: "none"
 artemis_operator_name: "Technical University of Munich"
 artemis_operator_admin_name: "Stephan Krusche"
 
-artemis_database_password: "{{ lookup('hashi_vault', 'kv/data/artemis/' + var_vault_group).get('db_password') }}"
-artemis_remote_admin_database_password: "{{ lookup('hashi_vault', 'kv/data/artemis/' + var_vault_group).get('db_remoteadmin_password') }}"
-artemis_remote_admin_ro_database_password: "{{ lookup('hashi_vault', 'kv/data/artemis/' + var_vault_group).get('db_remoteadmin_ro_password') }}"
+artemis_database_password: "{{ lookup('hashi_vault', 'artemis/data/' + var_vault_group + '/nodes').get('db_password') }}"
+artemis_remote_admin_database_password: "{{ lookup('hashi_vault', 'artemis/data/' + var_vault_group + '/nodes').get('db_remoteadmin_password') }}"
+artemis_remote_admin_ro_database_password: "{{ lookup('hashi_vault', 'artemis/data/' + var_vault_group + '/nodes').get('db_remoteadmin_ro_password') }}"
 
-artemis_internal_admin_password: "{{ lookup('hashi_vault', 'kv/data/artemis/' + var_vault_group).get('internal_admin') }}"
+artemis_internal_admin_password: "{{ lookup('hashi_vault', 'artemis/data/' + var_vault_group + '/nodes').get('internal_admin') }}"
 
 ##############################################################################
 # External Systems Configuration
@@ -29,16 +29,16 @@ artemis_internal_admin_password: "{{ lookup('hashi_vault', 'kv/data/artemis/' +
 push_notification_relay: "https://hermes-prod.artemis.cit.tum.de"
 
 ldap:
-  url: "{{ lookup('hashi_vault', 'kv/data/artemis/common/ldap').get('ldap_url') }}"
-  user_dn: "{{ lookup('hashi_vault', 'kv/data/artemis/common/ldap').get('ldap_dn') }}"
-  base: "{{ lookup('hashi_vault', 'kv/data/artemis/common/ldap').get('ldap_base') }}"
-  password: "{{ lookup('hashi_vault', 'kv/data/artemis/common/ldap').get('ldap_password') }}"
+  url: "ldaps://iauth.tum.de:636"
+  user_dn: "cn=TUINI01-Artemis,ou=bindDNs,ou=iauth,dc=tum,dc=de"
+  base: "ou=users,ou=data,ou=prod,ou=iauth,dc=tum,dc=de"
+  password: "{{ lookup('hashi_vault', 'artemis/data/' + var_vault_group + '/nodes').get('ldap_password') }}"
 
 mail:
-  hostname: "{{ lookup('hashi_vault', 'kv/data/artemis/common/mail').get('mail_host') }}"
+  hostname: "postout.lrz.de"
   port: "587"
-  username: "{{ lookup('hashi_vault', 'kv/data/artemis/common/mail').get('mail_user') }}"
-  password: "{{ lookup('hashi_vault', 'kv/data/artemis/common/mail').get('mail_password') }}"
+  username: "{{ lookup('hashi_vault', 'artemis/data/' + var_vault_group + '/nodes').get('mail_username') }}"
+  password: "{{ lookup('hashi_vault', 'artemis/data/' + var_vault_group + '/nodes').get('mail_password') }}"
   protocol: "smtp"
   ssl_trust: "postout.lrz.de"
 
@@ -49,40 +49,34 @@ version_control:
     ssh_key_path: /mnt/storage/ssh-keys
     build_agent_use_ssh: true
     ssh_url: "{{ var_artemis_localvc_ssh_url }}"
+    build_agent_git_credentials:
+      user: "{{ lookup('hashi_vault', 'artemis/data/' + var_vault_group + '/nodes').get('localvc_build_agent_user') }}"
+      password: "{{ lookup('hashi_vault', 'artemis/data/' + var_vault_group + '/nodes').get('localvc_build_agent_password') }}"
 
 artemis_ssh_key_path: "/tmp"
 
 apollon_url: "https://apollon.aet.cit.tum.de"
 
 iris:
-  url: "{{ lookup('hashi_vault', 'kv/data/artemis/common/iris').get('url') }}"
-  secret: "{{ lookup('hashi_vault', 'kv/data/artemis/common/iris').get('secret') }}"
+  url: "https://pyris-prod.artemis.cit.tum.de"
+  secret: "{{ lookup('hashi_vault', 'artemis/data/' + var_vault_group + '/nodes').get('iris_secret') }}"
   rate_limit: 25
   rate_limit_timeframe_hours: 3
 
 artemis_local_llm_deployment_enabled: true
 
-post_hog:
-  host: "{{ lookup('hashi_vault', 'kv/data/artemis/common/post_hog').get('url') }}"
-  token: "{{ lookup('hashi_vault', 'kv/data/artemis/common/post_hog').get('secret') }}"
-
-atlas:
-  enabled: true
-  atlasml:
-    enabled: false
-
 artemis_hyperion_enabled: true
 
 tum_live_base_url: "https://tum.live/api/v2"
 
 spring_ai:
   azure_openai:
-    api_key: "{{ lookup('hashi_vault', 'kv/data/artemis/common/hyperion').get('azure_openai_api_key_prod') }}"
-    endpoint: "{{ lookup('hashi_vault', 'kv/data/artemis/common/hyperion').get('azure_openai_endpoint') }}"
-    deployment_name: "{{ lookup('hashi_vault', 'kv/data/artemis/common/hyperion').get('azure_openai_deployment_name') }}"
+    api_key: "{{ lookup('hashi_vault', 'artemis/data/' + var_vault_group + '/nodes').get('azure_openai_apikey') }}"
+    endpoint: "https://ase-se01.openai.azure.com/"
+    deployment_name: "gpt-5.4-mini"
     temperature: 1.0
 
-artemis_global_search_enabled: true
+artemis_global_search_enabled: false
 
 ##############################################################################
 # Broker and Registry Configuration
@@ -92,14 +86,14 @@ is_multinode_install: true
 
 broker:
   url: "[fcfe:0:0:0:0:0:b:1]" # Broker hostname (Only used in the Artemis role)
-  username: "{{ lookup('hashi_vault', 'kv/data/artemis/' + var_vault_group).get('broker_user') }}"
-  password: "{{ lookup('hashi_vault', 'kv/data/artemis/' + var_vault_group).get('broker_password') }}"
+  username: "{{ lookup('hashi_vault', 'artemis/data/' + var_vault_group + '/nodes').get('broker_username') }}"
+  password: "{{ lookup('hashi_vault', 'artemis/data/' + var_vault_group + '/nodes').get('broker_password') }}"
 
 registry:
   url: "[fcfe:0:0:0:0:0:b:2]" # Registry hostname (Only used in the Artemis role)
 
-artemis_jhipster_jwt: "{{ lookup('hashi_vault', 'kv/data/artemis/' + var_vault_group).get('jhipster_jwt') }}"
-artemis_jhipster_registry_password: "{{ lookup('hashi_vault', 'kv/data/artemis/' + var_vault_group).get('registry_password') }}"
+artemis_jhipster_jwt: "{{ lookup('hashi_vault', 'artemis/data/' + var_vault_group + '/nodes').get('jhipster_jwt') }}"
+artemis_jhipster_registry_password: "{{ lookup('hashi_vault', 'artemis/data/' + var_vault_group + '/nodes').get('registry_password') }}"
 artemis_eureka_instance_id: "{{ node_id }}"
 
 ##############################################################################
@@ -116,7 +110,7 @@ sentry:
 artemis_create_deployment_user: true
 artemis_deployment_user_name: deployment
 artemis_deployment_user_uid: 1338
-artemis_deployment_user_public_key: "{{ lookup('hashi_vault', 'kv/data/artemis/' + var_vault_group).get('ssh_pub') }}"
+artemis_deployment_user_public_key: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPNnP9Eew/8keXo5+3tc0cP1GsRYizBG69tK+7ozAdgj artemis@xcit.tum.de"
 artemis_deployment_user_comment: "User to deploy artemis to this host"
 
 

group_vars/artemis_production.yml

@@ -1,25 +1,21 @@
 ---
 artemis_server_url: "https://artemis.tum.de"
 
-artemis_version: 7.10.5
+artemis_version: "9.9"
 
-var_vault_group: "production/nodes"
+var_vault_group: "production"
 
 var_artemis_localvc_ssh_url: "ssh://git@artemis.tum.de:7921/"
 
-registry_external_host: registry.prod.artemis.cit.tum.de
+registry_external_host: registry.production.artemis.cit.tum.de
 
 ##############################################################################
 # External Systems Configuration
 ##############################################################################
 
 athena:
-  url: "{{ lookup('hashi_vault', 'kv/data/artemis/common/athena').get('url') }}"
-  secret: "{{ lookup('hashi_vault', 'kv/data/artemis/common/athena').get('secret') }}"
-
-nebula:
-  url: "https://prod.nebula.artemis.cit.tum.de"
-  secret: "{{ lookup('hashi_vault', 'kv/data/artemis/common/nebula').get('prod_secret') }}"
+  url: "https://athena.aet.cit.tum.de"
+  secret: "{{ lookup('hashi_vault', 'artemis/data/' + var_vault_group + '/nodes').get('athena_secret') }}"
 
 weaviate:
   enabled: true
@@ -31,8 +27,8 @@ weaviate:
   vectorizer_module: text2vec-openai
   open_ai_embedding_model: "Qwen/Qwen3-Embedding-8B"
   open_ai_base_url: https://logos.aet.cit.tum.de:8080/
-  gpu_api_key: "{{ lookup('hashi_vault', 'kv/data/artemis/production/nodes').get('logos_api_key') }}"
-  api_key: "{{ lookup('hashi_vault', 'kv/data/itg/services/services_ase/weaviate').get('api_key') }}"
+  gpu_api_key: "{{ lookup('hashi_vault', 'artemis/data/' + var_vault_group + '/nodes').get('logos_apikey') }}"
+  api_key: "{{ lookup('hashi_vault', 'artemis/data/' + var_vault_group + '/nodes').get('weaviate_apikey') }}"
 
 ##############################################################################
 # Proxy Configuration
@@ -47,7 +43,7 @@ servers:
     default_server: true
 
 redirects:
-  - name: "artemis.ase.in.tum.de artemis.in.tum.de artemis.ase.cit.tum.de proxy.prod.artemis.cit.tum.de artemis.cs.tum.edu prod.artemis.cit.tum.de artemis.cit.tum.de"
+  - name: "artemis.ase.in.tum.de artemis.in.tum.de artemis.ase.cit.tum.de proxy.prod.artemis.cit.tum.de proxy.production.artemis.cit.tum.de artemis.cs.tum.edu prod.artemis.cit.tum.de artemis.cit.tum.de"
     ssl_certificate_path: /etc/letsencrypt/live/artemis.tum.de/fullchain.pem
     ssl_certificate_key_path: /etc/letsencrypt/live/artemis.tum.de/privkey.pem
     default_server: false

host_vars/agent01.prod.artemis.cit.tum.de.yml → host_vars/agent01.production.artemis.cit.tum.de.yml

@@ -1,13 +1,14 @@
 ---
 # IPv6 address (with CIDR!) which can be used to access the node - If left blank, ansible will use host facts to fill the address.
-wireguard_host_ipv6_address: 2a09:80c0:ac18:4600::57
-host_ipv4_address: 172.24.70.57
+wireguard_host_ipv6_address: 2a09:80c0:ac18:4600::14
+host_ipv4_address: 172.24.70.14
+
 # Address of the node inside the network.
 wireguard_interface_address: "fcfe:0:0:0:0:0:affe:1"
 
 # Wireguard Keys - Automatically generated!
-wireguard_pubkey: DNJj5f2uaB6rUcEnBt8VkNP548EusTYwACTTItq5a0U=
-wireguard_privkey: "{{ lookup('hashi_vault', 'kv/data/artemis/production/nodes').get('wg_priv_agent01') }}"
+wireguard_pubkey: Qspaj4yxTxKzlon400Gn5xvtcFm9nB4jGNUg84cuz10=
+wireguard_privkey: "{{ lookup('hashi_vault', 'artemis/data/production/wireguard').get('privkey_agent01') }}"
 
 node_id: 1001
 node_short_name: artemis-build-agent-1

host_vars/agent02.prod.artemis.cit.tum.de.yml → host_vars/agent02.production.artemis.cit.tum.de.yml

@@ -1,13 +1,14 @@
 ---
 # IPv6 address (with CIDR!) which can be used to access the node - If left blank, ansible will use host facts to fill the address.
-wireguard_host_ipv6_address: 2a09:80c0:ac18:4600::58
-host_ipv4_address: 172.24.70.58
+wireguard_host_ipv6_address: 2a09:80c0:ac18:4600::15
+host_ipv4_address: 172.24.70.15
+
 # Address of the node inside the network.
 wireguard_interface_address: "fcfe:0:0:0:0:0:affe:2"
 
 # Wireguard Keys - Automatically generated!
-wireguard_pubkey: eRV09zh8CTh6szmVr7dv8+28FoK8tBa2EajcHwWgVzQ=
-wireguard_privkey: "{{ lookup('hashi_vault', 'kv/data/artemis/production/nodes').get('wg_priv_agent02') }}"
+wireguard_pubkey: FRANlgRd+K2CGlwMa5Ar9RPCHccRNCkT+Yii0J/waSA=
+wireguard_privkey: "{{ lookup('hashi_vault', 'artemis/data/production/wireguard').get('privkey_agent02') }}"
 
 node_id: 1002
 node_short_name: artemis-build-agent-2

host_vars/agent03.prod.artemis.cit.tum.de.yml → host_vars/agent03.production.artemis.cit.tum.de.yml

@@ -1,13 +1,14 @@
 ---
 # IPv6 address (with CIDR!) which can be used to access the node - If left blank, ansible will use host facts to fill the address.
-wireguard_host_ipv6_address: 2a09:80c0:ac18:4600::59
-host_ipv4_address: 172.24.70.59
+wireguard_host_ipv6_address: 2a09:80c0:ac18:4600::16
+host_ipv4_address: 172.24.70.16
+
 # Address of the node inside the network.
 wireguard_interface_address: "fcfe:0:0:0:0:0:affe:3"
 
 # Wireguard Keys - Automatically generated!
-wireguard_pubkey: guwI9eCOo2u7tUq5+AK9S4yyCDEoKJy4IJIJwQblZV0=
-wireguard_privkey: "{{ lookup('hashi_vault', 'kv/data/artemis/production/nodes').get('wg_priv_agent03') }}"
+wireguard_pubkey: LP2Xsx2/k3f66elhfX1qYHWjT6PmXK1JvjYTIyASonA=
+wireguard_privkey: "{{ lookup('hashi_vault', 'artemis/data/production/wireguard').get('privkey_agent03') }}"
 
 node_id: 1003
 node_short_name: artemis-build-agent-3

host_vars/agent04.prod.artemis.cit.tum.de.yml → host_vars/agent04.production.artemis.cit.tum.de.yml

@@ -1,13 +1,14 @@
 ---
 # IPv6 address (with CIDR!) which can be used to access the node - If left blank, ansible will use host facts to fill the address.
-wireguard_host_ipv6_address: 2a09:80c0:ac18:4600::60
-host_ipv4_address: 172.24.70.60
+wireguard_host_ipv6_address: 2a09:80c0:ac18:4600::17
+host_ipv4_address: 172.24.70.17
+
 # Address of the node inside the network.
 wireguard_interface_address: "fcfe:0:0:0:0:0:affe:4"
 
 # Wireguard Keys - Automatically generated!
-wireguard_pubkey: 4gu0A3qyuQImDJkYU2FPluTWIZP0RbKWKbjqC7Jqdhk=
-wireguard_privkey: "{{ lookup('hashi_vault', 'kv/data/artemis/production/nodes').get('wg_priv_agent04') }}"
+wireguard_pubkey: 9DZqaDA9Oc6u6MxmjPjcuvtykAel4D5Q4ZKVw/Ka3Sk=
+wireguard_privkey: "{{ lookup('hashi_vault', 'artemis/data/production/wireguard').get('privkey_agent04') }}"
 
 node_id: 1004
 node_short_name: artemis-build-agent-4

host_vars/agent05.prod.artemis.cit.tum.de.yml → host_vars/agent05.production.artemis.cit.tum.de.yml

@@ -1,13 +1,14 @@
 ---
 # IPv6 address (with CIDR!) which can be used to access the node - If left blank, ansible will use host facts to fill the address.
-wireguard_host_ipv6_address: 2a09:80c0:ac18:4600::61
-host_ipv4_address: 172.24.70.61
+wireguard_host_ipv6_address: 2a09:80c0:ac18:4600::18
+host_ipv4_address: 172.24.70.18
+
 # Address of the node inside the network.
 wireguard_interface_address: "fcfe:0:0:0:0:0:affe:5"
 
 # Wireguard Keys - Automatically generated!
-wireguard_pubkey: x3KaKCrSz2INiGU37MCES9U0AjR76zkMHm71zz08sHE=
-wireguard_privkey: "{{ lookup('hashi_vault', 'kv/data/artemis/production/nodes').get('wg_priv_agent05') }}"
+wireguard_pubkey: K5RHc4Pm71LxNyoKFxfG2rCenUveMR7s3RMr6Qv24Vg=
+wireguard_privkey: "{{ lookup('hashi_vault', 'artemis/data/production/wireguard').get('privkey_agent05') }}"
 
 node_id: 1005
 node_short_name: artemis-build-agent-5

host_vars/agent06.prod.artemis.cit.tum.de.yml → host_vars/agent06.production.artemis.cit.tum.de.yml

@@ -1,13 +1,14 @@
 ---
 # IPv6 address (with CIDR!) which can be used to access the node - If left blank, ansible will use host facts to fill the address.
-wireguard_host_ipv6_address: 2a09:80c0:ac18:4600::62
-host_ipv4_address: 172.24.70.62
+wireguard_host_ipv6_address: 2a09:80c0:ac18:4600::19
+host_ipv4_address: 172.24.70.19
+
 # Address of the node inside the network.
 wireguard_interface_address: "fcfe:0:0:0:0:0:affe:6"
 
 # Wireguard Keys - Automatically generated!
-wireguard_pubkey: pwpf8As9OnAqjdBNlk3MMzJfKV0HxmW3M73QMh1e5Fs=
-wireguard_privkey: "{{ lookup('hashi_vault', 'kv/data/artemis/production/nodes').get('wg_priv_agent06') }}"
+wireguard_pubkey: w0dMIY/JVSOv+UmlxJZhjCEO6AXUPfQozZ5IVWp4ZUM=
+wireguard_privkey: "{{ lookup('hashi_vault', 'artemis/data/production/wireguard').get('privkey_agent06') }}"
 
 node_id: 1006
 node_short_name: artemis-build-agent-6

host_vars/agent07.prod.artemis.cit.tum.de.yml → host_vars/agent07.production.artemis.cit.tum.de.yml

@@ -1,13 +1,14 @@
 ---
 # IPv6 address (with CIDR!) which can be used to access the node - If left blank, ansible will use host facts to fill the address.
-wireguard_host_ipv6_address: 2a09:80c0:ac18:4600::63
-host_ipv4_address: 172.24.70.63
+wireguard_host_ipv6_address: 2a09:80c0:ac18:4600::20
+host_ipv4_address: 172.24.70.20
+
 # Address of the node inside the network.
 wireguard_interface_address: "fcfe:0:0:0:0:0:affe:7"
 
 # Wireguard Keys - Automatically generated!
-wireguard_pubkey: uMcK0NX8S0Or0gV8q6XZjrC7Z7O4gp4BNTqDaxO2rxE=
-wireguard_privkey: "{{ lookup('hashi_vault', 'kv/data/artemis/production/nodes').get('wg_priv_agent07') }}"
+wireguard_pubkey: koqVDd+mcR4oYauNhMx+NmBg05e1Y8pMiWAkuT9bEyU=
+wireguard_privkey: "{{ lookup('hashi_vault', 'artemis/data/production/wireguard').get('privkey_agent07') }}"
 
 node_id: 1007
 node_short_name: artemis-build-agent-7

host_vars/agent08.prod.artemis.cit.tum.de.yml → host_vars/agent08.production.artemis.cit.tum.de.yml

@@ -1,13 +1,14 @@
 ---
 # IPv6 address (with CIDR!) which can be used to access the node - If left blank, ansible will use host facts to fill the address.
-wireguard_host_ipv6_address: 2a09:80c0:ac18:4600::64
-host_ipv4_address: 172.24.70.64
+wireguard_host_ipv6_address: 2a09:80c0:ac18:4600::21
+host_ipv4_address: 172.24.70.21
+
 # Address of the node inside the network.
 wireguard_interface_address: "fcfe:0:0:0:0:0:affe:8"
 
 # Wireguard Keys - Automatically generated!
-wireguard_pubkey: Eh1HoONogtFw8nUQ8orIJFILRVQtq41jGyozyosgmCE=
-wireguard_privkey: "{{ lookup('hashi_vault', 'kv/data/artemis/production/nodes').get('wg_priv_agent08') }}"
+wireguard_pubkey: U5sWp+I9FyP0ht2UmV2j67cO/S2I9L3UthQZtE7eaFI=
+wireguard_privkey: "{{ lookup('hashi_vault', 'artemis/data/production/wireguard').get('privkey_agent08') }}"
 
 node_id: 1008
 node_short_name: artemis-build-agent-8

host_vars/agent09.prod.artemis.cit.tum.de.yml → host_vars/agent09.production.artemis.cit.tum.de.yml

@@ -1,13 +1,14 @@
 ---
 # IPv6 address (with CIDR!) which can be used to access the node - If left blank, ansible will use host facts to fill the address.
-wireguard_host_ipv6_address: 2a09:80c0:ac18:4600::65
-host_ipv4_address: 172.24.70.65
+wireguard_host_ipv6_address: 2a09:80c0:ac18:4600::22
+host_ipv4_address: 172.24.70.22
+
 # Address of the node inside the network.
 wireguard_interface_address: "fcfe:0:0:0:0:0:affe:9"
 
 # Wireguard Keys - Automatically generated!
-wireguard_pubkey: sB2sqVW5RAbyXE2EqQYjenUIZjUNS87gE6z1FujAcnE=
-wireguard_privkey: "{{ lookup('hashi_vault', 'kv/data/artemis/production/nodes').get('wg_priv_agent09') }}"
+wireguard_pubkey: ElmbepPPDPWgifG8TH2mcIUCTZI30ft3oPQ/rXllBRA=
+wireguard_privkey: "{{ lookup('hashi_vault', 'artemis/data/production/wireguard').get('privkey_agent09') }}"
 
 node_id: 1009
 node_short_name: artemis-build-agent-9

host_vars/agent10.prod.artemis.cit.tum.de.yml → host_vars/agent10.production.artemis.cit.tum.de.yml

@@ -1,13 +1,14 @@
 ---
 # IPv6 address (with CIDR!) which can be used to access the node - If left blank, ansible will use host facts to fill the address.
-wireguard_host_ipv6_address: 2a09:80c0:ac18:4600::66
-host_ipv4_address: 172.24.70.66
+wireguard_host_ipv6_address: 2a09:80c0:ac18:4600::23
+host_ipv4_address: 172.24.70.23
+
 # Address of the node inside the network.
 wireguard_interface_address: "fcfe:0:0:0:0:0:affe:10"
 
 # Wireguard Keys - Automatically generated!
-wireguard_pubkey: t3TTtU0e/In2svE7mivN5uhGTKHqCF9dpIZoFlFiUUA=
-wireguard_privkey: "{{ lookup('hashi_vault', 'kv/data/artemis/production/nodes').get('wg_priv_agent10') }}"
+wireguard_pubkey: daqJgmo6I5G05xSTITNJdL+3AY+6xKYpCrwe/O8ZpDQ=
+wireguard_privkey: "{{ lookup('hashi_vault', 'artemis/data/production/wireguard').get('privkey_agent10') }}"
 
 node_id: 1010
 node_short_name: artemis-build-agent-10

host_vars/agent11.prod.artemis.cit.tum.de.yml → host_vars/agent11.production.artemis.cit.tum.de.yml

@@ -1,13 +1,14 @@
 ---
 # IPv6 address (with CIDR!) which can be used to access the node - If left blank, ansible will use host facts to fill the address.
-wireguard_host_ipv6_address: 2a09:80c0:ac18:4600::67
-host_ipv4_address: 172.24.70.67
+wireguard_host_ipv6_address: 2a09:80c0:ac18:4600::24
+host_ipv4_address: 172.24.70.24
+
 # Address of the node inside the network.
 wireguard_interface_address: "fcfe:0:0:0:0:0:affe:11"
 
 # Wireguard Keys - Automatically generated!
-wireguard_pubkey: vfIyFAc9+mmuCPOh0Je59lD9l5ea48qPLa9+lQQUvhs=
-wireguard_privkey: "{{ lookup('hashi_vault', 'kv/data/artemis/production/nodes').get('wg_priv_agent11') }}"
+wireguard_pubkey: 7xTblZ5LgRDq2l7ldEvWk/sMdUKlcGt+ZXrxvSiS4DI=
+wireguard_privkey: "{{ lookup('hashi_vault', 'artemis/data/production/wireguard').get('privkey_agent11') }}"
 
 node_id: 1011
 node_short_name: artemis-build-agent-11