Update..
This commit is contained in:
@ -15,6 +15,65 @@ locales:
|
||||
set_default_limit_nofile: false
|
||||
|
||||
|
||||
# ---
|
||||
# vars used by roles/common/tasks/sshd.yml
|
||||
# ---
|
||||
|
||||
sshd_ports:
|
||||
- 22
|
||||
|
||||
sshd_listen_address:
|
||||
- '::'
|
||||
- '0.0.0.0'
|
||||
|
||||
sshd_host_keys:
|
||||
- /etc/ssh/ssh_host_rsa_key
|
||||
- /etc/ssh/ssh_host_ecdsa_key
|
||||
- /etc/ssh/ssh_host_ed25519_key
|
||||
|
||||
sshd_max_startups: !!str "10:30:100"
|
||||
|
||||
sshd_max_auth_tries: 3
|
||||
|
||||
sshd_max_sessions: 10
|
||||
|
||||
sshd_permit_root_login: !!str "yes"
|
||||
|
||||
sshd_authorized_keys_file: ".ssh/authorized_keys .ssh/authorized_keys2"
|
||||
|
||||
sshd_pubkey_authentication: !!str "yes"
|
||||
|
||||
sshd_password_authentication: !!str "no"
|
||||
|
||||
sshd_use_pam: !!str "yes"
|
||||
|
||||
sshd_print_motd: !!str "no"
|
||||
|
||||
# sshd_kexalgorithms
|
||||
#
|
||||
# Example:
|
||||
# sshd_kexalgorithms:
|
||||
# - curve25519-sha256@libssh.org
|
||||
# - diffie-hellman-group-exchange-sha256
|
||||
# - diffie-hellman-group14-sha1
|
||||
#
|
||||
sshd_kexalgorithms: {}
|
||||
|
||||
# sshd_kexalgorithms
|
||||
#
|
||||
# Example:
|
||||
# sshd_ciphers:
|
||||
# - chacha20-poly1305@openssh.com
|
||||
# - aes256-gcm@openssh.com
|
||||
# - aes256-ctr
|
||||
sshd_ciphers: {}
|
||||
|
||||
sshd_use_dns: !!str "no"
|
||||
|
||||
sshd_allowed_users: {}
|
||||
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/apt.yml
|
||||
# ==========
|
||||
@ -156,6 +215,7 @@ apt_initial_install_stretch:
|
||||
- quotatool
|
||||
- needrestart
|
||||
- socat
|
||||
- wakeonlan
|
||||
|
||||
apt_initial_install_buster:
|
||||
- apt-transport-https
|
||||
@ -268,6 +328,7 @@ apt_initial_install_buster:
|
||||
- quotatool
|
||||
- needrestart
|
||||
- socat
|
||||
- wakeonlan
|
||||
|
||||
apt_initial_install_xenial:
|
||||
- apt-transport-https
|
||||
@ -625,6 +686,17 @@ nfs_exports:
|
||||
- 192.168.63.0/24
|
||||
fs_encrypted: false
|
||||
|
||||
- src: 192.168.82.10:/data/samba
|
||||
path: /data/samba
|
||||
mount_opts: user,exec,rsize=8192,wsize=8192,hard,intr
|
||||
export_opt: rw,fsid=0,root_squash,sync,subtree_check
|
||||
export_networks:
|
||||
- 192.168.82.0/24
|
||||
- 10.0.82.0/24
|
||||
- 10.1.82.0/24
|
||||
- 192.168.63.0/24
|
||||
fs_encrypted: false
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/samba-install.yml
|
||||
@ -634,6 +706,8 @@ apt_install_server_samba:
|
||||
- samba
|
||||
- nscd
|
||||
|
||||
# - winbind
|
||||
|
||||
apt_install_client_samba:
|
||||
- samba-client
|
||||
- samba-common
|
||||
@ -860,6 +934,9 @@ nis_user:
|
||||
|
||||
samba_shares:
|
||||
- name: Transfer
|
||||
path: /data/samba/Transfer
|
||||
group_valid_users: transfer
|
||||
group_write_list: transfer
|
||||
user:
|
||||
- anna
|
||||
- buero
|
||||
@ -872,6 +949,9 @@ samba_shares:
|
||||
- thomas
|
||||
- frauke
|
||||
- name: Verwaltung
|
||||
path: /data/samba/Verwaltung
|
||||
group_valid_users: verwaltung
|
||||
group_write_list: verwaltung
|
||||
user:
|
||||
- anna
|
||||
- jonas
|
||||
@ -886,6 +966,9 @@ samba_shares:
|
||||
- thomas
|
||||
- frauke
|
||||
- name: Scans
|
||||
path: /data/samba/Scans
|
||||
group_valid_users: scans
|
||||
group_write_list: scans
|
||||
user:
|
||||
- anna
|
||||
- buero
|
||||
@ -899,30 +982,57 @@ samba_shares:
|
||||
- thomas
|
||||
- frauke
|
||||
- name: Buero_Scans
|
||||
path: /data/samba/Scans/Buero_Scans
|
||||
group_valid_users: scans
|
||||
group_write_list: scans
|
||||
user:
|
||||
- buero
|
||||
- name: Frauke_Scans
|
||||
path: /data/samba/Scans/Frauke_Scans
|
||||
group_valid_users: scans
|
||||
group_write_list: scans
|
||||
user:
|
||||
- frauke
|
||||
- name: FSJ_Scans
|
||||
path: /data/samba/Scans/FSJ_Scans
|
||||
group_valid_users: scans
|
||||
group_write_list: scans
|
||||
user:
|
||||
- fsj
|
||||
- name: Jibran_Scans
|
||||
path: /data/samba/Scans/Jibran_Scans
|
||||
group_valid_users: scans
|
||||
group_write_list: scans
|
||||
user:
|
||||
- jibran
|
||||
- name: Julia_Scans
|
||||
path: /data/samba/Scans/Julia_Scans
|
||||
group_valid_users: scans
|
||||
group_write_list: scans
|
||||
user:
|
||||
- julia
|
||||
- name: Maica_scans
|
||||
path: /data/samba/Scans/Maica_scans
|
||||
group_valid_users: scans
|
||||
group_write_list: scans
|
||||
user:
|
||||
- maica
|
||||
- name: Thomas_Scans
|
||||
path: /data/samba/Scans/Thomas_Scans
|
||||
group_valid_users: scans
|
||||
group_write_list: scans
|
||||
user:
|
||||
- thomas
|
||||
- name: Birgit_Scans
|
||||
path: /data/samba/Scans/Birgit_Scans
|
||||
group_valid_users: scans
|
||||
group_write_list: scans
|
||||
user:
|
||||
- birgit
|
||||
- name: Kamera
|
||||
path: /data/samba/Kamera
|
||||
group_valid_users: intern
|
||||
group_write_list: intern
|
||||
user:
|
||||
- anna
|
||||
- buero
|
||||
@ -933,6 +1043,9 @@ samba_shares:
|
||||
- thomas
|
||||
- frauke
|
||||
- name: Install
|
||||
path: /data/samba/Install
|
||||
group_valid_users: intern
|
||||
group_write_list: intern
|
||||
user:
|
||||
- anna
|
||||
- buero
|
||||
|
Reference in New Issue
Block a user