update..
This commit is contained in:
590
group_vars/akb.yml
Normal file
590
group_vars/akb.yml
Normal file
@ -0,0 +1,590 @@
|
||||
---
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/basic.yml
|
||||
# ==========
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/sshd.yml
|
||||
# ==========
|
||||
|
||||
sshd_permit_root_login: !!str "yes"
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/apt.yml
|
||||
# ==========
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/git.yml
|
||||
# ==========
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/cups-install.yml
|
||||
# ==========
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/ntp.yml
|
||||
# ==========
|
||||
|
||||
# name or ip-adress from the (local) ntp server, mostly the gateway
|
||||
#
|
||||
ntp_server: gw-akb.akb.netz
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/nfs.yml
|
||||
# ==========
|
||||
|
||||
nfs_server: 192.168.82.10
|
||||
|
||||
# Set 'fs_encrypted' to true if filesystem lives on an encrypted
|
||||
# partition.
|
||||
#
|
||||
# NOTE !!
|
||||
# Take car to increase 'fsid' in case of more than one export
|
||||
#
|
||||
nfs_exports:
|
||||
- src: 192.168.82.10:/data/home
|
||||
path: /data/home
|
||||
mount_opts: user,exec,rsize=8192,wsize=8192,hard,intr
|
||||
export_opt: rw,root_squash,sync,subtree_check
|
||||
export_networks:
|
||||
- 192.168.82.0/24
|
||||
- 10.0.82.0/24
|
||||
- 10.1.82.0/24
|
||||
- 192.168.63.0/24
|
||||
use_fsid_option: true
|
||||
|
||||
- src: 192.168.82.10:/data/samba
|
||||
path: /data/samba
|
||||
mount_opts: user,exec,rsize=8192,wsize=8192,hard,intr
|
||||
export_opt: rw,root_squash,sync,subtree_check
|
||||
export_networks:
|
||||
- 192.168.82.0/24
|
||||
- 10.0.82.0/24
|
||||
- 10.1.82.0/24
|
||||
- 192.168.63.0/24
|
||||
use_fsid_option: true
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/pure-ftpd-install.yml
|
||||
# ==========
|
||||
|
||||
# Available properties
|
||||
# - name: vuser1
|
||||
# password: p4ssW0rd
|
||||
# homedir: /var/ftp/vuser1
|
||||
# uid: 2000
|
||||
# gid: 2000
|
||||
# quota_files: 2000
|
||||
# quota_size: 500
|
||||
# bandwidth_ul: 5
|
||||
# bandwidth_dl: 5
|
||||
# ratio_ul: 10
|
||||
# ratio_dl: 1
|
||||
pureftpd_virtual_users:
|
||||
|
||||
- name: maica_scan
|
||||
password: maica_scan
|
||||
homedir: /data/samba/Scans/Maica_scans
|
||||
uid: maica
|
||||
gid: users
|
||||
|
||||
- name: buero_scan
|
||||
password: buero_scan
|
||||
homedir: /data/samba/Scans/Buero_Scans
|
||||
uid: buero
|
||||
gid: users
|
||||
- name: jibran_scan
|
||||
|
||||
password: jibran_scan
|
||||
homedir: /data/samba/Scans/Jibran_scan_Scans
|
||||
uid: jibran
|
||||
gid: users
|
||||
|
||||
#pureftpd_virtual_deleted_users:
|
||||
#
|
||||
# Available properties
|
||||
# - name: vuser2
|
||||
pureftpd_virtual_deleted_users: []
|
||||
|
||||
pureftpd_virtual_users_import: false
|
||||
|
||||
# pureftpd_tls_certificate_method
|
||||
#
|
||||
# possible values:
|
||||
# - generate
|
||||
# - certbot - Not YET integrated
|
||||
# - upload - Not YET integrated
|
||||
#
|
||||
pureftpd_tls_certificate_method: 'generate'
|
||||
|
||||
# for method 'generate'
|
||||
#
|
||||
# Available properties
|
||||
#
|
||||
#pureftpd_tls_certificate_openssl:
|
||||
# size: 4096
|
||||
# days: 365
|
||||
# fqdn: ftp.example.com
|
||||
# country: ''
|
||||
# state: ''
|
||||
# locality: ''
|
||||
# organization: ''
|
||||
# unit: ''
|
||||
pureftpd_tls_certificate_openssl:
|
||||
size: 4096
|
||||
days: 3650
|
||||
fqdn: file-akb.akb.netz
|
||||
country: 'DE'
|
||||
state: 'Brandenburg'
|
||||
locality: 'Potsdam'
|
||||
organization: 'O.OPEN'
|
||||
unit: 'Network services'
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/system-user.yml
|
||||
# ==========
|
||||
|
||||
# ! Notice !
|
||||
#
|
||||
# On NIS supported Server put your users and groups in the
|
||||
# appropriate section for playbook 'nis-user.yml'
|
||||
#
|
||||
# ! Notice !
|
||||
|
||||
remove_system_users: []
|
||||
#remove_system_users:
|
||||
# - name: test
|
||||
|
||||
system_users: []
|
||||
#system_users:
|
||||
# - name: test
|
||||
# password: 'test100'
|
||||
|
||||
#system_users:
|
||||
#
|
||||
# - name: sysadm
|
||||
# password: '9xFXkdPR_2'
|
||||
|
||||
system_groups: []
|
||||
|
||||
base_home: /home
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/nis-install-server.yml
|
||||
# vars used by roles/common/tasks/nis-user.yml
|
||||
# vars used by roles/common/tasks/nis-install-client.yml
|
||||
# ==========
|
||||
|
||||
# used by templates
|
||||
# - yp.conf.j2
|
||||
# - defaultdomain.j2
|
||||
nis_domain: akb.netz
|
||||
|
||||
# also used by template
|
||||
# - yp.conf.j2
|
||||
nis_server_address: 192.168.82.10
|
||||
|
||||
nis_server_name: file-akb.akb.netz
|
||||
|
||||
nis_base_home: /data/home
|
||||
|
||||
nis_groups:
|
||||
- name: intern
|
||||
group_id: 1100
|
||||
- name: verwaltung
|
||||
group_id: 1110
|
||||
- name: transfer
|
||||
group_id: 1120
|
||||
- name: scans
|
||||
group_id: 1130
|
||||
|
||||
remove_nis_users: []
|
||||
#remove_nis_users:
|
||||
# - name: anna
|
||||
# - name: birgit
|
||||
# - name: jonas
|
||||
|
||||
nis_user:
|
||||
|
||||
- name: chris
|
||||
groups:
|
||||
- intern
|
||||
- verwaltung
|
||||
- transfer
|
||||
- scans
|
||||
- lpadmin
|
||||
is_samba_user: true
|
||||
password: !vault |
|
||||
$ANSIBLE_VAULT;1.1;AES256
|
||||
35653838343532663632326462656437363665316337316336316335383263633630616638313736
|
||||
3937666561356232666136646435613361336437303637360a353561316633373265323931623565
|
||||
32643966373962313334343565643130373535353238316161623837333130353231343332663930
|
||||
3638386337333636390a393738373935646638383237373663376434366361363938346335663438
|
||||
6637
|
||||
|
||||
- name: buero
|
||||
groups:
|
||||
- intern
|
||||
- verwaltung
|
||||
- transfer
|
||||
- scans
|
||||
- lpadmin
|
||||
is_samba_user: true
|
||||
password: 'buero2011'
|
||||
|
||||
- name: frauke
|
||||
groups:
|
||||
- intern
|
||||
- verwaltung
|
||||
- transfer
|
||||
- scans
|
||||
- lpadmin
|
||||
is_samba_user: true
|
||||
password: 'frau20ke19!'
|
||||
|
||||
- name: fsj
|
||||
groups:
|
||||
- verwaltung
|
||||
- transfer
|
||||
- scans
|
||||
is_samba_user: true
|
||||
password: 'IbFiBdA'
|
||||
|
||||
- name: jibran
|
||||
groups:
|
||||
- intern
|
||||
- verwaltung
|
||||
- transfer
|
||||
- scans
|
||||
- lpadmin
|
||||
is_samba_user: true
|
||||
password: '20jib15ran'
|
||||
|
||||
- name: julia
|
||||
groups:
|
||||
- verwaltung
|
||||
- transfer
|
||||
- scans
|
||||
is_samba_user: true
|
||||
password: '20-julia-16_!'
|
||||
|
||||
- name: kamera
|
||||
groups:
|
||||
- verwaltung
|
||||
- transfer
|
||||
- scans
|
||||
is_samba_user: true
|
||||
password: 'tfC9BVmH'
|
||||
|
||||
- name: maica
|
||||
groups:
|
||||
- intern
|
||||
- verwaltung
|
||||
- transfer
|
||||
- scans
|
||||
- lpadmin
|
||||
is_samba_user: true
|
||||
password: 'mai20ca16!'
|
||||
|
||||
- name: praktikum
|
||||
groups:
|
||||
- verwaltung
|
||||
- transfer
|
||||
- scans
|
||||
is_samba_user: true
|
||||
password: 'praktikum_2016!'
|
||||
|
||||
- name: romana
|
||||
groups:
|
||||
- verwaltung
|
||||
- transfer
|
||||
- scans
|
||||
- lpadmin
|
||||
is_samba_user: true
|
||||
password: '20-ro-21.mana_%'
|
||||
|
||||
- name: thomas
|
||||
groups:
|
||||
- intern
|
||||
- verwaltung
|
||||
- transfer
|
||||
- scans
|
||||
is_samba_user: true
|
||||
password: '20_thomas/19-!'
|
||||
|
||||
- name: stefan
|
||||
groups:
|
||||
- verwaltung
|
||||
- transfer
|
||||
- scans
|
||||
- lpadmin
|
||||
is_samba_user: true
|
||||
password: 'Ste20fan21!'
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/samba-install.yml
|
||||
# ==========
|
||||
|
||||
samba_server: file-akb.akb.netz
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/samba-user.yml
|
||||
# ==========
|
||||
|
||||
# ! Notice !
|
||||
#
|
||||
# variables used from other previos sections:
|
||||
#
|
||||
# - remove_system_users: roles/common/tasks/system-user.yml
|
||||
# - remove_nis_users: roles/common/tasks/nis-install-server.yml
|
||||
# - nis_user: roles/common/tasks/nis-install-server.yml
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/mount_samba_shares.yml
|
||||
# ==========
|
||||
|
||||
# ! Notice !
|
||||
#
|
||||
# variables used from other previos sections:
|
||||
#
|
||||
# - nis_user: roles/common/tasks/nis-install-server.yml
|
||||
|
||||
|
||||
samba_workgroup: AKB
|
||||
samba_netbios_name: FILE-AKB
|
||||
|
||||
samba_shares:
|
||||
- name: Transfer
|
||||
path: /data/samba/Transfer
|
||||
group_valid_users: transfer
|
||||
group_write_list: transfer
|
||||
file_create_mask: '0660'
|
||||
dir_create_mask: '2770'
|
||||
vfs_object_recycle: true
|
||||
recycle_path: '@Recycle.Bin'
|
||||
user:
|
||||
- buero
|
||||
- chris
|
||||
- jibran
|
||||
- praktikum
|
||||
- maica
|
||||
- julia
|
||||
- frauke
|
||||
- fsj
|
||||
- romana
|
||||
- stefan
|
||||
- thomas
|
||||
- name: Verwaltung
|
||||
path: /data/samba/Verwaltung
|
||||
group_valid_users: verwaltung
|
||||
group_write_list: verwaltung
|
||||
file_create_mask: '0660'
|
||||
dir_create_mask: '2770'
|
||||
vfs_object_recycle: true
|
||||
recycle_path: '@Recycle.Bin'
|
||||
user:
|
||||
- buero
|
||||
- chris
|
||||
- jibran
|
||||
- praktikum
|
||||
- maica
|
||||
- julia
|
||||
- frauke
|
||||
- fsj
|
||||
- romana
|
||||
- stefan
|
||||
- thomas
|
||||
- name: Scans
|
||||
path: /data/samba/Scans
|
||||
group_valid_users: scans
|
||||
group_write_list: scans
|
||||
file_create_mask: '0660'
|
||||
dir_create_mask: '2770'
|
||||
vfs_object_recycle: true
|
||||
recycle_path: '@Recycle.Bin'
|
||||
user:
|
||||
- buero
|
||||
- chris
|
||||
- jibran
|
||||
- praktikum
|
||||
- maica
|
||||
- julia
|
||||
- frauke
|
||||
- fsj
|
||||
- romana
|
||||
- stefan
|
||||
- thomas
|
||||
- name: Buero_Scans
|
||||
path: /data/samba/Scans/Buero_Scans
|
||||
group_valid_users: scans
|
||||
group_write_list: scans
|
||||
file_create_mask: '0660'
|
||||
dir_create_mask: '2770'
|
||||
vfs_object_recycle: true
|
||||
recycle_path: '@Recycle.Bin'
|
||||
user:
|
||||
- buero
|
||||
- name: Frauke_Scans
|
||||
path: /data/samba/Scans/Frauke_Scans
|
||||
group_valid_users: scans
|
||||
group_write_list: scans
|
||||
file_create_mask: '0660'
|
||||
dir_create_mask: '2770'
|
||||
vfs_object_recycle: true
|
||||
recycle_path: '@Recycle.Bin'
|
||||
user:
|
||||
- frauke
|
||||
- name: FSJ_Scans
|
||||
path: /data/samba/Scans/FSJ_Scans
|
||||
group_valid_users: scans
|
||||
group_write_list: scans
|
||||
file_create_mask: '0660'
|
||||
dir_create_mask: '2770'
|
||||
vfs_object_recycle: true
|
||||
recycle_path: '@Recycle.Bin'
|
||||
user:
|
||||
- fsj
|
||||
- name: Jibran_Scans
|
||||
path: /data/samba/Scans/Jibran_Scans
|
||||
group_valid_users: scans
|
||||
group_write_list: scans
|
||||
file_create_mask: '0660'
|
||||
dir_create_mask: '2770'
|
||||
vfs_object_recycle: true
|
||||
recycle_path: '@Recycle.Bin'
|
||||
user:
|
||||
- jibran
|
||||
- name: Julia_Scans
|
||||
path: /data/samba/Scans/Julia_Scans
|
||||
group_valid_users: scans
|
||||
group_write_list: scans
|
||||
file_create_mask: '0660'
|
||||
dir_create_mask: '2770'
|
||||
vfs_object_recycle: true
|
||||
recycle_path: '@Recycle.Bin'
|
||||
user:
|
||||
- julia
|
||||
- name: Maica_scans
|
||||
path: /data/samba/Scans/Maica_scans
|
||||
group_valid_users: scans
|
||||
group_write_list: scans
|
||||
file_create_mask: '0660'
|
||||
dir_create_mask: '2770'
|
||||
vfs_object_recycle: true
|
||||
recycle_path: '@Recycle.Bin'
|
||||
user:
|
||||
- maica
|
||||
- name: Thomas_Scans
|
||||
path: /data/samba/Scans/Thomas_Scans
|
||||
group_valid_users: scans
|
||||
group_write_list: scans
|
||||
file_create_mask: '0660'
|
||||
dir_create_mask: '2770'
|
||||
vfs_object_recycle: true
|
||||
recycle_path: '@Recycle.Bin'
|
||||
user:
|
||||
- thomas
|
||||
- name: Stefan_Scans
|
||||
path: /data/samba/Scans/Stefan_Scans
|
||||
group_valid_users: scans
|
||||
group_write_list: scans
|
||||
file_create_mask: '0660'
|
||||
dir_create_mask: '2770'
|
||||
vfs_object_recycle: true
|
||||
recycle_path: '@Recycle.Bin'
|
||||
user:
|
||||
- stefan
|
||||
- name: Kamera
|
||||
path: /data/samba/Kamera
|
||||
group_valid_users: intern
|
||||
group_write_list: intern
|
||||
file_create_mask: '0660'
|
||||
dir_create_mask: '2770'
|
||||
vfs_object_recycle: false
|
||||
recycle_path: '@Recycle.Bin'
|
||||
user:
|
||||
- buero
|
||||
- chris
|
||||
- kamera
|
||||
- praktikum
|
||||
- maica
|
||||
- thomas
|
||||
- frauke
|
||||
- name: Install
|
||||
path: /data/samba/Install
|
||||
group_valid_users: intern
|
||||
group_write_list: intern
|
||||
file_create_mask: '0660'
|
||||
dir_create_mask: '2770'
|
||||
vfs_object_recycle: false
|
||||
recycle_path: '@Recycle.Bin'
|
||||
user:
|
||||
- buero
|
||||
- chris
|
||||
- kamera
|
||||
- praktikum
|
||||
- maica
|
||||
- thomas
|
||||
- frauke
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/system-user-systemfiles.yml
|
||||
# ==========
|
||||
|
||||
# ! Notice !
|
||||
#
|
||||
# variables used from other previos sections:
|
||||
#
|
||||
# - system_users: roles/common/tasks/system-user.yml
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/nis-user-systemfiles.yml
|
||||
# ==========
|
||||
|
||||
# ! Notice !
|
||||
#
|
||||
# variables used from other previos sections:
|
||||
#
|
||||
# - nis_user: roles/common/tasks/nis-install-server.yml
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/sudoers-pc.yml
|
||||
# ==========
|
||||
|
||||
sudo_pc_users:
|
||||
- chris
|
||||
- sysadm
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/sudoers-server.yml
|
||||
# ==========
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/ubuntu-x11vnc-1604-amd64.yml
|
||||
# vars used by roles/common/tasks/ubuntu-x11vnc-1804-amd64.yml
|
||||
# ==========
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/luks.yml
|
||||
# ==========
|
||||
|
||||
@ -883,6 +883,181 @@ nfs_server: {}
|
||||
nfs_exports: []
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/pure-ftpd-install.yml
|
||||
# ==========
|
||||
|
||||
pureftpd_global_config_file: /etc/default/pure-ftpd-common
|
||||
|
||||
pureftpd_config_dir: /etc/pure-ftpd
|
||||
pureftpd_config_conf_dir: "{{ pureftpd_config_dir }}/conf"
|
||||
pureftpd_config_auth_dir: "{{ pureftpd_config_dir }}/auth"
|
||||
pureftpd_config_db_dir: "{{ pureftpd_config_dir }}/db"
|
||||
|
||||
pureftpd_config_fortune_file: "{{ pureftpd_config_dir }}/pureftpd-fortune.txt"
|
||||
|
||||
pureftpd_tls_certificate_pem: /etc/ssl/private/pure-ftpd.pem
|
||||
|
||||
pureftpd_packages:
|
||||
- pure-ftpd-common
|
||||
- pure-ftpd
|
||||
|
||||
# pure-ftpd-common.j2
|
||||
pureftpd_global_config_mode: standalone
|
||||
pureftpd_global_config_virtualchroot: false
|
||||
pureftpd_global_config_uploadscript: ''
|
||||
pureftpd_global_config_uploaduid: ''
|
||||
pureftpd_global_config_uploadgid: ''
|
||||
|
||||
pureftpd_config:
|
||||
AltLog: 'clf:/var/log/pure-ftpd/transfer.log'
|
||||
AnonymousCantUpload: 'yes'
|
||||
Bind: ',21'
|
||||
CustomerProof: 'yes'
|
||||
DisplayDotFiles: 'yes'
|
||||
DontResolve: 'yes'
|
||||
FSCharset: 'UTF-8'
|
||||
ForcePassiveIP: ''
|
||||
MaxDiskUsage: '80'
|
||||
MinUID: '1000'
|
||||
NoAnonymous: 'yes'
|
||||
PAMAuthentication: 'no'
|
||||
PassivePortRange: '50000 50400'
|
||||
ProhibitDotFilesRead: 'no'
|
||||
ProhibitDotFilesWrite: 'yes'
|
||||
PureDB: '/etc/pure-ftpd/pureftpd.pdb'
|
||||
SyslogFacility: 'ftp'
|
||||
TLS: '1'
|
||||
TLSCipherSuite: 'HIGH'
|
||||
UnixAuthentication: 'no'
|
||||
#
|
||||
# Available properties
|
||||
#
|
||||
# Available properties
|
||||
# AllowAnonymousFXP: 'no'
|
||||
# AllowUserFXP: 'no'
|
||||
# AltLog: 'clf:/var/log/pure-ftpd/transfer.log'
|
||||
# AnonymousBandwidth: '8'
|
||||
# AnonymousCanCreateDirs: 'no'
|
||||
# AnonymousCantUpload: 'yes'
|
||||
# AnonymousOnly: 'no'
|
||||
# AnonymousRatio: '1 10'
|
||||
# AntiWarez: 'yes'
|
||||
# AutoRename: 'no'
|
||||
# Bind: '127.0.0.1,21'
|
||||
# BrokenClientsCompatibility: 'no'
|
||||
# CallUploadScript: 'yes'
|
||||
# ChrootEveryone: 'yes'
|
||||
# ClientCharset: 'UTF-8'
|
||||
# CreateHomeDir: 'yes'
|
||||
# CustomerProof: 'yes'
|
||||
# Daemonize: 'yes'
|
||||
# DisplayDotFiles: 'yes'
|
||||
# DontResolve: 'yes'
|
||||
# ExtAuth: /var/run/ftpd.sock
|
||||
# ForcePassiveIP: '192.168.0.1'
|
||||
# FortunesFile: '/etc/pure-ftpd/cookie'
|
||||
# FSCharset: 'utf8'
|
||||
# IPV4Only: 'yes'
|
||||
# IPV6Only: 'yes'
|
||||
# KeepAllFiles: 'yes'
|
||||
# LDAPConfigFile: /etc/pureftpd-ldap.conf
|
||||
# LimitRecursion: '10000 8'
|
||||
# LogPID: 'yes'
|
||||
# MaxClientsNumber: '10'
|
||||
# MaxClientsPerIP: "{{ ansible_processor_cores }}"
|
||||
# MaxDiskUsage: '80'
|
||||
# MaxIdleTime: '15'
|
||||
# MaxLoad: '4'
|
||||
# MinUID: '1000'
|
||||
# MySQLConfigFile: /etc/pure-ftpd/mysql.conf
|
||||
# NoAnonymous: 'yes'
|
||||
# NoChmod: 'yes'
|
||||
# NoRename: 'yes'
|
||||
# NoTruncate: 'yes'
|
||||
# PAMAuthentication: 'no'
|
||||
# PassivePortRange: '30000 50000'
|
||||
# PerUserLimits: '3 20'
|
||||
# PGSQLConfigFile: /etc/pureftpd-pgsql.conf
|
||||
# PIDFile: '/var/run/pure-ftpd.pid'
|
||||
# ProhibitDotFilesRead: 'yes'
|
||||
# ProhibitDotFilesWrite: 'yes'
|
||||
# PureDB: /etc/pure-ftpd/pureftpd.pdb
|
||||
# Quota: '1000 10'
|
||||
# SyslogFacility: 'ftp'
|
||||
# TLS: '0'
|
||||
# TLSCipherSuite: 'ALL:!aNULL:!SSLv3'
|
||||
# TrustedIP: '10.1.1.1'
|
||||
# Umask: '113 002'
|
||||
# UnixAuthentication: 'no'
|
||||
# UserBandwidth: '8'
|
||||
# UserRatio: '1 10'
|
||||
# VerboseLog: 'no'
|
||||
|
||||
pureftpd_auth_puredb: 50
|
||||
pureftpd_auth_mysql: 0
|
||||
pureftpd_auth_postgresql: 0
|
||||
pureftpd_auth_ldap: 0
|
||||
pureftpd_auth_unix: 65
|
||||
pureftpd_auth_pam: 70
|
||||
|
||||
# Default FTP user/group
|
||||
pureftpd_virtual_users_group: nobody
|
||||
pureftpd_virtual_users_user: nogroup
|
||||
# pureftpd_virtual_users_gid: '65534'
|
||||
# pureftpd_virtual_users_uid: '65534'
|
||||
|
||||
|
||||
#pureftpd_virtual_users:
|
||||
#
|
||||
# Available properties
|
||||
# - name: vuser1
|
||||
# password: p4ssW0rd
|
||||
# homedir: /var/ftp/vuser1
|
||||
# uid: 2000
|
||||
# gid: 2000
|
||||
# quota_files: 2000
|
||||
# quota_size: 500
|
||||
# bandwidth_ul: 5
|
||||
# bandwidth_dl: 5
|
||||
# ratio_ul: 10
|
||||
# ratio_dl: 1
|
||||
pureftpd_virtual_users: []
|
||||
|
||||
#pureftpd_virtual_deleted_users:
|
||||
#
|
||||
# Available properties
|
||||
# - name: vuser2
|
||||
pureftpd_virtual_deleted_users: []
|
||||
|
||||
pureftpd_virtual_users_import: false
|
||||
|
||||
# pureftpd_tls_certificate_method
|
||||
#
|
||||
# possible values:
|
||||
# - generate
|
||||
# - certbot - Not YET integrated
|
||||
# - upload - Not YET integrated
|
||||
#
|
||||
pureftpd_tls_certificate_method: 'generate'
|
||||
|
||||
# for method 'generate'
|
||||
#
|
||||
# # Available properties
|
||||
#
|
||||
#pureftpd_tls_certificate_openssl:
|
||||
# size: 4096
|
||||
# days: 365
|
||||
# fqdn: ftp.example.com
|
||||
# country: 'DE'
|
||||
# state: 'Berlin'
|
||||
# locality: 'Berlin'
|
||||
# organization: 'O.OPEN'
|
||||
# unit: 'Network services'
|
||||
#
|
||||
pureftpd_tls_certificate_openssl: []
|
||||
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/system-user.yml
|
||||
@ -907,8 +1082,6 @@ system_users: []
|
||||
|
||||
system_groups: []
|
||||
|
||||
base_home: /home
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/nis-install-server.yml
|
||||
@ -979,20 +1152,69 @@ nis_user: []
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/samba-install.yml
|
||||
# vars used by roles/common/tasks/samba-user.yml
|
||||
# vars used by roles/common/tasks/mount_samba_shares.yml
|
||||
# ==========
|
||||
|
||||
apt_install_server_samba:
|
||||
- samba
|
||||
- nscd
|
||||
|
||||
# - winbind
|
||||
|
||||
apt_install_client_samba:
|
||||
- samba-client
|
||||
- samba-common
|
||||
# samba_workgroup
|
||||
#
|
||||
# example:
|
||||
# samba_workgroup: MBR
|
||||
#
|
||||
samba_workgroup: {}
|
||||
|
||||
#samba_server: file-spr.sprachenatelier.netz
|
||||
samba_server: []
|
||||
# samba_netbios_name
|
||||
#
|
||||
# example:
|
||||
# samba_netbios_name: FILE-MBR
|
||||
#
|
||||
samba_netbios_name: {}
|
||||
|
||||
# samba_server_min_protocol
|
||||
#
|
||||
samba_server_min_protocol: {}
|
||||
|
||||
samba_groups: []
|
||||
|
||||
# samba_user:
|
||||
# - name: chris
|
||||
# groups:
|
||||
# - group1
|
||||
# - group2
|
||||
# password: 'H-.T/TvN5S9J'
|
||||
#
|
||||
samba_user: []
|
||||
|
||||
# remove_samba_users:
|
||||
# - name: name1
|
||||
# - name: name2
|
||||
#
|
||||
remove_samba_users: []
|
||||
|
||||
# samba_shares
|
||||
#
|
||||
# samba_shares:
|
||||
# - name: Arbeitsrechtliches
|
||||
# comment:
|
||||
# path: /data/shares/Arbeitsrechtliches
|
||||
# browseable: !!str yes
|
||||
# read_only: !!str no
|
||||
# writeable: !!str yes
|
||||
# guest_ok: !!str no
|
||||
# file_create_mask: !!str 0660
|
||||
# dir_create_mask: !!str 2770
|
||||
# valid_users: '%S'
|
||||
# group_valid_users: mbr-finanzen
|
||||
# group_write_list: mbr-finanzen
|
||||
# vfs_object_recycle: true
|
||||
# recycle_path: '@Recycle.Bin'
|
||||
#
|
||||
samba_shares: []
|
||||
|
||||
samba_cronjob_trash_dirs:
|
||||
name: Clean up Samba Trash Dirs
|
||||
@ -1038,27 +1260,6 @@ samba_cronjob_permissions:
|
||||
#
|
||||
# - nis_user: roles/common/tasks/nis-install-server.yml
|
||||
|
||||
samba_workgroup: SPR
|
||||
samba_netbios_name: FILE-SPR
|
||||
|
||||
# samba_shares:
|
||||
# - name: Arbeitsrechtliches
|
||||
# comment:
|
||||
# path: /data/shares/Arbeitsrechtliches
|
||||
# browseable: !!str yes
|
||||
# read_only: !!str no
|
||||
# writeable: !!str yes
|
||||
# guest_ok: !!str no
|
||||
# file_create_mask: !!str 0660
|
||||
# dir_create_mask: !!str 2770
|
||||
# valid_users: '%S'
|
||||
# group_valid_users: mbr-finanzen
|
||||
# group_write_list: mbr-finanzen
|
||||
# vfs_object_recycle: true
|
||||
# recycle_path: '@Recycle.Bin'
|
||||
#
|
||||
samba_shares: []
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/system-user-systemfiles.yml
|
||||
|
||||
461
group_vars/flr.yml
Normal file
461
group_vars/flr.yml
Normal file
@ -0,0 +1,461 @@
|
||||
---
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/basic.yml
|
||||
# ==========
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/sshd.yml
|
||||
# ==========
|
||||
|
||||
sshd_permit_root_login: !!str "yes"
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/apt.yml
|
||||
# ==========
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/git.yml
|
||||
# ==========
|
||||
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/ntp.yml
|
||||
# ==========
|
||||
|
||||
# name or ip-adress from the (local) ntp server, mostly the gateway
|
||||
#
|
||||
ntp_server: gw-flr.flr.netz
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/nfs.yml
|
||||
# ==========
|
||||
|
||||
nfs_server: 192.168.102.10
|
||||
|
||||
# Set 'fs_encrypted' to true if filesystem lives on an encrypted
|
||||
# partition.
|
||||
#
|
||||
nfs_exports:
|
||||
- src: 192.168.102.10:/data/home
|
||||
path: /data/home
|
||||
mount_opts: users,rsize=8192,wsize=8192,hard,intr
|
||||
export_opt: rw,root_squash,sync,subtree_check
|
||||
export_networks:
|
||||
- 192.168.102.0/24
|
||||
- 10.0.102.0/24
|
||||
- 10.1.102.0/24
|
||||
- 192.168.63.0/24
|
||||
fs_encrypted: false
|
||||
use_fsid_option: true
|
||||
|
||||
- src: 192.168.102.10:/data/samba
|
||||
path: /data/home
|
||||
mount_opts: users,rsize=8192,wsize=8192,hard,intr
|
||||
export_opt: rw,root_squash,sync,subtree_check
|
||||
export_networks:
|
||||
- 192.168.102.0/24
|
||||
- 10.0.102.0/24
|
||||
- 10.1.102.0/24
|
||||
- 192.168.63.0/24
|
||||
fs_encrypted: false
|
||||
use_fsid_option: true
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/pure-ftpd-install.yml
|
||||
# ==========
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/system-user.yml
|
||||
# ==========
|
||||
|
||||
# ! Notice !
|
||||
#
|
||||
# On NIS supported Server put your users and groups in the
|
||||
# appropriate section for playbook 'nis-user.yml'
|
||||
#
|
||||
# ! Notice !
|
||||
|
||||
remove_system_users: []
|
||||
|
||||
system_users: []
|
||||
#system_users:
|
||||
# - name: sysadm
|
||||
# password: '9xFXkdPR_2'
|
||||
|
||||
system_groups: []
|
||||
|
||||
base_home: /home
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/nis-install-server.yml
|
||||
# vars used by roles/common/tasks/nis-user.yml
|
||||
# vars used by roles/common/tasks/nis-install-client.yml
|
||||
# ==========
|
||||
|
||||
# used by templates
|
||||
# - yp.conf.j2
|
||||
# - defaultdomain.j2
|
||||
nis_domain: flr.netz
|
||||
|
||||
nis_server_address: 192.168.102.10
|
||||
|
||||
nis_server_name: file-flr.flr.netz
|
||||
|
||||
nis_base_home: /data/home
|
||||
|
||||
nis_groups:
|
||||
- name: team
|
||||
group_id: 1030
|
||||
- name: esf-bleibnet
|
||||
group_id: 1031
|
||||
- name: amif
|
||||
group_id: 1032
|
||||
- name: quali
|
||||
group_id: 1033
|
||||
- name: aktion-mensch
|
||||
group_id: 1034
|
||||
- name: foerderung
|
||||
group_id: 1035
|
||||
- name: buchhaltung
|
||||
group_id: 1036
|
||||
- name: verwaltung
|
||||
group_id: 1037
|
||||
|
||||
remove_nis_users: []
|
||||
#remove_nis_users:
|
||||
# - name: test
|
||||
# - name: ivana
|
||||
|
||||
nis_user:
|
||||
|
||||
- name: chris
|
||||
groups:
|
||||
- team
|
||||
- esf-bleibnet
|
||||
- amif
|
||||
- quali
|
||||
- aktion-mensch
|
||||
- foerderung
|
||||
- buchhaltung
|
||||
- verwaltung
|
||||
is_samba_user: true
|
||||
password: !vault |
|
||||
$ANSIBLE_VAULT;1.1;AES256
|
||||
35653838343532663632326462656437363665316337316336316335383263633630616638313736
|
||||
3937666561356232666136646435613361336437303637360a353561316633373265323931623565
|
||||
32643966373962313334343565643130373535353238316161623837333130353231343332663930
|
||||
3638386337333636390a393738373935646638383237373663376434366361363938346335663438
|
||||
6637
|
||||
|
||||
- name: mara
|
||||
groups:
|
||||
- team
|
||||
- amif
|
||||
- quali
|
||||
is_samba_user: true
|
||||
password: '20/mara_16!'
|
||||
|
||||
- name: flr
|
||||
groups:
|
||||
- team
|
||||
- esf-bleibnet
|
||||
- amif
|
||||
- quali
|
||||
- aktion-mensch
|
||||
- foerderung
|
||||
- buchhaltung
|
||||
- verwaltung
|
||||
is_samba_user: true
|
||||
password: '20-flr-brb_18'
|
||||
|
||||
- name: hannah
|
||||
groups:
|
||||
- team
|
||||
- esf-bleibnet
|
||||
- amif
|
||||
- quali
|
||||
- aktion-mensch
|
||||
- foerderung
|
||||
- buchhaltung
|
||||
- verwaltung
|
||||
is_samba_user: true
|
||||
password: 'Y7ef%9+V_LoE'
|
||||
|
||||
- name: henrike
|
||||
groups:
|
||||
- amif
|
||||
- team
|
||||
is_samba_user: true
|
||||
password: '20%-hen-rike.22-!'
|
||||
|
||||
- name: kamue
|
||||
groups:
|
||||
- team
|
||||
- esf-bleibnet
|
||||
- amif
|
||||
- quali
|
||||
- aktion-mensch
|
||||
- foerderung
|
||||
- verwaltung
|
||||
is_samba_user: true
|
||||
password: '20_katha-mue%19'
|
||||
|
||||
- name: lotta
|
||||
groups:
|
||||
- team
|
||||
- amif
|
||||
is_samba_user: true
|
||||
password: '20_lotta_15!'
|
||||
|
||||
- name: mustafa
|
||||
groups:
|
||||
- team
|
||||
- aktion-mensch
|
||||
is_samba_user: true
|
||||
password: 'mu-20-sta-21_%!'
|
||||
|
||||
- name: kirstin
|
||||
groups:
|
||||
- team
|
||||
- aktion-mensch
|
||||
is_samba_user: true
|
||||
password: '20_kir-17-stin!'
|
||||
|
||||
- name: pierre
|
||||
groups:
|
||||
- team
|
||||
- esf-bleibnet
|
||||
is_samba_user: true
|
||||
password: '20_pierre16!20'
|
||||
|
||||
- name: vincent
|
||||
groups:
|
||||
- team
|
||||
- esf-bleibnet
|
||||
is_samba_user: true
|
||||
password: 'vin-20-cent_21!'
|
||||
|
||||
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/samba-install.yml
|
||||
# ==========
|
||||
|
||||
samba_server: file-flr.flr.netz
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/samba-user.yml
|
||||
# ==========
|
||||
|
||||
# ! Notice !
|
||||
#
|
||||
# variables used from other previos sections:
|
||||
#
|
||||
# - remove_system_users: roles/common/tasks/system-user.yml
|
||||
# - remove_nis_users: roles/common/tasks/nis-install-server.yml
|
||||
# - nis_user: roles/common/tasks/nis-install-server.yml
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/mount_samba_shares.yml
|
||||
# ==========
|
||||
|
||||
# ! Notice !
|
||||
#
|
||||
# variables used from other previos sections:
|
||||
#
|
||||
# - nis_user: roles/common/tasks/nis-install-server.yml
|
||||
|
||||
samba_workgroup: FLR
|
||||
samba_netbios_name: FILE-FLR
|
||||
|
||||
samba_shares:
|
||||
- name: Team
|
||||
path: /data/samba/Team
|
||||
group_valid_users: team
|
||||
group_write_list: team
|
||||
file_create_mask: '0660'
|
||||
dir_create_mask: '2770'
|
||||
vfs_object_recycle: true
|
||||
recycle_path: '@Recycle.Bin'
|
||||
user:
|
||||
- chris
|
||||
- flr
|
||||
- hannah
|
||||
- henrike
|
||||
- kamue
|
||||
- kirstin
|
||||
- mara
|
||||
- lotta
|
||||
- mustafa
|
||||
- pierre
|
||||
- vincent
|
||||
|
||||
- name: ESF-BleibNet
|
||||
path: /data/samba/ESF-BleibNet
|
||||
group_valid_users: esf-bleibnet
|
||||
group_write_list: esf-bleibnet
|
||||
file_create_mask: '0660'
|
||||
dir_create_mask: '2770'
|
||||
vfs_object_recycle: true
|
||||
recycle_path: '@Recycle.Bin'
|
||||
user:
|
||||
- chris
|
||||
- hannah
|
||||
- henrike
|
||||
- kamue
|
||||
- pierre
|
||||
- vincent
|
||||
|
||||
- name: AMIF
|
||||
path: /data/samba/AMIF
|
||||
group_valid_users: amif
|
||||
group_write_list: amif
|
||||
file_create_mask: '0660'
|
||||
dir_create_mask: '2770'
|
||||
vfs_object_recycle: true
|
||||
recycle_path: '@Recycle.Bin'
|
||||
user:
|
||||
- chris
|
||||
- hannah
|
||||
- kamue
|
||||
- lotta
|
||||
- mara
|
||||
|
||||
- name: Quali
|
||||
path: /data/samba/Quali
|
||||
group_valid_users: quali
|
||||
group_write_list: quali
|
||||
file_create_mask: '0660'
|
||||
dir_create_mask: '2770'
|
||||
vfs_object_recycle: true
|
||||
recycle_path: '@Recycle.Bin'
|
||||
user:
|
||||
- chris
|
||||
- hannah
|
||||
- kamue
|
||||
- mara
|
||||
|
||||
- name: Aktion-Mensch
|
||||
path: /data/samba/Aktion-Mensch
|
||||
group_valid_users: aktion-mensch
|
||||
group_write_list: aktion-mensch
|
||||
file_create_mask: '0660'
|
||||
dir_create_mask: '2770'
|
||||
vfs_object_recycle: true
|
||||
recycle_path: '@Recycle.Bin'
|
||||
user:
|
||||
- chris
|
||||
- hannah
|
||||
- kamue
|
||||
- kirstin
|
||||
- mustafa
|
||||
|
||||
- name: Strukturfoerderung-und-Archiv-Projekte
|
||||
path: /data/samba/Strukturfoerderung-und-Archiv-Projekte
|
||||
group_valid_users: foerderung
|
||||
group_write_list: foerderung
|
||||
file_create_mask: '0660'
|
||||
dir_create_mask: '2770'
|
||||
vfs_object_recycle: true
|
||||
recycle_path: '@Recycle.Bin'
|
||||
user:
|
||||
- chris
|
||||
- hannah
|
||||
- kamue
|
||||
|
||||
- name: Buchhaltung
|
||||
path: /data/samba/Buchhaltung
|
||||
group_valid_users: buchhaltung
|
||||
group_write_list: buchhaltung
|
||||
file_create_mask: '0660'
|
||||
dir_create_mask: '2770'
|
||||
vfs_object_recycle: true
|
||||
recycle_path: '@Recycle.Bin'
|
||||
user:
|
||||
- chris
|
||||
- hannah
|
||||
|
||||
- name: Verwaltung
|
||||
path: /data/samba/Verwaltung
|
||||
group_valid_users: verwaltung
|
||||
group_write_list: verwaltung
|
||||
file_create_mask: '0660'
|
||||
dir_create_mask: '2770'
|
||||
vfs_object_recycle: true
|
||||
recycle_path: '@Recycle.Bin'
|
||||
user:
|
||||
- chris
|
||||
- hannah
|
||||
- kamue
|
||||
|
||||
- name: Install
|
||||
path: /data/samba/Install
|
||||
group_valid_users: team
|
||||
group_write_list: team
|
||||
file_create_mask: '0660'
|
||||
dir_create_mask: '2770'
|
||||
vfs_object_recycle: true
|
||||
recycle_path: '@Recycle.Bin'
|
||||
user:
|
||||
- chris
|
||||
- hannah
|
||||
- kamue
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/system-user-systemfiles.yml
|
||||
# ==========
|
||||
|
||||
# ! Notice !
|
||||
#
|
||||
# variables used from other previos sections:
|
||||
#
|
||||
# - system_users: roles/common/tasks/system-user.yml
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/nis-user-systemfiles.yml
|
||||
# ==========
|
||||
|
||||
# ! Notice !
|
||||
#
|
||||
# variables used from other previos sections:
|
||||
#
|
||||
# - nis_user: roles/common/tasks/nis-install-server.yml
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/sudoers-pc.yml
|
||||
# ==========
|
||||
|
||||
sudo_pc_users:
|
||||
- chris
|
||||
- sysadm
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/sudoers-server.yml
|
||||
# ==========
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/ubuntu-x11vnc-1604-amd64.yml
|
||||
# vars used by roles/common/tasks/ubuntu-x11vnc-1804-amd64.yml
|
||||
# ==========
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/luks.yml
|
||||
# ==========
|
||||
|
||||
@ -22,6 +22,11 @@ sshd_permit_root_login: !!str "prohibit-password"
|
||||
# ==========
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/cups-install.yml
|
||||
# ==========
|
||||
|
||||
|
||||
# ==========
|
||||
# vars used by roles/common/tasks/ntp.yml
|
||||
# ==========
|
||||
|
||||
@ -430,6 +430,7 @@ samba_server: file-spr.sprachenatelier.netz
|
||||
|
||||
samba_workgroup: SPR
|
||||
samba_netbios_name: FILE-SPR
|
||||
samba_server_min_protocol: !!str NT1
|
||||
|
||||
samba_shares:
|
||||
|
||||
|
||||
Reference in New Issue
Block a user