update..

2024-01-15 01:08:11 +01:00
parent c04e3070cd
commit b009cf5787
24 changed files with 501 additions and 31 deletions
--- a/group_vars/all/main.yml
+++ b/group_vars/all/main.yml
@ -34,7 +34,66 @@ locales:
  - en_US.UTF-8
  - de_DE.UTF-8

-set_default_limit_nofile: false
+#copy_plain_files_security_limits: []
+copy_plain_files_security_limits:
+
+  # /etc/security/limits.d/*.conf
+  #
+  - name: 90-user-NOFILE.conf
+    src_path: etc/security/limits.d/90-user-NOFILE.conf
+    dest_path: /etc/security/limits.d/90-user-NOFILE.conf
+
+
+#copy_plain_files_systemd: []
+copy_plain_files_systemd:
+
+  # /etc/systemd/system.conf.d/*.conf
+  #
+  - name: DefaultLimitNOFILE
+    src_path: etc/systemd/system.conf.d/20-DefaultLimitNOFILE.conf
+    dest_path: /etc/systemd/system.conf.d/20-DefaultLimitNOFILE.conf
+
+  - name: DefaultTasksMax
+    src_path: etc/systemd/system.conf.d/20-DefaultTasksMax.conf
+    dest_path: /etc/systemd/system.conf.d/20-DefaultTasksMax.conf
+
+  - name: DefaultLimitCORE
+    src_path: etc/systemd/system.conf.d/20-DefaultLimitCORE.conf
+    dest_path: /etc/systemd/system.conf.d/20-DefaultLimitCORE.conf
+
+  - name: DefaultLimitNPROC
+    src_path: etc/systemd/system.conf.d/20-DefaultLimitNPROC.conf
+    dest_path: /etc/systemd/system.conf.d/20-DefaultLimitNPROC.conf
+
+  - name: DefaultLimitRTPRIO
+    src_path: etc/systemd/system.conf.d/20-DefaultLimitRTPRIO.conf
+    dest_path: /etc/systemd/system.conf.d/20-DefaultLimitRTPRIO.conf
+
+  - name: DefaultLimitRTTIME
+    src_path: etc/systemd/system.conf.d/20-DefaultLimitRTTIME.conf
+    dest_path: /etc/systemd/system.conf.d/20-DefaultLimitRTTIME.conf
+
+
+#copy_plain_files_journald: []
+copy_plain_files_journald:
+
+   - name: SystemMaxUse
+     src_path: etc/systemd/journald.conf.d/50-SystemMaxUse.conf
+     dest_path: /etc/systemd/journald.conf.d/50-SystemMaxUse.conf
+
+   - name: SystemMaxFileSize
+     src_path: etc/systemd/journald.conf.d/50-SystemMaxFileSize.conf
+     dest_path: /etc/systemd/journald.conf.d/50-SystemMaxFileSize.conf
+
+   - name: MaxFileSec
+     src_path: etc/systemd/journald.conf.d/50-MaxFileSec.conf
+     dest_path: /etc/systemd/journald.conf.d/50-MaxFileSec.conf
+
+
+
+#copy_plain_files_sysctl: []
+
+#set_default_limit_nofile: false


 # ==========