---

# ==========
# vars used by roles/common/tasks/basic.yml
# ==========


# ==========
# vars used by roles/common/tasks/sshd.yml
# ==========

sshd_permit_root_login: !!str "yes"


# ==========
# vars used by roles/common/tasks/apt.yml
# ==========


# ==========
# vars used by roles/common/tasks/git.yml
# ==========


# ==========
# vars used by roles/common/tasks/ntp.yml
# ==========

# name or ip-adress from the (local) ntp server, mostly the gateway
#
ntp_server: gw-spr.sprachenatelier.netz


# ==========
# vars used by roles/common/tasks/nfs.yml
# ==========

nfs_server: 192.168.92.10

nfs_start_servers: 16

# Set 'fs_encrypted' to true if filesystem lives on an encrypted
# partition.
#
# NOTE !!
#    Take car to increase 'fsid' in case of more than one export
#
nfs_exports:
   - src: 192.168.92.10:/data/home
     path: /data/home
     mount_opts: users,rsize=8192,wsize=8192,hard,intr
     export_opt: rw,root_squash,sync,subtree_check
     export_networks:
       - 192.168.92.0/24
       - 10.0.92.0/24
       - 10.1.92.0/24
       - 192.168.63.0/24
     fs_encrypted: false

   - src: 192.168.92.10:/data/samba
     path: /data/samba
     mount_opts: users,rsize=8192,wsize=8192,hard,intr
     export_opt: rw,root_squash,sync,subtree_check
     export_networks:
       - 192.168.92.0/24
       - 10.0.92.0/24
       - 10.1.92.0/24
       - 192.168.63.0/24
     fs_encrypted: false


# ==========
# vars used by roles/common/tasks/system-user.yml
# ==========

# ! Notice !
#
# On NIS supported Server put your users and groups in the
# appropriate section for playbook 'nis-user.yml'
#
# ! Notice !

remove_system_users: []
#remove_system_users:
#  - name: test
#  - name: jennifer.prost

system_users: []
#system_users:
#  - name: sysadm
#    password: '9xFXkdPR_2'

system_groups: []

base_home: /home


# ==========
# vars used by roles/common/tasks/nis-install-server.yml
# vars used by roles/common/tasks/nis-user.yml
# vars used by roles/common/tasks/nis-install-client.yml
# ==========

# used by templates
#    - yp.conf.j2
#    - defaultdomain.j2
nis_domain: sprachenatelier.netz

# also used by template
#
nis_server_address: 192.168.92.10

nis_server_name: file-spr.sprachenatelier.netz

nis_base_home: /data/home

nis_groups:
  - name: intern
    group_id: 1100
  - name: buero
    group_id: 1110
  - name: no-backup
    group_id: 1120

#remove_nis_users:
#  - name: lea
#  - name: alina
remove_nis_users: []

nis_user:
  - name: chris
    groups:
      - intern
      - buero
      - no-backup
    is_samba_user: true
    password: !vault |
          $ANSIBLE_VAULT;1.1;AES256
          35653838343532663632326462656437363665316337316336316335383263633630616638313736
          3937666561356232666136646435613361336437303637360a353561316633373265323931623565
          32643966373962313334343565643130373535353238316161623837333130353231343332663930
          3638386337333636390a393738373935646638383237373663376434366361363938346335663438
          6637

  - name: anahit
    groups:
      - intern
      - buero
    is_samba_user: true
    password: '150290'

  - name: andrea
    groups:
      - intern
      - buero
      - lpadmin
    is_samba_user: true
    password: 'kurse2010'

  - name: bueropraktikum
    groups:
      - intern
      - buero
    is_samba_user: true
    password: 's2016bp'

  - name: chema
    groups:
      - intern
      - buero
    is_samba_user: true
    password: 'spa2014'

  - name: daniel
    groups:
      - intern
      - buero
    is_samba_user: true
    password: '210984'

  - name: eva
    groups:
      - intern
      - buero
    is_samba_user: true
    password: '250791'

  - name: isadora
    groups:
      - intern
      - buero
    is_samba_user: true
    password: '270988'

  - name: janet
    groups:
      - intern
      - buero
    is_samba_user: true
    password: '211085 '

  - name: jessica
    groups:
      - intern
      - buero
    is_samba_user: true
    password: '200594'

  - name: konstantin
    groups:
      - intern
      - buero
    is_samba_user: true
    password: '100978'

  - name: lena
    groups:
      - no-backup
      - buero
    is_samba_user: true
    password: '6-uXi-wc/CM3'

  - name: lara
    groups:
      - intern
      - buero
      - lpadmin
    is_samba_user: true
    password: 'sommer13'

  - name: linda
    groups:
      - intern
      - buero
    is_samba_user: true
    password: '050381'

  - name: margit
    groups:
      - intern
      - buero
      - no-backup
      - lpadmin
    is_samba_user: true
    password: 'beelen10'

  - name: mariam
    groups:
      - intern
      - buero
    is_samba_user: true
    password: '240991'

  - name: matija
    groups:
      - intern
      - buero
    is_samba_user: true
    password: '010985'

  - name: musa
    groups:
      - intern
      - buero
      - no-backup
      - lpadmin
    is_samba_user: true
    password: 'bermu18'

  - name: praktikant1
    groups:
      - buero
    is_samba_user: true
    password: 'praktikant1'

  - name: praktikant2
    groups:
      - buero
    is_samba_user: true
    password: 'praktikant2'

  - name: praktikant3
    groups:
      - buero
    is_samba_user: true
    password: 'praktikant3'

  - name: praktikant4
    groups:
      - buero
    is_samba_user: true
    password: 'praktikant4'

  - name: praktikant5
    groups:
      - buero
    is_samba_user: true
    password: 'praktikant5'

  - name: praktikant6
    groups:
      - buero
    is_samba_user: true
    password: 'praktikant6'

  - name: s1
    groups: []
    is_samba_user: false
    password: 's1'

  - name: s2
    groups: []
    is_samba_user: false
    password: 's2'

  - name: s3
    groups: []
    is_samba_user: false
    password: 's3'

  - name: s4
    groups: []
    is_samba_user: false
    password: 's4'

  - name: s5
    groups: []
    is_samba_user: false
    password: 's5'

  - name: s6
    groups: []
    is_samba_user: false
    password: 's6'

  - name: saravic
    groups:
      - intern
      - buero
    is_samba_user: true
    password: '2408'

  - name: simone
    groups:
      - intern
      - buero
    is_samba_user: true
    password: '031189'

  - name: tali
    groups:
      - intern
      - buero
    is_samba_user: true
    password: '220686'

  - name: yang
    groups:
      - intern
      - buero
    is_samba_user: true
    password: '300195'


# deleted users
#
#  - name: marei
#    groups:
#      - intern
#      - buero
#    is_samba_user: true
#    password: '220792'
#
#  - name: virginia
#    groups:
#      - intern
#      - buero
#    is_samba_user: true
#    password: '160292'
#
#  - name: alina
#    groups:
#      - intern
#      - buero
#    is_samba_user: true
#    password: '140686'
#
#  - name: hannah
#    groups:
#      - intern
#      - buero
#    is_samba_user: true
#    password: '28031973'
#
#  - name: kristin
#    groups:
#      - intern
#      - buero
#    is_samba_user: true
#    password: '49371'
#
#  - name: thea
#    groups:
#      - intern
#      - buero
#    is_samba_user: true
#    password: '060995'
#
#  - name: katrine
#    groups:
#      - intern
#      - buero
#    is_samba_user: true
#    password: '200290'


# ==========
# vars used by roles/common/tasks/samba-install.yml
# ==========

samba_server: file-spr.sprachenatelier.netz
samba_server_ip: 192.168.92.10
samba_server_cidr_prefix: 24


# ==========
# vars used by roles/common/tasks/samba-user.yml
# ==========

# ! Notice !
#
# variables used from other previos sections:
#
#    - remove_system_users:   roles/common/tasks/system-user.yml
#    - remove_nis_users:      roles/common/tasks/nis-install-server.yml
#    - nis_user:              roles/common/tasks/nis-install-server.yml


# ==========
# vars used by roles/common/tasks/mount_samba_shares.yml
# ==========

# ! Notice !
#
# variables used from other previos sections:
#
#    - nis_user:              roles/common/tasks/nis-install-server.yml

samba_workgroup: SPR
samba_netbios_name: FILE-SPR
samba_server_min_protocol: !!str NT1

samba_shares:

  - name: Transfer
    path: /data/samba/transfer
    group_valid_users: buero
    group_write_list: buero
    file_create_mask: '0660'
    dir_create_mask: '2770'
    vfs_object_recycle: true
    recycle_path: '@Recycle.Bin'
    user:
      - anahit
      - andrea
      - bueropraktikum
      - chema
      - chris
      - daniel
      - eva
      - isadora
      - jessica
      - konstantin
      - lara
      - lena
      - linda
      - margit
      - mariam
      - matija
      - musa
      - praktikant1
      - praktikant2
      - praktikant3
      - praktikant4
      - praktikant5
      - praktikant6
      - saravic
      - sysadm
      - simone
      - tali
      - yang

  - name: Verwaltung
    path: /data/samba/verwaltung
    group_valid_users: intern
    group_write_list: intern
    file_create_mask: '0660'
    dir_create_mask: '2770'
    vfs_object_recycle: true
    recycle_path: '@Recycle.Bin'
    user:
      - anahit
      - andrea
      - bueropraktikum
      - chema
      - chris
      - daniel
      - eva
      - isadora
      - jessica
      - konstantin
      - lara
      - linda
      - margit
      - mariam
      - matija
      - musa
      - saravic
      - sysadm
      - simone
      - tali
      - yang

  - name: Multimedia
    path: /data/samba/no-backup-share/multimedia
    group_valid_users: no-backup
    group_write_list: no-backup
    file_create_mask: '0660'
    dir_create_mask: '2770'
    vfs_object_recycle: true
    recycle_path: '@Recycle.Bin'
    user:
      - chris
      - margit
      - musa


# ==========
# vars used by roles/common/tasks/system-user-systemfiles.yml
# ==========

# ! Notice !
#
# variables used from other previos sections:
#
#    - system_users:          roles/common/tasks/system-user.yml


# ==========
# vars used by roles/common/tasks/nis-user-systemfiles.yml
# ==========

# ! Notice !
#
# variables used from other previos sections:
#
#    - nis_user:              roles/common/tasks/nis-install-server.yml


# ==========
# vars used by roles/common/tasks/sudoers-pc.yml
# ==========

sudo_pc_users:
  - local
  - chris
  - sysadm
  - localadmin


# ==========
# vars used by roles/common/tasks/sudoers-server.yml
# ==========


# ==========
# vars used by roles/common/tasks/ubuntu-x11vnc-1604-amd64.yml
# vars used by roles/common/tasks/ubuntu-x11vnc-1804-amd64.yml
# ==========


# ==========
# vars used by roles/common/tasks/luks.yml
# ==========