--- # ========== # vars used by roles/common/tasks/basic.yml # ========== # ========== # vars used by roles/common/tasks/sshd.yml # ========== sshd_permit_root_login: !!str "prohibit-password" # ========== # vars used by roles/common/tasks/apt.yml # ========== # ========== # vars used by roles/common/tasks/git.yml # ========== # ========== # vars used by roles/common/tasks/cups-install.yml # ========== # ========== # vars used by roles/common/tasks/ntp.yml # ========== # name or ip-adress from the (local) ntp server, mostly the gateway # ntp_server: gw-mbr.mbr-bln.netz # ========== # vars used by roles/common/tasks/nfs.yml # ========== nfs_server: 192.168.112.10 # Set 'fs_encrypted' to true if filesystem lives on an encrypted # partition. # # NOTE !! # Take car to increase 'fsid' in case of more than one export # nfs_exports: - src: 192.168.112.10:/data/home path: /data/home mount_opts: users,rsize=8192,wsize=8192,hard,intr export_opt: rw,root_squash,sync,subtree_check export_networks: - 192.168.112.0/24 - 10.0.112.0/24 - 10.1.112.0/24 - 192.168.63.0/24 use_fsid_option: true - src: 192.168.112.10:/data/shares path: /data/shares mount_opts: users,rsize=8192,wsize=8192,hard,intr export_opt: rw,root_squash,sync,subtree_check export_networks: - 192.168.112.0/24 - 10.0.112.0/24 - 10.1.112.0/24 - 192.168.63.0/24 use_fsid_option: true # ========== # vars used by roles/common/tasks/system-user.yml # ========== # ! Notice ! # # On NIS supported Server put your users and groups in the # appropriate section for playbook 'nis-user.yml' # # ! Notice ! remove_system_users: [] #remove_system_users: # - name: test # - name: jennifer.prost system_users: [] #system_users: # - name: sysadm # password: '9xFXkdPR_2' system_groups: [] base_home: /home # ========== # vars used by roles/common/tasks/nis-install-server.yml # vars used by roles/common/tasks/nis-user.yml # vars used by roles/common/tasks/nis-install-client.yml # ========== # used by templates # - yp.conf.j2 # - defaultdomain.j2 nis_domain: mbr-bln.netz # also used by template # - yp.conf.j2 nis_server_address: 192.168.112.10 nis_server_name: file-mbr.mbr-bln.netz nis_base_home: /data/home nis_groups: - name: technik group_id: 1100 - name: mbr-buero group_id: 1200 - name: mbr-finanzen-personal group_id: 1210 - name: mbr-kamera group_id: 1250 - name: mbr-admins group_id: 1260 - name: ag-antisem group_id: 1270 - name: vdk group_id: 1300 - name: rias-berlin group_id: 1400 - name: rias-berlin-finanzen-personal group_id: 1420 - name: rias-bund group_id: 1430 - name: rias-bund-finanzen-personal group_id: 1410 - name: bgn group_id: 1500 - name: bgn-finanzen-personal group_id: 1510 - name: regishut group_id: 1600 - name: regishut-personal-finanzen group_id: 1610 - name: buero-scan group_id: 1700 - name: bmb group_id: 1800 - name: all-users group_id: 1900 - name: betriebsrat group_id: 2000 #nis_groups: # - name: mbr-finanzen (wird zu vdk) # group_id: 1210 # - name: mbr-personal (wird zu mbr-finanzen-personal) # group_id: 1220 remove_nis_users: [] #remove_nis_users: # - name: test # - name: jennifer.prost nis_user: - name: chris groups: - technik - mbr-buero - mbr-finanzen-personal - mbr-kamera - mbr-admins - ag-antisem - vdk - rias-berlin - rias-berlin-finanzen-personal - rias-bund - rias-bund-finanzen-personal - bgn - bgn-finanzen-personal - regishut - regishut-personal-finanzen - buero-scan - bmb - all-users - betriebsrat is_samba_user: true password: !vault | $ANSIBLE_VAULT;1.1;AES256 35653838343532663632326462656437363665316337316336316335383263633630616638313736 3937666561356232666136646435613361336437303637360a353561316633373265323931623565 32643966373962313334343565643130373535353238316161623837333130353231343332663930 3638386337333636390a393738373935646638383237373663376434366361363938346335663438 6637 - name: lokaladmin groups: - technik - mbr-buero - mbr-finanzen-personal - mbr-kamera - mbr-admins - ag-antisem - vdk - rias-berlin - rias-berlin-finanzen-personal - rias-bund - rias-bund-finanzen-personal - bgn - bgn-finanzen-personal - regishut - regishut-personal-finanzen - buero-scan - bmb - all-users - betriebsrat is_samba_user: true password: 'd4r1usz' - name: sysadm groups: - technik - mbr-buero - mbr-finanzen-personal - mbr-kamera - mbr-admins - ag-antisem - vdk - rias-berlin - rias-berlin-finanzen-personal - rias-bund - rias-bund-finanzen-personal - bgn - bgn-finanzen-personal - regishut - regishut-personal-finanzen - buero-scan - bmb - all-users - betriebsrat is_samba_user: true password: 'KPk_Wf2F' - name: axis groups: - mbr-kamera is_samba_user: true password: '20_axis_16' - name: scan groups: - buero-scan is_samba_user: true password: '20scan13' # --- # Technik # --- - name: leah.vauth groups: - all-users - buero-scan - technik is_samba_user: true password: 'cgsRq9-IP.X2' - name: pierre.ahrent groups: - all-users - buero-scan - technik is_samba_user: true password: 'GYiI3-s/_7wG' # --- # Verwaltung # --- - name: anne groups: - all-users - buero-scan - vdk - bgn - bgn-finanzen-personal - mbr-buero - mbr-finanzen-personal - rias-bund - rias-bund-finanzen-personal - rias-berlin - rias-berlin-finanzen-personal - regishut - regishut-personal-finanzen is_samba_user: true password: 'YA!LiLiC0MP5' - name: bianca groups: - all-users - buero-scan - technik - ag-antisem - vdk - bgn - bgn-finanzen-personal - bmb - mbr-buero - mbr-finanzen-personal - rias-bund - rias-bund-finanzen-personal - rias-berlin - rias-berlin-finanzen-personal - regishut - regishut-personal-finanzen is_samba_user: true password: '73_BiBole_29' - name: birgit.erhardt groups: - all-users - buero-scan - vdk - bgn - bgn-finanzen-personal - mbr-buero - rias-bund - rias-bund-finanzen-personal - rias-berlin - rias-berlin-finanzen-personal is_samba_user: true password: '20_purpel!rain_17' - name: christina.wendt groups: - all-users - buero-scan - vdk - bgn - bgn-finanzen-personal - mbr-buero - mbr-finanzen-personal - rias-bund - rias-bund-finanzen-personal - rias-berlin - rias-berlin-finanzen-personal - regishut - regishut-personal-finanzen is_samba_user: true password: '8!Varianten' - name: janine.budich groups: - all-users - buero-scan - technik - ag-antisem - vdk - bgn - bgn-finanzen-personal - bmb - mbr-buero - mbr-finanzen-personal - rias-bund - rias-bund-finanzen-personal - rias-berlin - rias-berlin-finanzen-personal - regishut - regishut-personal-finanzen is_samba_user: true password: 'LoS_r3f_20_AS!' - name: isabell.wiesner groups: - all-users - buero-scan - vdk - bgn - bgn-finanzen-personal - mbr-buero - mbr-finanzen-personal - rias-bund - rias-bund-finanzen-personal - rias-berlin - rias-berlin-finanzen-personal - regishut - regishut-personal-finanzen is_samba_user: true password: 'XY_bunt_2020!' - name: leonie.rupp groups: - all-users - buero-scan - rias-bund - rias-bund-finanzen-personal - rias-berlin - rias-berlin-finanzen-personal is_samba_user: true password: '3jzs.wv-4TX/' - name: swetlana.nikitenko groups: - all-users - buero-scan - vdk - bgn-finanzen-personal - mbr-finanzen-personal - rias-bund-finanzen-personal - rias-berlin-finanzen-personal - regishut-personal-finanzen is_samba_user: true password: 'Ji53-dA.nwGz' # --- # BgN # --- - name: bgn_mitarbeiter_in_3 groups: - all-users - buero-scan is_samba_user: true password: 'frueh_FREI_22!' - name: karim.khan groups: - all-users - buero-scan - bgn - bgn-finanzen-personal is_samba_user: true password: 'g6Gb/J.fZU9F' - name: laura.berner groups: - all-users - betriebsrat - buero-scan - bgn - bgn-finanzen-personal - mbr-buero is_samba_user: true password: 'WAS_22_informi3r3n!' - name: theresa.kuehnert groups: - all-users - buero-scan - bgn is_samba_user: true password: 'sf-j.zjP46Fn' - name: praktikum.bgn1 groups: - all-users - buero-scan is_samba_user: true password: 'MPL_baerin_20!' - name: theresa.kuehnert groups: - all-users - buero-scan - bgn is_samba_user: true password: 'YZ_bgn_2020!' - name: ulf.balmer groups: - all-users - buero-scan - technik - bgn - bgn-finanzen-personal - mbr-buero is_samba_user: true password: 'ALL3_e6ene#' # --- # BMB # --- - name: jennifer.pross groups: - all-users - buero-scan - bmb is_samba_user: true password: 'V-S9Y/R+Am7H' # --- # MBR # --- - name: anna.mueller1 groups: - all-users - buero-scan - technik - mbr-buero is_samba_user: true password: '5xp5ll9ar13us!' - name: doku.mbr2 groups: - all-users - buero-scan - mbr-buero is_samba_user: true password: '*M0ss4d*' - name: doku.mbr4 groups: - all-users - buero-scan - mbr-buero is_samba_user: true password: 'PwmNvPh9KM4T' - name: doku.mbr5 groups: - all-users - buero-scan - betriebsrat - mbr-buero is_samba_user: true password: 'G6Hz.ev/e24E' - name: felix.mueller groups: - all-users - betriebsrat - buero-scan - technik - mbr-buero is_samba_user: true password: 'U_i5zAR5H+ti' - name: franziska.schilling groups: - all-users - buero-scan - mbr-buero is_samba_user: true password: 'L.35c-CgvZn3' - name: hamid.mohseni groups: - all-users - buero-scan - mbr-buero is_samba_user: true password: 'TFhCW9J4Vn4F' - name: honorar.mbr1 groups: - all-users - buero-scan - mbr-buero is_samba_user: true password: '_F313r4b3nd*' - name: honorar.mbr2 groups: - all-users - buero-scan - mbr-buero is_samba_user: true password: 'kQviLU-4rA_2' - name: isabella.greif groups: - all-users - buero-scan - mbr-buero is_samba_user: true password: '5zv-Bo2.Cio9' - name: johannes.radke groups: - all-users - buero-scan - mbr-buero is_samba_user: true password: 'Furzf4brik!' - name: judith.heinmueller groups: - all-users - buero-scan - mbr-buero is_samba_user: true password: 't32_aHxV.' - name: kerstin.kuballa groups: - all-users - buero-scan - ag-antisem - mbr-buero is_samba_user: true password: 'sVY2_2t+a+db' - name: laura.poerzgen groups: - all-users - ag-antisem - buero-scan - mbr-buero - regishut is_samba_user: true password: 's9U.3xo-5Vq6' - name: manja.kasten groups: - all-users - betriebsrat - buero-scan - mbr-buero is_samba_user: true password: 'Rasili_&n' - name: mathias groups: - all-users - buero-scan - ag-antisem - mbr-buero is_samba_user: true password: 'p3r*45p3r4*4d*45tr4m' - name: matthias.mueller groups: - all-users - buero-scan - ag-antisem - mbr-buero is_samba_user: true password: 'V1v@H@f3rdr1nk' - name: michael.sulies groups: - all-users - betriebsrat - buero-scan - ag-antisem - mbr-buero is_samba_user: true password: 'Cryst4lp4l4c3' - name: nina.rink groups: - all-users - betriebsrat - buero-scan - mbr-buero is_samba_user: true password: 'BMW_mobit_2020!' - name: praktikum.mbr1 groups: - all-users - buero-scan - mbr-buero is_samba_user: true password: '2001_RAT_urban!' - name: praktikum.mbr2 groups: - all-users - buero-scan - mbr-buero is_samba_user: true password: '20praktikum213' # - name: samuel.signer # groups: # - all-users # - buero-scan # - mbr-buero # is_samba_user: true # password: 'S4mmyC0mput3r!' - name: simon groups: - all-users - buero-scan - ag-antisem - betriebsrat - mbr-buero is_samba_user: true password: 'S4u3rkr4ut!' # --- # RIAS Berlin und Bund # --- - name: andreas.nowak groups: - all-users - buero-scan - rias-bund is_samba_user: true password: 'N/m3/UM/362b' - name: alexander.rasumny groups: - all-users - buero-scan - rias-bund - rias-berlin is_samba_user: true password: 'twT9Rjbv9mjq' - name: benjamin groups: - all-users - buero-scan - technik - ag-antisem - rias-bund - rias-bund-finanzen-personal - rias-berlin - rias-berlin-finanzen-personal is_samba_user: true password: 'C2-0U#ch' - name: bianca.loy groups: - all-users - buero-scan - ag-antisem - rias-bund - rias-berlin is_samba_user: true password: 'ctnrk3CczcJ9' - name: christian.obermueller groups: - all-users - buero-scan - ag-antisem - rias-berlin is_samba_user: true password: 'i6...rs2ILRn' - name: colin.kaggl groups: - all-users - buero-scan - ag-antisem - rias-bund - rias-berlin is_samba_user: true password: '3ZvY-I3-Z.2v' - name: daniel.poensgen groups: - all-users - buero-scan - ag-antisem - rias-bund - rias-berlin is_samba_user: true password: 'rcMRCm7jcpbp' - name: dora.streibl groups: - all-users - buero-scan - technik - ag-antisem - rias-bund - rias-berlin is_samba_user: true password: '6jA,nmD,fdK!' # - name: dorina.feldmann # groups: # - all-users # - buero-scan # - rias-bund # - rias-berlin # is_samba_user: true # password: '17?4XPQ_!abc' - name: franz.mohorn groups: - buero-scan - ag-antisem - rias-bund - rias-berlin is_samba_user: true password: 'Kq5/b.4uWZIV' - name: frederick.kannenberg groups: - all-users - buero-scan - ag-antisem - rias-bund - rias-berlin is_samba_user: true password: 'riasFK2019!#' - name: honorar.rias1 groups: - all-users - buero-scan - ag-antisem - rias-bund - rias-berlin is_samba_user: true password: '6jA,nmD,fdK!' - name: jonas.empen groups: - all-users - buero-scan - rias-berlin is_samba_user: true password: 'GN-E.fd6w6n%' - name: julia.kopp groups: - all-users - buero-scan - ag-antisem - rias-bund - rias-berlin - rias-berlin-finanzen-personal is_samba_user: true password: '-a2%3bTzkW.A' - name: julius.gruber groups: - all-users - buero-scan - ag-antisem - rias-bund - rias-berlin is_samba_user: true password: 'uY-SbLux-4a9' - name: katharina.zachrau groups: - all-users - buero-scan - ag-antisem - rias-bund - rias-berlin is_samba_user: true password: '3X.mf/U3NXKe' - name: leeor.fink groups: - all-users - buero-scan - rias-bund is_samba_user: true password: 'c.s7-ruA7NEo' - name: marco.siegmund groups: - all-users - buero-scan - ag-antisem - rias-bund - rias-berlin is_samba_user: true password: 'fTy-AY52.F-p' # - name: pia.lamberty # groups: # - all-users # - buero-scan # - rias-bund # - rias-berlin # is_samba_user: true # password: 'oasd31*as+Q%' - name: praktikum.rias1 groups: - all-users - buero-scan - ag-antisem - rias-bund - rias-berlin is_samba_user: true password: '7z7F%d3cv_dfjz' - name: praktikum.rias2 groups: - all-users - buero-scan - ag-antisem - rias-bund - rias-berlin is_samba_user: true password: 'Q56V.6kf/JLQ' - name: ruth.hatlapa groups: - all-users - buero-scan - technik - ag-antisem - rias-bund - rias-berlin - rias-berlin-finanzen-personal is_samba_user: true password: 'q2Sc.C7-6hZR' - name: tanja.kinzel groups: - all-users - buero-scan - ag-antisem - rias-bund - rias-berlin is_samba_user: true password: 'sd7/SAqzU+Qi' - name: till.hendlmeier groups: - all-users - buero-scan - ag-antisem - rias-bund - rias-berlin is_samba_user: true password: '3/+v_7AGivxc' - name: vanessa.gelardo groups: - all-users - buero-scan - rias-bund is_samba_user: true password: 'Vr.6v/4hWZEm' # --- # Regishut # --- - name: alexander.lorenz.milord groups: - all-users - buero-scan - technik - regishut - regishut-personal-finanzen is_samba_user: true password: 'R3GI_20_poliz_!' - name: alexander.steder groups: - all-users - buero-scan - regishut is_samba_user: true password: 'SHUT_20_s3nc3!' - name: christin.sommerfeld groups: - all-users - buero-scan - regishut - regishut-personal-finanzen is_samba_user: true password: 'bbMIQ.3/gZ3s' - name: lilith.daxner groups: - all-users - buero-scan - regishut is_samba_user: true password: 'n2Ud7kwA-M-c' - name: mischa.luy groups: - all-users - buero-scan - regishut - regishut-personal-finanzen is_samba_user: true password: 'V-V3/2usuzjq' # ========== # vars used by roles/common/tasks/samba-install.yml # ========== samba_server: file-mbr.mbr-bln.netz samba_server_ip: 192.168.112.10 samba_server_cidr_prefix: 24 # ========== # vars used by roles/common/tasks/samba-user.yml # ========== # ! Notice ! # # variables used from other previos sections: # # - remove_system_users: roles/common/tasks/system-user.yml # - remove_nis_users: roles/common/tasks/nis-install-server.yml # - nis_user: roles/common/tasks/nis-install-server.yml # ========== # vars used by roles/common/tasks/mount_samba_shares.yml # ========== # ! Notice ! # # variables used from other previos sections: # # - nis_user: roles/common/tasks/nis-install-server.yml samba_workgroup: MBR samba_netbios_name: FILE-MBR samba_shares: # --- # Bürogemeinschaft # --- - name: Buero-Organisation path: /data/shares/Buero-Organisation group_valid_users: all-users group_write_list: all-users file_create_mask: '0660' dir_create_mask: '2770' vfs_object_recycle: true recycle_path: '@Recycle.Bin' - name: Install path: /data/shares/Install group_valid_users: mbr-admins group_write_list: mbr-admins file_create_mask: '0660' dir_create_mask: '2770' - name: Kamera path: /data/shares/Kamera group_valid_users: mbr-kamera group_write_list: mbr-kamera file_create_mask: '0660' dir_create_mask: '2770' - name: SCAN path: /data/shares/SCAN group_valid_users: buero-scan group_write_list: buero-scan file_create_mask: '0660' dir_create_mask: '2770' vfs_object_recycle: true recycle_path: '@Recycle.Bin' - name: Technik-und-Sicherheit path: /data/shares/Technik-und-Sicherheit group_valid_users: technik group_write_list: technik file_create_mask: '0660' dir_create_mask: '2770' vfs_object_recycle: true recycle_path: '@Recycle.Bin' - name: AG-Antisemitismus path: /data/shares/AG-Antisemitismus group_valid_users: ag-antisem group_write_list: ag-antisem file_create_mask: '0660' dir_create_mask: '2770' vfs_object_recycle: true recycle_path: '@Recycle.Bin' # --- # VDK # --- - name: Arbeitsrechtliches path: /data/shares/Arbeitsrechtliches group_valid_users: vdk group_write_list: vdk file_create_mask: '0660' dir_create_mask: '2770' vfs_object_recycle: true recycle_path: '@Recycle.Bin' - name: Finanzen path: /data/shares/Finanzen group_valid_users: vdk group_write_list: vdk file_create_mask: '0660' dir_create_mask: '2770' vfs_object_recycle: true recycle_path: '@Recycle.Bin' - name: VDK path: /data/shares/VDK group_valid_users: vdk group_write_list: vdk file_create_mask: '0660' dir_create_mask: '2770' vfs_object_recycle: true recycle_path: '@Recycle.Bin' - name: Betriebsrat path: /data/shares/Betriebsrat group_valid_users: betriebsrat group_write_list: betriebsrat file_create_mask: '0660' dir_create_mask: '2770' vfs_object_recycle: true recycle_path: '@Recycle.Bin' # --- # BgN # --- - name: BGN-Finanzen-Personal path: /data/shares/BGN-Finanzen-Personal group_valid_users: bgn-finanzen-personal group_write_list: bgn-finanzen-personal file_create_mask: '0660' dir_create_mask: '2770' vfs_object_recycle: true recycle_path: '@Recycle.Bin' - name: Mobilisierungsplattform path: /data/shares/Mobilisierungsplattform group_valid_users: bgn group_write_list: bgn file_create_mask: '0660' dir_create_mask: '2770' vfs_object_recycle: true recycle_path: '@Recycle.Bin' # --- # BMB # --- - name: BMB path: /data/shares/BMB group_valid_users: bmb group_write_list: bmb file_create_mask: '0660' dir_create_mask: '2770' vfs_object_recycle: true recycle_path: '@Recycle.Bin' # --- # MBR # --- - name: MBR-Finanzen-Personal path: /data/shares/MBR-Finanzen-Personal group_valid_users: mbr-finanzen-personal group_write_list: mbr-finanzen-personal file_create_mask: '0660' dir_create_mask: '2770' vfs_object_recycle: true recycle_path: '@Recycle.Bin' - name: BVV-Projekt path: /data/shares/BVV-Projekt group_valid_users: mbr-buero group_write_list: mbr-buero file_create_mask: '0660' dir_create_mask: '2770' vfs_object_recycle: true recycle_path: '@Recycle.Bin' - name: MBR path: /data/shares/MBR group_valid_users: mbr-buero group_write_list: mbr-buero file_create_mask: '0660' dir_create_mask: '2770' vfs_object_recycle: true recycle_path: '@Recycle.Bin' - name: Video path: /data/shares/Video group_valid_users: mbr-buero group_write_list: mbr-buero file_create_mask: '0660' dir_create_mask: '2770' vfs_object_recycle: true recycle_path: '@Recycle.Bin' # --- # RIAS # --- - name: RIAS-Berlin path: /data/shares/RIAS-Berlin group_valid_users: rias-berlin group_write_list: rias-berlin file_create_mask: '0660' dir_create_mask: '2770' vfs_object_recycle: true recycle_path: '@Recycle.Bin' - name: RIAS-Berlin-Finanzen-Personal path: /data/shares/RIAS-Berlin-Finanzen-Personal group_valid_users: rias-berlin-finanzen-personal group_write_list: rias-berlin-finanzen-personal file_create_mask: '0660' dir_create_mask: '2770' vfs_object_recycle: true recycle_path: '@Recycle.Bin' - name: RIAS-Bund path: /data/shares/RIAS-Bund group_valid_users: rias-bund group_write_list: rias-bund file_create_mask: '0660' dir_create_mask: '2770' vfs_object_recycle: true recycle_path: '@Recycle.Bin' - name: RIAS-Bund-Finanzen-Personal path: /data/shares/RIAS-Bund-Finanzen-Personal group_valid_users: rias-bund-finanzen-personal group_write_list: rias-bund-finanzen-personal file_create_mask: '0660' dir_create_mask: '2770' vfs_object_recycle: true recycle_path: '@Recycle.Bin' # --- # Regishut # --- - name: Regishut path: /data/shares/Regishut group_valid_users: regishut group_write_list: regishut file_create_mask: '0660' dir_create_mask: '2770' vfs_object_recycle: true recycle_path: '@Recycle.Bin' - name: Regishut-Personal-Finanzen path: /data/shares/Regishut-Personal-Finanzen group_valid_users: regishut-personal-finanzen group_write_list: regishut-personal-finanzen file_create_mask: '0660' dir_create_mask: '2770' vfs_object_recycle: true recycle_path: '@Recycle.Bin' # ========== # vars used by roles/common/tasks/system-user-systemfiles.yml # ========== # ! Notice ! # # variables used from other previos sections: # # - system_users: roles/common/tasks/system-user.yml # ========== # vars used by roles/common/tasks/nis-user-systemfiles.yml # ========== # ! Notice ! # # variables used from other previos sections: # # - nis_user: roles/common/tasks/nis-install-server.yml # ========== # vars used by roles/common/tasks/sudoers-pc.yml # ========== sudo_pc_users: - chris - sysadm - lokaladmin # ========== # vars used by roles/common/tasks/sudoers-server.yml # ========== # ========== # vars used by roles/common/tasks/ubuntu-x11vnc-1604-amd64.yml # vars used by roles/common/tasks/ubuntu-x11vnc-1804-amd64.yml # ========== # ========== # vars used by roles/common/tasks/luks.yml # ==========