---

# ---
# vars used by roles/network_interfaces
# ---


# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True

# Should the interfaces be reloaded after config change?
network_interface_reload: False

network_interface_path: /etc/network/interfaces.d
network_interface_required_packages:
  - vlan
  - bridge-utils
  - ifmetric
  - ifupdown
  - ifenslave
  - resolvconf


network_interfaces:

  - device: br0
    # use only once per device (for the first device entry)
    headline: br0 - bridge over device eno1

    # auto & allow are only used for the first device entry
    allow: [] # array of allow-[stanzas] eg. allow-hotplug
    auto: true

    family: inet
    method: static
    hwaddress: 0c:c4:7a:ea:dd:56
    description:
    address: 192.168.112.10
    netmask: 24
    gateway: 192.168.112.254

    # optional dns settings nameservers: []
    #
    #    nameservers:
    #      - 194.150.168.168  # dns.as250.net
    #      - 91.239.100.100   # anycast.censurfridns.dk
    #    search: warenform.de
    #
    nameservers:
      - 192.168.112.1
    search: mbr-bln.netz

    # optional bridge parameters bridge: {}
    # bridge:
    #   ports:
    #   stp:
    #   fd:
    #   maxwait:
    #   waitport:
    bridge:
      ports: eno1 # for mor devices support a blank separated list
      stp: !!str off
      fd: 5
      hello: 2
      maxage: 12

    # inline hook scripts
    pre-up:
      - !!str "ip link set dev eno1 up" # pre-up script lines
    up: [] #up script lines
    post-up: [] # post-up script lines (alias for up)
    pre-down: [] # pre-down script lines (alias for down)
    down: [] # down script lines
    post-down: [] # post-down script lines



# ---
# vars used by roles/common/tasks/basic.yml
# ---

set_default_limit_nofile: true

# ---
# vars used by roles/common/tasks/sshd.yml
# ---

sshd_max_auth_tries: 6

sshd_permit_root_login: !!str "yes"

sshd_password_authentication: !!str "yes"

#sshd_use_pam: !!str "no"


# ---
# vars used by roles/common/tasks/cron.yml
# ---

cron_user_entries:

  - name: "Daily Backup "
    minute: "03"
    hour: "00"
    job: /root/crontab/backup-rcopy/rcopy.sh

  - name: "Check if Postfix Mailservice is up and running. Restart service if needed."
    minute: "*/15"
    job: /root/bin/monitoring/check_postfix.sh

  - name: "Check if CUPS main daemon is up and running. Restart service if needed."
    minute: "*/30"
    hour: "7-22"
    job: /root/bin/monitoring/check_cups.sh

  - name: "Check if CUPS Browse daemon is up and running. Restart service if needed."
    minute: "*/30"
    hour: "7-22"
    job: /root/bin/monitoring/check_cups-browsed.sh

  - name: "cleanup camera files."
    minute: "32"
    hour: "23"
    job: /root/bin/admin-stuff/cleanup_from_old_files.sh


cron_user_special_time_entries:

  - name: "Restart DNS Cache service 'systemd-resolved'"
    special_time: reboot
    job: "sleep 10 ; /bin/systemctl restart systemd-resolved"
    insertafter: PATH