647 lines
13 KiB
YAML
647 lines
13 KiB
YAML
---
|
|
|
|
|
|
# ==========
|
|
# vars used by roles/common/tasks/basic.yml
|
|
# ==========
|
|
|
|
|
|
# ==========
|
|
# vars used by roles/common/tasks/sshd.yml
|
|
# ==========
|
|
|
|
sshd_permit_root_login: !!str "yes"
|
|
|
|
|
|
# ==========
|
|
# vars used by roles/common/tasks/apt.yml
|
|
# ==========
|
|
|
|
|
|
# ==========
|
|
# vars used by roles/common/tasks/git.yml
|
|
# ==========
|
|
|
|
|
|
# ==========
|
|
# vars used by roles/common/tasks/
|
|
# ==========
|
|
|
|
|
|
# ==========
|
|
# vars used by roles/common/tasks/cups-install.yml
|
|
# ==========
|
|
|
|
extra_user:
|
|
|
|
- name: borg
|
|
user_id: 1061
|
|
group_id: 1061
|
|
group: borg
|
|
home: /home/borg
|
|
password: $y$j9T$SZty9T8ZWbnyHR2S85xaG.$GhxHOKG9fKErT9s5TAehXXyZJSkNaIcXY18Rg1iMyhC
|
|
shell: /bin/bash
|
|
ssh_keys:
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO90culn3sicU2chTHn40ytcTay0nUIHap0uF/5fVM6P chris@sol'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKd0AwTHbDBK4Dgs+IZWmtnDBjoVIogOUvkLIYvsff1y root@backup.open.de'
|
|
|
|
|
|
# ==========
|
|
# vars used by roles/common/tasks/ntp.yml
|
|
# ==========
|
|
|
|
# name or ip-adress from the (local) ntp server, mostly the gateway
|
|
#
|
|
ntp_server: gw-akb.akb.netz
|
|
|
|
|
|
# ==========
|
|
# vars used by roles/common/tasks/nfs.yml
|
|
# ==========
|
|
|
|
nfs_server: 192.168.82.10
|
|
|
|
nfs_start_servers: 32
|
|
|
|
# Set 'fs_encrypted' to true if filesystem lives on an encrypted
|
|
# partition.
|
|
#
|
|
# NOTE !!
|
|
# Take car to increase 'fsid' in case of more than one export
|
|
#
|
|
nfs_exports:
|
|
- src: 192.168.82.10:/data/home
|
|
path: /data/home
|
|
mount_opts: user,exec,rsize=8192,wsize=8192,hard,intr
|
|
export_opt: rw,root_squash,sync,subtree_check
|
|
export_networks:
|
|
- 192.168.82.0/24
|
|
- 10.0.82.0/24
|
|
- 10.1.82.0/24
|
|
- 192.168.63.0/24
|
|
use_fsid_option: true
|
|
|
|
- src: 192.168.82.10:/data/samba
|
|
path: /data/samba
|
|
mount_opts: user,exec,rsize=8192,wsize=8192,hard,intr
|
|
export_opt: rw,root_squash,sync,subtree_check
|
|
export_networks:
|
|
- 192.168.82.0/24
|
|
- 10.0.82.0/24
|
|
- 10.1.82.0/24
|
|
- 192.168.63.0/24
|
|
use_fsid_option: true
|
|
|
|
|
|
# ==========
|
|
# vars used by roles/common/tasks/pure-ftpd-install.yml
|
|
# ==========
|
|
|
|
# Available properties
|
|
# - name: vuser1
|
|
# password: p4ssW0rd
|
|
# homedir: /var/ftp/vuser1
|
|
# uid: 2000
|
|
# gid: 2000
|
|
# quota_files: 2000
|
|
# quota_size: 500
|
|
# bandwidth_ul: 5
|
|
# bandwidth_dl: 5
|
|
# ratio_ul: 10
|
|
# ratio_dl: 1
|
|
pureftpd_virtual_users:
|
|
|
|
- name: maica_scan
|
|
password: maica_scan
|
|
homedir: /data/samba/Scans/Maica_scans
|
|
uid: maica
|
|
gid: users
|
|
|
|
- name: buero_scan
|
|
password: buero_scan
|
|
homedir: /data/samba/Scans/Buero_Scans
|
|
uid: buero
|
|
gid: users
|
|
- name: jibran_scan
|
|
|
|
password: jibran_scan
|
|
homedir: /data/samba/Scans/Jibran_scan_Scans
|
|
uid: jibran
|
|
gid: users
|
|
|
|
#pureftpd_virtual_deleted_users:
|
|
#
|
|
# Available properties
|
|
# - name: vuser2
|
|
pureftpd_virtual_deleted_users: []
|
|
|
|
pureftpd_virtual_users_import: false
|
|
|
|
# pureftpd_tls_certificate_method
|
|
#
|
|
# possible values:
|
|
# - generate
|
|
# - certbot - Not YET integrated
|
|
# - upload - Not YET integrated
|
|
#
|
|
pureftpd_tls_certificate_method: 'generate'
|
|
|
|
# for method 'generate'
|
|
#
|
|
# Available properties
|
|
#
|
|
#pureftpd_tls_certificate_openssl:
|
|
# size: 4096
|
|
# days: 365
|
|
# fqdn: ftp.example.com
|
|
# country: ''
|
|
# state: ''
|
|
# locality: ''
|
|
# organization: ''
|
|
# unit: ''
|
|
pureftpd_tls_certificate_openssl:
|
|
size: 4096
|
|
days: 3650
|
|
fqdn: file-akb.akb.netz
|
|
country: 'DE'
|
|
state: 'Brandenburg'
|
|
locality: 'Potsdam'
|
|
organization: 'O.OPEN'
|
|
unit: 'Network services'
|
|
|
|
|
|
# ==========
|
|
# vars used by roles/common/tasks/system-user.yml
|
|
# ==========
|
|
|
|
# ! Notice !
|
|
#
|
|
# On NIS supported Server put your users and groups in the
|
|
# appropriate section for playbook 'nis-user.yml'
|
|
#
|
|
# ! Notice !
|
|
|
|
remove_system_users: []
|
|
#remove_system_users:
|
|
# - name: test
|
|
|
|
system_users: []
|
|
#system_users:
|
|
# - name: test
|
|
# password: 'test100'
|
|
|
|
#system_users:
|
|
#
|
|
# - name: sysadm
|
|
# password: '9xFXkdPR_2'
|
|
|
|
system_groups: []
|
|
|
|
base_home: /home
|
|
|
|
|
|
# ==========
|
|
# vars used by roles/common/tasks/nis-install-server.yml
|
|
# vars used by roles/common/tasks/nis-user.yml
|
|
# vars used by roles/common/tasks/nis-install-client.yml
|
|
# ==========
|
|
|
|
# used by templates
|
|
# - yp.conf.j2
|
|
# - defaultdomain.j2
|
|
nis_domain: akb.netz
|
|
|
|
# also used by template
|
|
# - yp.conf.j2
|
|
nis_server_address: 192.168.82.10
|
|
|
|
nis_server_name: file-akb.akb.netz
|
|
|
|
nis_base_home: /data/home
|
|
|
|
nis_groups:
|
|
- name: intern
|
|
group_id: 1100
|
|
- name: ab
|
|
group_id: 1110
|
|
- name: verwaltung
|
|
group_id: 1120
|
|
- name: scans
|
|
group_id: 1130
|
|
|
|
remove_nis_users: []
|
|
#remove_nis_users:
|
|
# - name: anna
|
|
# - name: birgit
|
|
# - name: jonas
|
|
|
|
nis_user:
|
|
|
|
- name: chris
|
|
groups:
|
|
- intern
|
|
- ab
|
|
- scans
|
|
- lpadmin
|
|
- verwaltung
|
|
is_samba_user: true
|
|
password: !vault |
|
|
$ANSIBLE_VAULT;1.1;AES256
|
|
35653838343532663632326462656437363665316337316336316335383263633630616638313736
|
|
3937666561356232666136646435613361336437303637360a353561316633373265323931623565
|
|
32643966373962313334343565643130373535353238316161623837333130353231343332663930
|
|
3638386337333636390a393738373935646638383237373663376434366361363938346335663438
|
|
6637
|
|
|
|
- name: buero
|
|
groups:
|
|
- intern
|
|
- ab
|
|
- scans
|
|
- lpadmin
|
|
is_samba_user: true
|
|
password: 'buero2011'
|
|
|
|
- name: frauke
|
|
groups:
|
|
- intern
|
|
- ab
|
|
- scans
|
|
- lpadmin
|
|
- verwaltung
|
|
is_samba_user: true
|
|
password: 'frau20ke19!'
|
|
|
|
- name: fsj
|
|
groups:
|
|
- ab
|
|
- scans
|
|
is_samba_user: true
|
|
password: 'IbFiBdA'
|
|
|
|
- name: helene
|
|
groups:
|
|
- ab
|
|
- scans
|
|
is_samba_user: true
|
|
password: 'He.20_Lene25!'
|
|
|
|
- name: jibran
|
|
groups:
|
|
- intern
|
|
- ab
|
|
- scans
|
|
- lpadmin
|
|
- verwaltung
|
|
is_samba_user: true
|
|
password: '20jib15ran'
|
|
|
|
- name: janne
|
|
groups:
|
|
- ab
|
|
- scans
|
|
- lpadmin
|
|
is_samba_user: true
|
|
password: '20-jan-ne_24%!'
|
|
|
|
- name: julia
|
|
groups:
|
|
- ab
|
|
- scans
|
|
- verwaltung
|
|
is_samba_user: true
|
|
password: 'Ju.20_Lia25!'
|
|
|
|
- name: kamera
|
|
groups:
|
|
- ab
|
|
- scans
|
|
is_samba_user: true
|
|
password: 'tfC9BVmH'
|
|
|
|
- name: maica
|
|
groups:
|
|
- intern
|
|
- ab
|
|
- scans
|
|
- lpadmin
|
|
- verwaltung
|
|
is_samba_user: true
|
|
password: 'mai20ca16!'
|
|
|
|
- name: praktikum
|
|
groups:
|
|
- ab
|
|
- scans
|
|
is_samba_user: true
|
|
password: 'praktikum_2016!'
|
|
|
|
- name: paulina
|
|
groups:
|
|
- ab
|
|
- scans
|
|
is_samba_user: true
|
|
password: '20-pau.lina-23!'
|
|
|
|
- name: romana
|
|
groups:
|
|
- ab
|
|
- scans
|
|
- lpadmin
|
|
- verwaltung
|
|
is_samba_user: true
|
|
password: '20-ro-21.mana_%'
|
|
|
|
- name: thomas
|
|
groups:
|
|
- intern
|
|
- ab
|
|
- scans
|
|
- verwaltung
|
|
is_samba_user: true
|
|
password: '20_thomas/19-!'
|
|
|
|
- name: sascha
|
|
groups:
|
|
- ab
|
|
- scans
|
|
is_samba_user: true
|
|
password: '20.sas_23.cha!'
|
|
|
|
- name: stefan
|
|
groups:
|
|
- ab
|
|
- scans
|
|
- lpadmin
|
|
is_samba_user: true
|
|
password: 'Ste20fan21!'
|
|
|
|
- name: wiebke
|
|
groups:
|
|
- ab
|
|
- scans
|
|
is_samba_user: true
|
|
password: '20-wieb.ke/24_%'
|
|
|
|
|
|
# ==========
|
|
# vars used by roles/common/tasks/samba-install.yml
|
|
# ==========
|
|
|
|
samba_server: file-akb.akb.netz
|
|
samba_server_ip: 192.168.82.10
|
|
samba_server_cidr_prefix: 24
|
|
|
|
|
|
# ==========
|
|
# vars used by roles/common/tasks/samba-user.yml
|
|
# ==========
|
|
|
|
# ! Notice !
|
|
#
|
|
# variables used from other previos sections:
|
|
#
|
|
# - remove_system_users: roles/common/tasks/system-user.yml
|
|
# - remove_nis_users: roles/common/tasks/nis-install-server.yml
|
|
# - nis_user: roles/common/tasks/nis-install-server.yml
|
|
|
|
|
|
# ==========
|
|
# vars used by roles/common/tasks/mount_samba_shares.yml
|
|
# ==========
|
|
|
|
# ! Notice !
|
|
#
|
|
# variables used from other previos sections:
|
|
#
|
|
# - nis_user: roles/common/tasks/nis-install-server.yml
|
|
|
|
|
|
samba_workgroup: AKB
|
|
samba_netbios_name: FILE-AKB
|
|
|
|
samba_shares:
|
|
- name: Verwaltung
|
|
path: /data/samba/Verwaltung
|
|
group_valid_users: verwaltung
|
|
group_write_list: verwaltung
|
|
file_create_mask: '0660'
|
|
dir_create_mask: '2770'
|
|
vfs_object_recycle: true
|
|
recycle_path: '@Recycle.Bin'
|
|
user:
|
|
- buero
|
|
- chris
|
|
- jibran
|
|
- praktikum
|
|
- maica
|
|
- julia
|
|
- frauke
|
|
- fsj
|
|
- stefan
|
|
- thomas
|
|
- name: AB
|
|
path: /data/samba/AB
|
|
group_valid_users: ab
|
|
group_write_list: ab
|
|
file_create_mask: '0660'
|
|
dir_create_mask: '2770'
|
|
vfs_object_recycle: true
|
|
recycle_path: '@Recycle.Bin'
|
|
user:
|
|
- buero
|
|
- chris
|
|
- jibran
|
|
- praktikum
|
|
- maica
|
|
- julia
|
|
- frauke
|
|
- fsj
|
|
- paulina
|
|
- romana
|
|
- sascha
|
|
- stefan
|
|
- thomas
|
|
- name: Scans
|
|
path: /data/samba/Scans
|
|
group_valid_users: scans
|
|
group_write_list: scans
|
|
file_create_mask: '0660'
|
|
dir_create_mask: '2770'
|
|
vfs_object_recycle: true
|
|
recycle_path: '@Recycle.Bin'
|
|
user:
|
|
- buero
|
|
- chris
|
|
- jibran
|
|
- praktikum
|
|
- maica
|
|
- julia
|
|
- frauke
|
|
- fsj
|
|
- paulina
|
|
- romana
|
|
- stefan
|
|
- sascha
|
|
- thomas
|
|
- name: Buero_Scans
|
|
path: /data/samba/Scans/Buero_Scans
|
|
group_valid_users: scans
|
|
group_write_list: scans
|
|
file_create_mask: '0660'
|
|
dir_create_mask: '2770'
|
|
vfs_object_recycle: true
|
|
recycle_path: '@Recycle.Bin'
|
|
user:
|
|
- buero
|
|
- name: Frauke_Scans
|
|
path: /data/samba/Scans/Frauke_Scans
|
|
group_valid_users: scans
|
|
group_write_list: scans
|
|
file_create_mask: '0660'
|
|
dir_create_mask: '2770'
|
|
vfs_object_recycle: true
|
|
recycle_path: '@Recycle.Bin'
|
|
user:
|
|
- frauke
|
|
- name: FSJ_Scans
|
|
path: /data/samba/Scans/FSJ_Scans
|
|
group_valid_users: scans
|
|
group_write_list: scans
|
|
file_create_mask: '0660'
|
|
dir_create_mask: '2770'
|
|
vfs_object_recycle: true
|
|
recycle_path: '@Recycle.Bin'
|
|
user:
|
|
- fsj
|
|
- name: Jibran_Scans
|
|
path: /data/samba/Scans/Jibran_Scans
|
|
group_valid_users: scans
|
|
group_write_list: scans
|
|
file_create_mask: '0660'
|
|
dir_create_mask: '2770'
|
|
vfs_object_recycle: true
|
|
recycle_path: '@Recycle.Bin'
|
|
user:
|
|
- jibran
|
|
- name: Julia_Scans
|
|
path: /data/samba/Scans/Julia_Scans
|
|
group_valid_users: scans
|
|
group_write_list: scans
|
|
file_create_mask: '0660'
|
|
dir_create_mask: '2770'
|
|
vfs_object_recycle: true
|
|
recycle_path: '@Recycle.Bin'
|
|
user:
|
|
- julia
|
|
- name: Maica_scans
|
|
path: /data/samba/Scans/Maica_scans
|
|
group_valid_users: scans
|
|
group_write_list: scans
|
|
file_create_mask: '0660'
|
|
dir_create_mask: '2770'
|
|
vfs_object_recycle: true
|
|
recycle_path: '@Recycle.Bin'
|
|
user:
|
|
- maica
|
|
- name: Thomas_Scans
|
|
path: /data/samba/Scans/Thomas_Scans
|
|
group_valid_users: scans
|
|
group_write_list: scans
|
|
file_create_mask: '0660'
|
|
dir_create_mask: '2770'
|
|
vfs_object_recycle: true
|
|
recycle_path: '@Recycle.Bin'
|
|
user:
|
|
- thomas
|
|
- name: Stefan_Scans
|
|
path: /data/samba/Scans/Stefan_Scans
|
|
group_valid_users: scans
|
|
group_write_list: scans
|
|
file_create_mask: '0660'
|
|
dir_create_mask: '2770'
|
|
vfs_object_recycle: true
|
|
recycle_path: '@Recycle.Bin'
|
|
user:
|
|
- stefan
|
|
- name: Kamera
|
|
path: /data/samba/Kamera
|
|
group_valid_users: intern
|
|
group_write_list: intern
|
|
file_create_mask: '0660'
|
|
dir_create_mask: '2770'
|
|
vfs_object_recycle: false
|
|
recycle_path: '@Recycle.Bin'
|
|
user:
|
|
- buero
|
|
- chris
|
|
- kamera
|
|
- praktikum
|
|
- maica
|
|
- thomas
|
|
- frauke
|
|
- name: Install
|
|
path: /data/samba/Install
|
|
group_valid_users: intern
|
|
group_write_list: intern
|
|
file_create_mask: '0660'
|
|
dir_create_mask: '2770'
|
|
vfs_object_recycle: false
|
|
recycle_path: '@Recycle.Bin'
|
|
user:
|
|
- buero
|
|
- chris
|
|
- kamera
|
|
- praktikum
|
|
- maica
|
|
- thomas
|
|
- frauke
|
|
|
|
|
|
# ==========
|
|
# vars used by roles/common/tasks/system-user-systemfiles.yml
|
|
# ==========
|
|
|
|
# ! Notice !
|
|
#
|
|
# variables used from other previos sections:
|
|
#
|
|
# - system_users: roles/common/tasks/system-user.yml
|
|
|
|
|
|
# ==========
|
|
# vars used by roles/common/tasks/nis-user-systemfiles.yml
|
|
# ==========
|
|
|
|
# ! Notice !
|
|
#
|
|
# variables used from other previos sections:
|
|
#
|
|
# - nis_user: roles/common/tasks/nis-install-server.yml
|
|
|
|
|
|
# ==========
|
|
# vars used by roles/common/tasks/sudoers-pc.yml
|
|
# ==========
|
|
|
|
sudo_pc_users:
|
|
- chris
|
|
- sysadm
|
|
|
|
|
|
# ==========
|
|
# vars used by roles/common/tasks/sudoers-server.yml
|
|
# ==========
|
|
|
|
|
|
# ==========
|
|
# vars used by roles/common/tasks/ubuntu-x11vnc-1604-amd64.yml
|
|
# vars used by roles/common/tasks/ubuntu-x11vnc-1804-amd64.yml
|
|
# ==========
|
|
|
|
|
|
# ==========
|
|
# vars used by roles/common/tasks/luks.yml
|
|
# ==========
|
|
|