ansible/nis
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
42c3774ca6
nis/group_vars/all/main.yml
Christoph 42c3774ca6 Initial commit
2022-02-20 12:07:59 +01:00

2320 lines
43 KiB
YAML
Raw Blame History

---
# ==========
# vars used by roles/common/tasks/basic.yml
# ==========
time_zone: Europe/Berlin
locales:
- en_US.UTF-8
- de_DE.UTF-8
set_default_limit_nofile: false
# ==========
# vars used by roles/common/tasks/sshd.yml
# ==========
sshd_ports:
- 22
sshd_listen_address:
- '::'
- '0.0.0.0'
sshd_host_keys:
- /etc/ssh/ssh_host_rsa_key
- /etc/ssh/ssh_host_ecdsa_key
- /etc/ssh/ssh_host_ed25519_key
sshd_max_startups: !!str "10:30:100"
sshd_max_auth_tries: 3
sshd_max_sessions: 10
sshd_permit_root_login: !!str "prohibit-password"
sshd_authorized_keys_file: ".ssh/authorized_keys .ssh/authorized_keys2"
sshd_pubkey_authentication: !!str "yes"
sshd_password_authentication: !!str "no"
sshd_use_pam: !!str "yes"
sshd_print_motd: !!str "no"
# sshd_kexalgorithms
#
# Example:
# sshd_kexalgorithms:
# - curve25519-sha256@libssh.org
# - diffie-hellman-group-exchange-sha256
# - diffie-hellman-group14-sha1
#
sshd_kexalgorithms: {}
# sshd_kexalgorithms
#
# Example:
# sshd_ciphers:
# - chacha20-poly1305@openssh.com
# - aes256-gcm@openssh.com
# - aes256-ctr
sshd_ciphers: {}
sshd_use_dns: !!str "no"
sshd_allowed_users: {}
# ==========
# vars used by roles/common/tasks/apt.yml
# ==========
apt_manage_sources_list: true
apt_src_enable: false
apt_backports_enable: true
apt_debian_mirror: http://ftp.de.debian.org/debian/
apt_debian_contrib_nonfree_enable: true
# Ubuntu mirror
apt_ubuntu_mirror: http://archive.ubuntu.com/ubuntu
apt_update_cache_valid_time: 3600
apt_upgrade: true
apt_update: true
apt_clean: true
apt_autoremove: true
apt_dpkg_configure: true
apt_upgrade_type: dist
apt_upgrade_dpkg_options:
- force-confdef
- force-confold
apt_initial_install_stretch:
- apt-transport-https
- dbus
- openssh-server
- rssh
- vim
- vim-common
- vim-doc
- mc
- screen
- tmux
- bc
- figlet
- rcconf
- sudo
- rsync
- dselect
- iputils-ping
- apt-utils
- aptitude
- zip
- unzip
- bzip2
- arj
- locate
- curl
- gawk
- mawk
- lynx
- links
- w3m
- exuberant-ctags
- mime-support
- file
- coreutils
- moreutils
- less
- realpath
- sipcalc
- psmisc
- dnsutils
- rblcheck
- whois
- gettext
- gettext-base
- gettext-doc
- debian-keyring
- patch
- patchutils
- recode
- recode-doc
- librecode0
- librecode-dev
- sharutils
- perl
- perl-modules-5.24
- perl-doc
- libperl-dev
- libterm-readline-gnu-perl
- libterm-readline-perl-perl
- libterm-readkey-perl
- libmail-imapclient-perl
- libtime-duration-perl
- libtimedate-perl
- libwww-perl
- libpcre3
- libreadline5
- re2c
- util-linux
- parted
- lshw
- gdisk
- smartmontools
- tcpdump
- telnet
- unhide
- lsof
- hdparm
- groff
- iproute2
- bridge-utils
- vlan
- ethtool
- wipe
- iperf
- mtr
- iptraf
- wget
- logrotate
- rsyslog
- haveged
- rdate
- ntpdate
- wipe
- man-db
- groff
- iptables
- shellcheck
- ssl-cert
- ssl-cert-check
- git
- ftp
- htop
- net-tools
- lsb-release
- attr
- acl
- quota
- quotatool
- needrestart
- socat
- wakeonlan
apt_initial_install_buster:
- apt-transport-https
- dbus
- openssh-server
- rush
- vim
- vim-common
- vim-doc
- mc
- screen
- tmux
- bc
- figlet
- rcconf
- sudo
- rsync
- dselect
- iputils-ping
- apt-utils
- aptitude
- zip
- unzip
- bzip2
- arj
- locate
- curl
- gawk
- mawk
- lynx
- links
- w3m
- ctags
- mime-support
- file
- coreutils
- moreutils
- less
- sipcalc
- psmisc
- dnsutils
- rblcheck
- whois
- gettext
- gettext-base
- gettext-doc
- debian-keyring
- patch
- patchutils
- recode
- recode-doc
- librecode0
- librecode-dev
- sharutils
- perl
- perl-modules-5.28
- perl-doc
- libperl-dev
- libterm-readline-gnu-perl
- libterm-readline-perl-perl
- libterm-readkey-perl
- libmail-imapclient-perl
- libtime-duration-perl
- libtimedate-perl
- libwww-perl
- libpcre3
- libio-compress-perl
- libreadline5
- re2c
- util-linux
- parted
- lshw
- gdisk
- smartmontools
- tcpdump
- telnet
- unhide
- lsof
- hdparm
- groff
- iproute2
- bridge-utils
- vlan
- ethtool
- wipe
- iperf
- mtr
- iptraf
- wget
- logrotate
- rsyslog
- haveged
- rdate
- ntpdate
- wipe
- man
- groff
- iptables
- shellcheck
- ssl-cert
- ssl-cert-check
- git
- ftp
- htop
- net-tools
- lsb-release
- attr
- acl
- quota
- quotatool
- needrestart
- socat
- wakeonlan
apt_initial_install_bullseye:
- apt-transport-https
- dbus
- openssh-server
- rush
- vim
- vim-common
- vim-doc
- mc
- screen
- tmux
- cron
- bc
- figlet
- rcconf
- sudo
- rsync
- dselect
- iputils-ping
- apt-utils
- aptitude
- zip
- unzip
- bzip2
- arj
- locate
- curl
- gawk
- mawk
- lynx
- links
- w3m
- universal-ctags
- mime-support
- file
- coreutils
- moreutils
- less
- sipcalc
- psmisc
- dnsutils
- rblcheck
- whois
- gettext
- gettext-base
- gettext-doc
- debian-keyring
- patch
- patchutils
- recode
- recode-doc
- librecode0
- librecode-dev
- sharutils
- perl
- perl-modules-5.32
- perl-doc
- libperl-dev
- libterm-readline-gnu-perl
- libterm-readline-perl-perl
- libterm-readkey-perl
- libmail-imapclient-perl
- libtime-duration-perl
- libtimedate-perl
- libwww-perl
- libpcre3
- libio-compress-perl
- libreadline-dev
- re2c
- util-linux
- parted
- lshw
- gdisk
- smartmontools
- tcpdump
- telnet
- unhide
- lsof
- hdparm
- groff
- iproute2
- bridge-utils
- vlan
- ethtool
- wipe
- iperf
- mtr
- iptraf
- wget
- logrotate
- rsyslog
- haveged
- rdate
- ntpdate
- wipe
- man
- groff
- iptables
- shellcheck
- ssl-cert
- ssl-cert-check
- git
- ftp
- htop
- net-tools
- lsb-release
- attr
- acl
- quota
- quotatool
- needrestart
- socat
- zsh
- lua5.4
- btrfs-progs
- fdisk
apt_initial_install_xenial:
- apt-transport-https
- dbus
- openssh-server
- rush
- vim
- vim-common
- vim-doc
- mc
- screen
- tmux
- bc
- figlet
- sudo
- rsync
- dselect
- iputils-ping
- apt-utils
- aptitude
- zip
- unzip
- bzip2
- arj
- locate
- curl
- gawk
- mawk
- lynx
- links
- w3m
- ctags
- mime-support
- file
- coreutils
- moreutils
- less
- sipcalc
- psmisc
- dnsutils
- rblcheck
- whois
- gettext
- gettext-base
- gettext-doc
- debian-keyring
- patch
- patchutils
- recode
- recode-doc
- librecode0
- librecode-dev
- sharutils
- perl
- perl-modules-5.22
- perl-doc
- libperl-dev
- libterm-readline-gnu-perl
- libterm-readline-perl-perl
- libterm-readkey-perl
- libmail-imapclient-perl
- libtime-duration-perl
- libtimedate-perl
- libwww-perl
- libpcre3
- libio-compress-perl
- libreadline5
- re2c
- util-linux
- parted
- lshw
- gdisk
- smartmontools
- tcpdump
- telnet
- unhide
- lsof
- hdparm
- groff
- iproute2
- bridge-utils
- vlan
- ethtool
- wipe
- iperf
- mtr
- iptraf
- wget
- logrotate
- rsyslog
- haveged
- rdate
- ntpdate
- wipe
- man
- groff
- iptables
- shellcheck
- ssl-cert
- ssl-cert-check
- git
- ftp
- htop
- net-tools
- lsb-release
- attr
- acl
- quota
- quotatool
- needrestart
- ifupdown
- socat
apt_initial_install_bionic:
- apt-transport-https
- dbus
- openssh-server
- rush
- vim
- vim-common
- vim-doc
- mc
- screen
- tmux
- bc
- figlet
- sudo
- rsync
- dselect
- iputils-ping
- apt-utils
- aptitude
- zip
- unzip
- bzip2
- arj
- locate
- curl
- gawk
- mawk
- lynx
- links
- w3m
- ctags
- mime-support
- file
- coreutils
- moreutils
- less
- sipcalc
- psmisc
- dnsutils
- rblcheck
- whois
- gettext
- gettext-base
- gettext-doc
- debian-keyring
- patch
- patchutils
- recode
- recode-doc
- librecode0
- librecode-dev
- sharutils
- perl
- perl-modules-5.26
- perl-doc
- libperl-dev
- libterm-readline-gnu-perl
- libterm-readline-perl-perl
- libterm-readkey-perl
- libmail-imapclient-perl
- libtime-duration-perl
- libtimedate-perl
- libwww-perl
- libpcre3
- libio-compress-perl
- libreadline5
- re2c
- util-linux
- parted
- lshw
- gdisk
- smartmontools
- tcpdump
- telnet
- unhide
- lsof
- hdparm
- groff
- iproute2
- bridge-utils
- vlan
- ethtool
- wipe
- iperf
- mtr
- iptraf
- wget
- logrotate
- rsyslog
- haveged
- rdate
- ntpdate
- wipe
- man
- groff
- iptables
- shellcheck
- ssl-cert
- ssl-cert-check
- git
- ftp
- htop
- net-tools
- lsb-release
- attr
- acl
- quota
- quotatool
- needrestart
- ifupdown
- socat
microcode_intel_package:
- intel-microcode
microcode_amd_package:
- amd64-microcode
firmware_packages_ubuntu:
- linux-firmware
firmware_packages_debian:
- firmware-linux
firmware_non_free_packages_debian:
- firmware-linux-nonfree
apt_install_state: latest
apt_remove:
- apt-transport-tor
- tor
- tor-geoipdb
- torsocks
apt_remove_xenial: []
apt_remove_bionic: []
apt_remove_purge: false
# ==========
# vars used by roles/common/tasks/git.yml
# ==========
# ---
# default
# ---
git_default_repositories:
# script repositories (destination /root/bin/)
- name: admin-stuff
repo: https://git.oopen.de/script/admin-stuff
dest: /root/bin/admin-stuff
# ---
# group [file_server]
# ---
git_oopen_server_repositories:
# install repositories (destination: /usr/local/src/)
# mailsystem
- name: mailsystem
repo: https://git.oopen.de/install/mailsystem
dest: /usr/local/src/mailsystem
# script repositories (destination /root/bin/)
# Monitoring
- name: monitoring
repo: https://git.oopen.de/script/monitoring
dest: /root/bin/monitoring
# script repositories (destination /root/bin/)
- name: backup-rcopy
repo: https://git.oopen.de/backup/backup-rcopy
dest: /root/crontab/backup-rcopy
# ---
# group [samba_server]
# ---
git_samba_repositories:
# script repositories (destination /root/bin/)
- name: samba
repo: https://git.oopen.de/script/samba
dest: /root/bin/samba
# ---
# group [gateway_server]
# ---
git_gateway_repositories:
# install repositories (destination: /usr/local/src/)
# mailsystem
- name: mailsystem
repo: https://git.oopen.de/install/mailsystem
dest: /usr/local/src/mailsystem
# firewall
- name: ipt-gateway
repo: https://git.oopen.de/firewall/ipt-gateway
dest: /usr/local/src/ipt-gateway
# script repositories (destination /root/bin/)
# Monitoring
- name: monitoring
repo: https://git.oopen.de/script/monitoring
dest: /root/bin/monitoring
# ==========
# vars used by roles/common/tasks/cups-install.yml
# ==========
apt_install_server_cups_buster:
- cups
apt_install_client_cups:
- cups
- cups-client
- cups-common
- cups-ppdc
- cups-bsd
- cups-filters-ippusbxd
- lsb-printing
- hpijs-ppds
- printer-driver-hpcups
# ==========
# vars used by roles/common/tasks/ntp.yml
# ==========
# name or ip-adress from the (local) ntp server, mostly the gateway
#
ntp_server: gw-mbr.mbr-bln.netz
# ==========
# vars used by roles/common/tasks/nfs.yml
# ==========
nfs_server: 192.168.112.10
# Set 'fs_encrypted' to true if filesystem lives on an encrypted
# partition.
#
# NOTE !!
# Take car to increase 'fsid' in case of more than one export
#
nfs_exports:
- src: 192.168.112.10:/data/home
path: /data/home
mount_opts: users,rsize=8192,wsize=8192,hard,intr
export_opt: rw,root_squash,sync,subtree_check
export_networks:
- 192.168.112.0/24
- 10.0.112.0/24
- 10.1.112.0/24
- 192.168.63.0/24
use_fsid_option: true
- src: 192.168.112.10:/data/shares
path: /data/shares
mount_opts: users,rsize=8192,wsize=8192,hard,intr
export_opt: rw,root_squash,sync,subtree_check
export_networks:
- 192.168.112.0/24
- 10.0.112.0/24
- 10.1.112.0/24
- 192.168.63.0/24
use_fsid_option: true
# ==========
# vars used by roles/common/tasks/system-user.yml
# ==========
# ! Notice !
#
# On NIS supported Server put your users and groups in the
# appropriate section for playbook 'nis-user.yml'
#
# ! Notice !
remove_system_users: []
#remove_system_users:
# - name: test
# - name: jennifer.prost
system_users: []
#system_users:
# - name: sysadm
# password: '9xFXkdPR_2'
system_groups: []
base_home: /home
# ==========
# vars used by roles/common/tasks/nis-install-server.yml
# vars used by roles/common/tasks/nis-user.yml
# vars used by roles/common/tasks/nis-install-client.yml
# ==========
# used by templates
# - yp.conf.j2
# - defaultdomain.j2
nis_domain: mbr-bln.netz
# also used by template
# - yp.conf.j2
nis_server_address: 192.168.112.10
nis_server_name: file-mbr.mbr-bln.netz
nis_common_packages:
- nis
- nscd
nis_base_home: /data/home
nis_groups:
- name: mbr-buero
group_id: 1200
- name: mbr-finanzen
group_id: 1210
- name: mbr-personal
group_id: 1220
- name: mbr-kamera
group_id: 1250
- name: mbr-admins
group_id: 1260
- name: vdk
group_id: 1300
- name: rias
group_id: 1400
- name: rias-finanzen-personal
group_id: 1410
- name: bgn
group_id: 1500
- name: bgn-finanzen-personal
group_id: 1510
- name: regishut
group_id: 1600
- name: regishut-personal-finanzen
group_id: 1610
- name: buero-scan
group_id: 1700
- name: bmb
group_id: 1800
- name: all-users
group_id: 1900
remove_nis_users: []
#remove_nis_users:
# - name: test
# - name: jennifer.prost
nis_user:
- name: chris
groups:
- all-users
- mbr-buero
- mbr-finanzen
- mbr-personal
- mbr-kamera
- mbr-admins
- vdk
- rias
- rias-finanzen-personal
- bgn
- bgn-finanzen-personal
- regishut
- regishut-personal-finanzen
- buero-scan
- bmb
is_samba_user: true
password: !vault |
$ANSIBLE_VAULT;1.1;AES256
38643435653764393333613564393733666139656264343833333632373938323230393036303234
3633303562636465643930643961663165646237386664370a386362346162313037353163383365
61343263386239316164613935633062343165363863376462653165306464633136313839343962
3865353333373661390a643564386432643532396632323664383330646430613033643130626430
6139
- name: lokaladmin
groups:
- all-users
- mbr-buero
- mbr-finanzen
- mbr-personal
- mbr-kamera
- mbr-admins
- vdk
- rias
- rias-finanzen-personal
- bgn
- bgn-finanzen-personal
- regishut
- regishut-personal-finanzen
- buero-scan
- bmb
is_samba_user: true
password: 'd4r1usz'
- name: sysadm
groups:
- all-users
- mbr-buero
- mbr-finanzen
- mbr-personal
- mbr-kamera
- mbr-admins
- vdk
- rias
- rias-finanzen-personal
- bgn
- bgn-finanzen-personal
- regishut
- regishut-personal-finanzen
- buero-scan
- bmb
is_samba_user: true
password: 'KPk_Wf2F'
- name: alexander.lorenz.milord
groups:
- all-users
- regishut
- buero-scan
is_samba_user: true
password: 'R3GI_20_poliz_!'
- name: alexander.rasumny
groups:
- all-users
- mbr-buero
- buero-scan
is_samba_user: true
password: 'twT9Rjbv9mjq'
- name: alexander.steder
groups:
- all-users
- regishut
- regishut-personal-finanzen
- buero-scan
is_samba_user: true
password: 'SHUT_20_s3nc3!'
- name: anna.mueller1
groups:
- all-users
- mbr-buero
- buero-scan
is_samba_user: true
password: '5xp5ll9ar13us!'
- name: anne
groups:
- all-users
- mbr-buero
- mbr-finanzen
- mbr-personal
- mbr-kamera
- mbr-admins
- vdk
- rias
- rias-finanzen-personal
- bgn
- bgn-finanzen-personal
- buero-scan
is_samba_user: true
password: 'YA!LiLiC0MP5'
- name: axis
groups:
- all-users
- mbr-buero
- buero-scan
is_samba_user: true
password: '20_axis_16'
- name: benjamin
groups:
- all-users
- mbr-buero
- vdk
- rias
- rias-finanzen-personal
- buero-scan
is_samba_user: true
password: 'C2-0U#ch'
- name: bianca
groups:
- all-users
- mbr-buero
- mbr-finanzen
- mbr-personal
- mbr-kamera
- mbr-admins
- vdk
- rias
- rias-finanzen-personal
- bgn
- bgn-finanzen-personal
- regishut
- regishut-personal-finanzen
- buero-scan
- bmb
is_samba_user: true
password: '73_BiBole_29'
- name: bianca.loy
groups:
- all-users
- mbr-buero
- buero-scan
is_samba_user: true
password: 'ctnrk3CczcJ9'
- name: birgit.erhardt
groups:
- all-users
- mbr-buero
- mbr-finanzen
- vdk
- buero-scan
is_samba_user: true
password: '20_purpel!rain_17'
- name: bjoern.renkewitz
groups:
- all-users
- mbr-buero
- buero-scan
is_samba_user: true
password: 'Tz9-Wq-51'
- name: christina.wendt
groups:
- all-users
- mbr-buero
- mbr-personal
- mbr-finanzen
- vdk
- rias-finanzen-personal
- bgn-finanzen-personal
- regishut
- regishut-personal-finanzen
- buero-scan
is_samba_user: true
password: '8!Varianten'
- name: daniel.poensgen
groups:
- all-users
- mbr-buero
- buero-scan
is_samba_user: true
password: 'rcMRCm7jcpbp'
- name: doku.mbr2
groups:
- all-users
- mbr-buero
- buero-scan
is_samba_user: true
password: '*M0ss4d*'
- name: doku.mbr4
groups:
- all-users
- mbr-buero
- buero-scan
is_samba_user: true
password: 'PwmNvPh9KM4T'
- name: doku.mbr5
groups:
- all-users
- mbr-buero
- buero-scan
is_samba_user: true
password: 'G6Hz.ev/e24E'
- name: dora.streibl
groups:
- all-users
- mbr-buero
- buero-scan
is_samba_user: true
password: '6jA,nmD,fdK!'
- name: dorina.feldmann
groups:
- all-users
- mbr-buero
- buero-scan
is_samba_user: true
password: '17?4XPQ_!abc'
- name: felix.mueller
groups:
- all-users
- mbr-buero
- buero-scan
is_samba_user: true
password: 'U_i5zAR5H+ti'
- name: franz.mohorn
groups:
- buero-scan
is_samba_user: true
password: 'Kq5/b.4uWZIV'
- name: frederick.kannenberg
groups:
- all-users
- mbr-buero
- buero-scan
is_samba_user: true
password: 'riasFK2019!#'
- name: hamid.mohseni
groups:
- all-users
- mbr-buero
- buero-scan
is_samba_user: true
password: 'TFhCW9J4Vn4F'
- name: honorar.mbr1
groups:
- all-users
- mbr-buero
- buero-scan
is_samba_user: true
password: '_F313r4b3nd*'
- name: honorar.mbr2
groups:
- all-users
- mbr-buero
- buero-scan
is_samba_user: true
password: 'kQviLU-4rA_2'
- name: honorar.rias1
groups:
- all-users
- mbr-buero
- buero-scan
is_samba_user: true
password: '6jA,nmD,fdK!'
- name: isabella.greif
groups:
- mbr-buero
- buero-scan
is_samba_user: true
password: '5zv-Bo2.Cio9'
- name: isabell.wiesner
groups:
- all-users
- mbr-buero
- mbr-finanzen
- vdk
- rias-finanzen-personal
- bgn-finanzen-personal
- regishut
- regishut-personal-finanzen
- buero-scan
is_samba_user: true
password: 'XY_bunt_2020!'
- name: jennifer.pross
groups:
- all-users
- bmb
is_samba_user: true
password: 'V-S9Y/R+Am7H'
- name: janine.budich
groups:
- all-users
- mbr-buero
- mbr-finanzen
- mbr-personal
- buero-scan
is_samba_user: true
password: 'LoS_r3f_20_AS!'
- name: johannes.radke
groups:
- all-users
- mbr-buero
- buero-scan
is_samba_user: true
password: 'Furzf4brik!'
- name: judith.heinmueller
groups:
- all-users
- mbr-buero
- buero-scan
is_samba_user: true
password: 't32_aHxV.'
- name: julia.kopp
groups:
- all-users
- mbr-buero
- buero-scan
is_samba_user: true
password: '-a2%3bTzkW.A'
- name: kerstin.kuballa
groups:
- all-users
- mbr-buero
- buero-scan
is_samba_user: true
password: 'sVY2_2t+a+db'
- name: lavinia.schwedersky
groups:
- all-users
- mbr-buero
- buero-scan
is_samba_user: true
password: 'xJw.3R9vKf/N'
- name: lena.mahler
groups:
- all-users
- mbr-buero
- bgn
- bgn-finanzen-personal
- buero-scan
is_samba_user: true
password: 'YZ_bgn_2020!'
- name: linda.giesel
groups:
- all-users
- buero-scan
- regishut
- regishut-personal-finanzen
is_samba_user: true
password: 'SHUT_20_s3nc3!'
- name: manja.kasten
groups:
- all-users
- mbr-buero
- buero-scan
is_samba_user: true
password: 'Rasili_&n'
- name: marc.schwietring
groups:
- all-users
- mbr-buero
- buero-scan
- regishut
- regishut-personal-finanzen
is_samba_user: true
password: '69UnNr-g.ZuQ'
- name: mathias
groups:
- all-users
- mbr-buero
- buero-scan
is_samba_user: true
password: 'p3r*45p3r4*4d*45tr4m'
- name: matthias.mueller
groups:
- all-users
- mbr-buero
- mbr-personal
- buero-scan
is_samba_user: true
password: 'V1v@H@f3rdr1nk'
- name: michael.sulies
groups:
- all-users
- mbr-buero
- buero-scan
is_samba_user: true
password: 'Cryst4lp4l4c3'
- name: nina.rink
groups:
- all-users
- mbr-buero
- buero-scan
is_samba_user: true
password: 'BMW_mobit_2020!'
- name: pia.lamberty
groups:
- all-users
- mbr-buero
- buero-scan
is_samba_user: true
password: 'oasd31*as+Q%'
- name: pierre.ahrent
groups:
- all-users
- mbr-buero
- buero-scan
is_samba_user: true
password: 'GYiI3-s/_7wG'
- name: praktikum.bgn1
groups:
- all-users
- mbr-buero
- buero-scan
is_samba_user: true
password: 'MPL_baerin_20!'
- name: praktikum.mbr1
groups:
- all-users
- mbr-buero
- buero-scan
is_samba_user: true
password: '2001_RAT_urban!'
- name: praktikum.mbr2
groups:
- all-users
- mbr-buero
- buero-scan
is_samba_user: true
password: '20praktikum213'
- name: praktikum.rias1
groups:
- all-users
- mbr-buero
- buero-scan
is_samba_user: true
password: '7z7F%d3cv_dfjz'
- name: praktikum.rias2
groups:
- all-users
- mbr-buero
- buero-scan
is_samba_user: true
password: 'Q56V.6kf/JLQ'
- name: samuel.signer
groups:
- all-users
- mbr-buero
- buero-scan
is_samba_user: true
password: 'S4mmyC0mput3r!'
- name: scan
groups:
- all-users
- mbr-buero
- buero-scan
is_samba_user: true
password: '20scan13'
- name: simon
groups:
- all-users
- mbr-buero
- buero-scan
is_samba_user: true
password: 'S4u3rkr4ut!'
- name: tanja.kinzel
groups:
- all-users
- mbr-buero
- buero-scan
is_samba_user: true
password: 'sd7/SAqzU+Qi'
- name: till.hendlmeier
groups:
- all-users
- mbr-buero
- buero-scan
is_samba_user: true
password: '3/+v_7AGivxc'
- name: ulf.balmer
groups:
- all-users
- mbr-buero
- bgn
- bgn-finanzen-personal
- buero-scan
is_samba_user: true
password: 'ALL3_e6ene#'
# ==========
# vars used by roles/common/tasks/samba-install.yml
# ==========
apt_install_server_samba:
- samba
- nscd
# - winbind
apt_install_client_samba:
- samba-client
- samba-common
samba_server: file-mbr.mbr-bln.netz
samba_cronjob_trash_dirs:
name: Clean up Samba Trash Dirs
minute: "02"
hour: "23"
day: "*"
month: "*"
weekday: '*'
user: root
job: "/root/bin/samba/clean_samba_trash.sh"
samba_cronjob_permissions:
name: Set (group and access) Permissons for Samba shares
minute: "14"
hour: "23"
day: "*"
month: "*"
weekday: '*'
user: root
job: "/root/bin/samba/set_permissions_samba_shares.sh"
# ==========
# vars used by roles/common/tasks/samba-user.yml
# ==========
# ! Notice !
#
# variables used from other previos sections:
#
# - remove_system_users: roles/common/tasks/system-user.yml
# - remove_nis_users: roles/common/tasks/nis-install-server.yml
# - nis_user: roles/common/tasks/nis-install-server.yml
# ==========
# vars used by roles/common/tasks/mount_samba_shares.yml
# ==========
# ! Notice !
#
# variables used from other previos sections:
#
# - nis_user: roles/common/tasks/nis-install-server.yml
samba_workgroup: MBR
samba_netbios_name: FILE-MBR
samba_shares:
- name: Arbeitsrechtliches
path: /data/shares/Arbeitsrechtliches
group_valid_users: mbr-finanzen
group_write_list: mbr-finanzen
file_create_mask: '0660'
dir_create_mask: '2770'
vfs_object_recycle: true
recycle_path: '@Recycle.Bin'
user:
- anne
- bianca
- birgit.erhardt
- christina.wendt
- chris
- isabell.wiesner
- janine.budich
- sysadm
- name: Ausschreibungen
path: /data/shares/Ausschreibungen
group_valid_users: mbr-personal
group_write_list: mbr-personal
file_create_mask: '0660'
dir_create_mask: '2770'
vfs_object_recycle: true
recycle_path: '@Recycle.Bin'
user:
- anne
- bianca
- christina.wendt
- chris
- matthias.mueller
- janine.budich
- sysadm
- name: BGN-Finanzen-Personal
path: /data/shares/BGN-Finanzen-Personal
group_valid_users: bgn-finanzen-personal
group_write_list: bgn-finanzen-personal
file_create_mask: '0660'
dir_create_mask: '2770'
vfs_object_recycle: true
recycle_path: '@Recycle.Bin'
user:
- anne
- bianca
- christina.wendt
- chris
- isabell.wiesner
- lena.mahler
- sysadm
- ulf.balmer
- name: BMB
path: /data/shares/BMB
group_valid_users: bmb
group_write_list: bmb
file_create_mask: '0660'
dir_create_mask: '2770'
vfs_object_recycle: true
recycle_path: '@Recycle.Bin'
user:
- chris
- bianca
- jennifer.pross
- sysadm
- name: Buero-Organisation
path: /data/shares/Buero-Organisation
group_valid_users: all-users
group_write_list: all-users
file_create_mask: '0660'
dir_create_mask: '2770'
vfs_object_recycle: true
recycle_path: '@Recycle.Bin'
user:
- alexander.lorenz.milord
- alexander.rasumny
- alexander.steder
- anna.mueller1
- anne
- benjamin
- bianca
- birgit.erhardt
- bjoern.renkewitz
- christina.wendt
- chris
- daniel.poensgen
- doku.mbr2
- doku.mbr4
- doku.mbr5
- dora.streibl
- dorina.feldmann
- frederick.kannenberg
- felix.mueller
- hamid.mohseni
- isabell.wiesner
- janine.budich
- johannes.radke
- judith.heinmueller
- julia.kopp
- kerstin.kuballa
- lavinia.schwedersky
- lena.mahler
- linda.giesel
- manja.kasten
- marc.schwietring
- mathias
- matthias.mueller
- michael.sulies
- pia.lamberty
- honorar.mbr1
- honorar.mbr2
- nina.rink
- praktikum.bgn1
- praktikum.mbr1
- praktikum.mbr2
- praktikum.rias1
- bianca.loy
- praktikum.rias2
- honorar.rias1
- samuel.signer
- scan
- simon
- sysadm
- tanja.kinzel
- till.hendlmeier
- ulf.balmer
- name: BVV-Projekt
path: /data/shares/BVV-Projekt
group_valid_users: mbr-buero
group_write_list: mbr-buero
file_create_mask: '0660'
dir_create_mask: '2770'
vfs_object_recycle: true
recycle_path: '@Recycle.Bin'
user:
- alexander.rasumny
- anna.mueller1
- anne
- benjamin
- bianca
- birgit.erhardt
- bjoern.renkewitz
- christina.wendt
- chris
- daniel.poensgen
- doku.mbr2
- doku.mbr4
- doku.mbr5
- dora.streibl
- dorina.feldmann
- felix.mueller
- frederick.kannenberg
- hamid.mohseni
- isabell.wiesner
- janine.budich
- johannes.radke
- judith.heinmueller
- julia.kopp
- kerstin.kuballa
- lavinia.schwedersky
- lena.mahler
- manja.kasten
- mathias
- matthias.mueller
- michael.sulies
- pia.lamberty
- honorar.mbr1
- honorar.mbr2
- nina.rink
- praktikum.bgn1
- praktikum.mbr1
- praktikum.mbr2
- praktikum.rias1
- bianca.loy
- praktikum.rias2
- honorar.rias1
- samuel.signer
- scan
- simon
- sysadm
- tanja.kinzel
- till.hendlmeier
- ulf.balmer
- name: Finanzen
path: /data/shares/Finanzen
group_valid_users: mbr-finanzen
group_write_list: mbr-finanzen
file_create_mask: '0660'
dir_create_mask: '2770'
vfs_object_recycle: true
recycle_path: '@Recycle.Bin'
user:
- anne
- bianca
- birgit.erhardt
- christina.wendt
- chris
- isabell.wiesner
- janine.budich
- sysadm
- name: Install
path: /data/shares/Install
group_valid_users: mbr-admins
group_write_list: mbr-admins
file_create_mask: '0660'
dir_create_mask: '2770'
user:
- chris
- sysadm
- lokaladmin
- name: Kamera
path: /data/shares/Kamera
group_valid_users: mbr-kamera
group_write_list: mbr-kamera
file_create_mask: '0660'
dir_create_mask: '2770'
user:
- anne
- axis
- bianca
- chris
- sysadm
- name: MBR
path: /data/shares/MBR
group_valid_users: mbr-buero
group_write_list: mbr-buero
file_create_mask: '0660'
dir_create_mask: '2770'
vfs_object_recycle: true
recycle_path: '@Recycle.Bin'
user:
- alexander.rasumny
- anna.mueller1
- anne
- benjamin
- bianca
- birgit.erhardt
- bjoern.renkewitz
- christina.wendt
- chris
- daniel.poensgen
- doku.mbr2
- doku.mbr4
- doku.mbr5
- dorina.feldmann
- dora.streibl
- felix.mueller
- frederick.kannenberg
- hamid.mohseni
- isabella.greif
- isabell.wiesner
- janine.budich
- johannes.radke
- judith.heinmueller
- julia.kopp
- kerstin.kuballa
- lavinia.schwedersky
- lena.mahler
- manja.kasten
- mathias
- matthias.mueller
- michael.sulies
- pia.lamberty
- honorar.mbr1
- honorar.mbr2
- nina.rink
- praktikum.bgn1
- praktikum.mbr1
- praktikum.mbr2
- praktikum.rias1
- bianca.loy
- praktikum.rias2
- honorar.rias1
- samuel.signer
- scan
- simon
- sysadm
- tanja.kinzel
- till.hendlmeier
- ulf.balmer
- name: Mobilisierungsplattform
path: /data/shares/Mobilisierungsplattform
group_valid_users: mbr-buero
group_write_list: mbr-buero
file_create_mask: '0660'
dir_create_mask: '2770'
vfs_object_recycle: true
recycle_path: '@Recycle.Bin'
user:
- alexander.rasumny
- anna.mueller1
- anne
- benjamin
- bianca
- birgit.erhardt
- bjoern.renkewitz
- christina.wendt
- chris
- daniel.poensgen
- doku.mbr2
- doku.mbr4
- doku.mbr5
- dora.streibl
- dorina.feldmann
- frederick.kannenberg
- felix.mueller
- hamid.mohseni
- isabell.wiesner
- janine.budich
- johannes.radke
- judith.heinmueller
- julia.kopp
- kerstin.kuballa
- lavinia.schwedersky
- lena.mahler
- manja.kasten
- mathias
- matthias.mueller
- michael.sulies
- pia.lamberty
- honorar.mbr1
- honorar.mbr2
- nina.rink
- praktikum.bgn1
- praktikum.mbr1
- praktikum.mbr2
- praktikum.rias1
- bianca.loy
- praktikum.rias2
- honorar.rias1
- samuel.signer
- scan
- simon
- sysadm
- tanja.kinzel
- till.hendlmeier
- ulf.balmer
- name: Regishut
path: /data/shares/Regishut
group_valid_users: regishut
group_write_list: regishut
file_create_mask: '0660'
dir_create_mask: '2770'
vfs_object_recycle: true
recycle_path: '@Recycle.Bin'
user:
- alexander.steder
- alexander.lorenz.milord
- benjamin
- bianca
- christina.wendt
- isabell.wiesner
- linda.giesel
- marc.schwietring
- name: Regishut-Personal-Finanzen
path: /data/shares/Regishut-Personal-Finanzen
group_valid_users: regishut-personal-finanzen
group_write_list: regishut-personal-finanzen
file_create_mask: '0660'
dir_create_mask: '2770'
vfs_object_recycle: true
recycle_path: '@Recycle.Bin'
user:
- benjamin
- bianca
- christina.wendt
- isabell.wiesner
- linda.giesel
- marc.schwietring
- name: RIAS
path: /data/shares/RIAS
group_valid_users: mbr-buero
group_write_list: mbr-buero
file_create_mask: '0660'
dir_create_mask: '2770'
vfs_object_recycle: true
recycle_path: '@Recycle.Bin'
user:
- alexander.rasumny
- anna.mueller1
- anne
- benjamin
- bianca
- birgit.erhardt
- bjoern.renkewitz
- christina.wendt
- chris
- daniel.poensgen
- doku.mbr2
- doku.mbr4
- doku.mbr5
- dora.streibl
- dorina.feldmann
- felix.mueller
- hamid.mohseni
- isabell.wiesner
- janine.budich
- johannes.radke
- judith.heinmueller
- julia.kopp
- kerstin.kuballa
- lavinia.schwedersky
- lena.mahler
- manja.kasten
- mathias
- matthias.mueller
- michael.sulies
- pia.lamberty
- honorar.mbr1
- honorar.mbr2
- nina.rink
- praktikum.bgn1
- praktikum.mbr1
- praktikum.mbr2
- praktikum.rias1
- bianca.loy
- praktikum.rias2
- honorar.rias1
- samuel.signer
- scan
- simon
- sysadm
- tanja.kinzel
- till.hendlmeier
- ulf.balmer
- name: RIAS-Finanzen-Personal
path: /data/shares/RIAS-Finanzen-Personal
group_valid_users: rias-finanzen-personal
group_write_list: rias-finanzen-personal
file_create_mask: '0660'
dir_create_mask: '2770'
vfs_object_recycle: true
recycle_path: '@Recycle.Bin'
user:
- anne
- bianca
- benjamin
- birgit.erhardt
- christina.wendt
- chris
- isabell.wiesner
- sysadm
- name: SCAN
path: /data/shares/SCAN
group_valid_users: buero-scan
group_write_list: buero-scan
file_create_mask: '0660'
dir_create_mask: '2770'
vfs_object_recycle: true
recycle_path: '@Recycle.Bin'
user:
- alexander.lorenz.milord
- alexander.rasumny
- alexander.steder
- anna.mueller1
- anne
- benjamin
- bianca
- birgit.erhardt
- bjoern.renkewitz
- christina.wendt
- chris
- daniel.poensgen
- doku.mbr2
- doku.mbr4
- doku.mbr5
- dora.streibl
- dorina.feldmann
- franz.mohorn
- frederick.kannenberg
- felix.mueller
- hamid.mohseni
- isabella.greif
- isabell.wiesner
- janine.budich
- johannes.radke
- judith.heinmueller
- julia.kopp
- kerstin.kuballa
- lavinia.schwedersky
- lena.mahler
- linda.giesel
- manja.kasten
- mathias
- matthias.mueller
- michael.sulies
- pia.lamberty
- honorar.mbr1
- honorar.mbr2
- nina.rink
- praktikum.bgn1
- praktikum.mbr1
- praktikum.mbr2
- praktikum.rias1
- bianca.loy
- praktikum.rias2
- honorar.rias1
- samuel.signer
- scan
- simon
- sysadm
- tanja.kinzel
- till.hendlmeier
- ulf.balmer
- name: VDK
path: /data/shares/VDK
group_valid_users: mbr-buero
group_write_list: mbr-buero
file_create_mask: '0660'
dir_create_mask: '2770'
vfs_object_recycle: true
recycle_path: '@Recycle.Bin'
user:
- alexander.rasumny
- anna.mueller1
- anne
- benjamin
- bianca
- birgit.erhardt
- bjoern.renkewitz
- christina.wendt
- chris
- daniel.poensgen
- doku.mbr2
- doku.mbr4
- doku.mbr5
- dora.streibl
- dorina.feldmann
- felix.mueller
- frederick.kannenberg
- hamid.mohseni
- isabell.wiesner
- janine.budich
- johannes.radke
- judith.heinmueller
- julia.kopp
- kerstin.kuballa
- lavinia.schwedersky
- lena.mahler
- manja.kasten
- mathias
- matthias.mueller
- michael.sulies
- pia.lamberty
- honorar.mbr1
- honorar.mbr2
- nina.rink
- praktikum.bgn1
- praktikum.mbr1
- praktikum.mbr2
- praktikum.rias1
- bianca.loy
- praktikum.rias2
- honorar.rias1
- samuel.signer
- scan
- simon
- sysadm
- tanja.kinzel
- till.hendlmeier
- ulf.balmer
- name: Video
path: /data/shares/Video
group_valid_users: mbr-buero
group_write_list: mbr-buero
file_create_mask: '0660'
dir_create_mask: '2770'
vfs_object_recycle: true
recycle_path: '@Recycle.Bin'
user:
- alexander.rasumny
- anna.mueller1
- anne
- benjamin
- bianca
- birgit.erhardt
- bjoern.renkewitz
- christina.wendt
- chris
- daniel.poensgen
- doku.mbr2
- doku.mbr4
- doku.mbr5
- dora.streibl
- dorina.feldmann
- felix.mueller
- frederick.kannenberg
- hamid.mohseni
- isabella.greif
- isabell.wiesner
- janine.budich
- johannes.radke
- judith.heinmueller
- julia.kopp
- kerstin.kuballa
- lavinia.schwedersky
- lena.mahler
- manja.kasten
- mathias
- matthias.mueller
- michael.sulies
- pia.lamberty
- honorar.mbr1
- honorar.mbr2
- nina.rink
- praktikum.bgn1
- praktikum.mbr1
- praktikum.mbr2
- praktikum.rias1
- bianca.loy
- praktikum.rias2
- honorar.rias1
- samuel.signer
- scan
- simon
- sysadm
- tanja.kinzel
- till.hendlmeier
- ulf.balmer
# ==========
# vars used by roles/common/tasks/system-user-systemfiles.yml
# ==========
# ! Notice !
#
# variables used from other previos sections:
#
# - system_users: roles/common/tasks/system-user.yml
# ==========
# vars used by roles/common/tasks/nis-user-systemfiles.yml
# ==========
# ! Notice !
#
# variables used from other previos sections:
#
# - nis_user: roles/common/tasks/nis-install-server.yml
# ==========
# vars used by roles/common/tasks/sudoers-pc.yml
# ==========
sudo_pc_users:
- chris
- sysadm
- lokaladmin
# /etc/sudoers
#
sudoers_pc_defaults:
- env_reset
- mail_badpass
- 'secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"'
sudoers_pc_host_aliases: []
sudoers_pc_user_aliases: []
sudoers_pc_cmnd_aliases: []
sudoers_pc_runas_aliases: []
sudoers_pc_user_privileges:
- name: root
entry: 'ALL=(ALL:ALL) ALL'
sudoers_pc_group_privileges: []
# /etc/sudoers.d/50-user
#
sudoers_pc_file_defaults: []
sudoers_pc_file_host_aliases: []
sudoers_pc_file_user_aliases: []
sudoers_pc_file_cmnd_aliases:
- name: MOUNT
entry: '/bin/mount,/bin/umount'
sudoers_pc_file_runas_aliases: []
# ==========
# vars used by roles/common/tasks/sudoers-server.yml
# ==========
sudo_server_users:
- chris
- sysadm
# /etc/sudoers
#
sudoers_server_defaults:
- env_reset
- mail_badpass
- 'secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"'
sudoers_server_host_aliases: []
sudoers_server_user_aliases: []
sudoers_server_cmnd_aliases: []
sudoers_server_runas_aliases: []
sudoers_server_user_privileges:
- name: root
entry: 'ALL=(ALL:ALL) ALL'
sudoers_server_group_privileges: []
sudoers_server_remove_user:
- back
- www-data
# /etc/sudoers.d/50-user
#
sudoers_server_file_defaults: []
sudoers_server_file_host_aliases: []
sudoers_server_file_user_aliases: []
sudoers_server_file_cmnd_aliases: []
sudoers_server_file_runas_aliases: []
sudoers_server_file_user_back_privileges:
- 'ALL=(root) NOPASSWD: /usr/bin/rsync'
- 'ALL=(root) NOPASSWD: /usr/bin/find'
- 'ALL=(root) NOPASSWD: /usr/bin/realpath'
sudoers_server_file_user_back_disk_privileges:
- 'ALL=(root) NOPASSWD: /usr/bin/which'
- 'ALL=(root) NOPASSWD: /sbin/hdparm -I /dev/*'
- 'ALL=(root) NOPASSWD: /sbin/fdisk'
- 'ALL=(root) NOPASSWD: /sbin/sgdisk'
- 'ALL=(root) NOPASSWD: /sbin/sfdisk -d /dev/*'
- 'ALL=(root) NOPASSWD: /bin/dd if=/dev/*'
- 'ALL=(root) NOPASSWD: /sbin/parted'
- 'ALL=(root) NOPASSWD: /sbin/gdisk'
# sudoers_server_file_user_privileges
# - name: <name1>
# entry: <sudoer-entry1>
# - name : <name2>
# entry: <sudoer-entry22>
# - ...
#
sudoers_server_file_user_privileges: []
# sudoers_server_file_group_privileges
# - name: <name1>
# entry: <sudoer-entry1>
# - name : <name2>
# entry: <sudoer-entry22>
# - ...
#
sudoers_server_file_group_privileges: []
# ==========
# vars used by roles/common/tasks/ubuntu-x11vnc-1604-amd64.yml
# vars used by roles/common/tasks/ubuntu-x11vnc-1804-amd64.yml
# ==========
vnc_password: !vault |
$ANSIBLE_VAULT;1.1;AES256
34646461313062646632343839653332643963386236623838646233663437626165316261313035
6330643938623565363865616531316364353664383132630a353132366239663865653261323037
61326231636261366339633835636538313330343862303538356636616264663065323834623832
6138303037643333660a643461356138343639663662653263306666643433643561373432613966
6663
# ==========
# vars used by roles/common/tasks/luks.yml
# ==========
# Note!
#
# Define this vriable client specific in files
# 'host_vars/<client-pc>'
#
luks_device: []
# ====================
# ====================
# ====================
# ---
# vars used by roles/ansible_dependencies
# ---
apt_ansible_dependencies:
- python
- python3
- python3-apt
- lsb-release
- apt-transport-https
- dbus
- sudo
- vim
- net-tools
- vlan
#- python-apt
# ---
# vars used by roles/ansible_user
# ---
ssh_keys_admin:
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO90culn3sicU2chTHn40ytcTay0nUIHap0uF/5fVM6P chris@sol'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOQHMUKlDh2ufno5pZOhUY5xFljC1R5zQ/GjOHDkS58D root@sol'
ansible_remote_user:
- name: lokaladmin
password: $6$KLQUDbiw$qvsGUndXr2G3DxhML6maD/nsJtXfElSLQ7ufkMuJu2vACbYX7kqNXdiU17oX6CyN5L1xARZ.TiES/w7zfh0Cu/
shell: /bin/bash
Reference in New Issue View Git Blame Copy Permalink