488 lines
9.4 KiB
YAML
488 lines
9.4 KiB
YAML
---
|
|
|
|
# ==========
|
|
# vars used by roles/common/tasks/basic.yml
|
|
# ==========
|
|
|
|
|
|
# ==========
|
|
# vars used by roles/common/tasks/sshd.yml
|
|
# ==========
|
|
|
|
sshd_permit_root_login: !!str "yes"
|
|
|
|
|
|
# ==========
|
|
# vars used by roles/common/tasks/apt.yml
|
|
# ==========
|
|
|
|
|
|
# ==========
|
|
# vars used by roles/common/tasks/git.yml
|
|
# ==========
|
|
|
|
|
|
|
|
# ==========
|
|
# vars used by roles/common/tasks/ntp.yml
|
|
# ==========
|
|
|
|
# name or ip-adress from the (local) ntp server, mostly the gateway
|
|
#
|
|
ntp_server: gw-flr.flr.netz
|
|
|
|
|
|
# ==========
|
|
# vars used by roles/common/tasks/nfs.yml
|
|
# ==========
|
|
|
|
nfs_server: 192.168.102.10
|
|
|
|
# Set 'fs_encrypted' to true if filesystem lives on an encrypted
|
|
# partition.
|
|
#
|
|
nfs_exports:
|
|
- src: 192.168.102.10:/data/home
|
|
path: /data/home
|
|
mount_opts: users,rsize=8192,wsize=8192,hard,intr
|
|
export_opt: rw,root_squash,sync,subtree_check
|
|
export_networks:
|
|
- 192.168.102.0/24
|
|
- 10.0.102.0/24
|
|
- 10.1.102.0/24
|
|
- 192.168.63.0/24
|
|
fs_encrypted: false
|
|
use_fsid_option: true
|
|
|
|
- src: 192.168.102.10:/data/samba
|
|
path: /data/samba
|
|
mount_opts: users,rsize=8192,wsize=8192,hard,intr
|
|
export_opt: rw,root_squash,sync,subtree_check
|
|
export_networks:
|
|
- 192.168.102.0/24
|
|
- 10.0.102.0/24
|
|
- 10.1.102.0/24
|
|
- 192.168.63.0/24
|
|
fs_encrypted: false
|
|
use_fsid_option: true
|
|
|
|
|
|
# ==========
|
|
# vars used by roles/common/tasks/pure-ftpd-install.yml
|
|
# ==========
|
|
|
|
|
|
# ==========
|
|
# vars used by roles/common/tasks/system-user.yml
|
|
# ==========
|
|
|
|
# ! Notice !
|
|
#
|
|
# On NIS supported Server put your users and groups in the
|
|
# appropriate section for playbook 'nis-user.yml'
|
|
#
|
|
# ! Notice !
|
|
|
|
remove_system_users: []
|
|
|
|
system_users: []
|
|
#system_users:
|
|
# - name: sysadm
|
|
# password: '9xFXkdPR_2'
|
|
|
|
system_groups: []
|
|
|
|
base_home: /home
|
|
|
|
|
|
# ==========
|
|
# vars used by roles/common/tasks/nis-install-server.yml
|
|
# vars used by roles/common/tasks/nis-user.yml
|
|
# vars used by roles/common/tasks/nis-install-client.yml
|
|
# ==========
|
|
|
|
# used by templates
|
|
# - yp.conf.j2
|
|
# - defaultdomain.j2
|
|
nis_domain: flr.netz
|
|
|
|
nis_server_address: 192.168.102.10
|
|
|
|
nis_server_name: file-flr.flr.netz
|
|
|
|
nis_base_home: /data/home
|
|
|
|
nis_groups:
|
|
- name: team
|
|
group_id: 1030
|
|
- name: esf-bleibnet
|
|
group_id: 1031
|
|
- name: amif
|
|
group_id: 1032
|
|
- name: quali
|
|
group_id: 1033
|
|
- name: aktion-mensch
|
|
group_id: 1034
|
|
- name: foerderung
|
|
group_id: 1035
|
|
- name: buchhaltung
|
|
group_id: 1036
|
|
- name: verwaltung
|
|
group_id: 1037
|
|
|
|
remove_nis_users: []
|
|
#remove_nis_users:
|
|
# - name: test
|
|
# - name: ivana
|
|
|
|
nis_user:
|
|
|
|
- name: chris
|
|
groups:
|
|
- team
|
|
- esf-bleibnet
|
|
- amif
|
|
- quali
|
|
- aktion-mensch
|
|
- foerderung
|
|
- buchhaltung
|
|
- verwaltung
|
|
is_samba_user: true
|
|
password: !vault |
|
|
$ANSIBLE_VAULT;1.1;AES256
|
|
35653838343532663632326462656437363665316337316336316335383263633630616638313736
|
|
3937666561356232666136646435613361336437303637360a353561316633373265323931623565
|
|
32643966373962313334343565643130373535353238316161623837333130353231343332663930
|
|
3638386337333636390a393738373935646638383237373663376434366361363938346335663438
|
|
6637
|
|
|
|
- name: mara
|
|
groups:
|
|
- foerderung
|
|
- quali
|
|
- team
|
|
is_samba_user: true
|
|
password: '20/mara_16!'
|
|
|
|
- name: flr
|
|
groups:
|
|
- team
|
|
- esf-bleibnet
|
|
- amif
|
|
- quali
|
|
- aktion-mensch
|
|
- foerderung
|
|
- buchhaltung
|
|
- verwaltung
|
|
is_samba_user: true
|
|
password: '20-flr-brb_18'
|
|
|
|
- name: hannah
|
|
groups:
|
|
- team
|
|
- esf-bleibnet
|
|
- amif
|
|
- quali
|
|
- aktion-mensch
|
|
- foerderung
|
|
- buchhaltung
|
|
- verwaltung
|
|
is_samba_user: true
|
|
password: 'Y7ef%9+V_LoE'
|
|
|
|
- name: henrike
|
|
groups:
|
|
- amif
|
|
- quali
|
|
- team
|
|
is_samba_user: true
|
|
password: '20%-hen-rike.22-!'
|
|
|
|
- name: kamue
|
|
groups:
|
|
- team
|
|
- esf-bleibnet
|
|
- amif
|
|
- quali
|
|
- aktion-mensch
|
|
- foerderung
|
|
- buchhaltung
|
|
- verwaltung
|
|
is_samba_user: true
|
|
password: '20_katha-mue%19'
|
|
|
|
- name: lotta
|
|
groups:
|
|
- team
|
|
- amif
|
|
is_samba_user: true
|
|
password: '20_lotta_15!'
|
|
|
|
- name: mustafa
|
|
groups:
|
|
- team
|
|
- aktion-mensch
|
|
is_samba_user: true
|
|
password: 'mu-20-sta-21_%!'
|
|
|
|
- name: kirstin
|
|
groups:
|
|
- team
|
|
- aktion-mensch
|
|
is_samba_user: true
|
|
password: '20_kir-17-stin!'
|
|
|
|
- name: pierre
|
|
groups:
|
|
- team
|
|
- esf-bleibnet
|
|
is_samba_user: true
|
|
password: '20_pierre16!20'
|
|
|
|
- name: rola
|
|
groups:
|
|
- amif
|
|
- team
|
|
is_samba_user: true
|
|
password: '20-ro-la%22!'
|
|
|
|
- name: vincent
|
|
groups:
|
|
- team
|
|
- esf-bleibnet
|
|
- amif
|
|
- quali
|
|
- aktion-mensch
|
|
- foerderung
|
|
- buchhaltung
|
|
- verwaltung
|
|
is_samba_user: true
|
|
password: 'vin-20-cent_21!'
|
|
|
|
- name: verwaltung-2
|
|
groups:
|
|
- buchhaltung
|
|
- verwaltung
|
|
is_samba_user: true
|
|
password: '20-ver-wal-tung%23!'
|
|
|
|
|
|
|
|
|
|
# ==========
|
|
# vars used by roles/common/tasks/samba-install.yml
|
|
# ==========
|
|
|
|
samba_server: file-flr.flr.netz
|
|
samba_server_ip: 192.168.102.10
|
|
samba_server_cidr_prefix: 24
|
|
|
|
|
|
# ==========
|
|
# vars used by roles/common/tasks/samba-user.yml
|
|
# ==========
|
|
|
|
# ! Notice !
|
|
#
|
|
# variables used from other previos sections:
|
|
#
|
|
# - remove_system_users: roles/common/tasks/system-user.yml
|
|
# - remove_nis_users: roles/common/tasks/nis-install-server.yml
|
|
# - nis_user: roles/common/tasks/nis-install-server.yml
|
|
|
|
# ==========
|
|
# vars used by roles/common/tasks/mount_samba_shares.yml
|
|
# ==========
|
|
|
|
# ! Notice !
|
|
#
|
|
# variables used from other previos sections:
|
|
#
|
|
# - nis_user: roles/common/tasks/nis-install-server.yml
|
|
|
|
samba_workgroup: FLR
|
|
samba_netbios_name: FILE-FLR
|
|
|
|
samba_shares:
|
|
- name: Team
|
|
path: /data/samba/Team
|
|
group_valid_users: team
|
|
group_write_list: team
|
|
file_create_mask: '0660'
|
|
dir_create_mask: '2770'
|
|
vfs_object_recycle: true
|
|
recycle_path: '@Recycle.Bin'
|
|
user:
|
|
- chris
|
|
- flr
|
|
- hannah
|
|
- henrike
|
|
- kamue
|
|
- kirstin
|
|
- mara
|
|
- lotta
|
|
- mustafa
|
|
- pierre
|
|
- vincent
|
|
|
|
- name: ESF-BleibNet
|
|
path: /data/samba/ESF-BleibNet
|
|
group_valid_users: esf-bleibnet
|
|
group_write_list: esf-bleibnet
|
|
file_create_mask: '0660'
|
|
dir_create_mask: '2770'
|
|
vfs_object_recycle: true
|
|
recycle_path: '@Recycle.Bin'
|
|
user:
|
|
- chris
|
|
- hannah
|
|
- henrike
|
|
- kamue
|
|
- pierre
|
|
- vincent
|
|
|
|
- name: AMIF
|
|
path: /data/samba/AMIF
|
|
group_valid_users: amif
|
|
group_write_list: amif
|
|
file_create_mask: '0660'
|
|
dir_create_mask: '2770'
|
|
vfs_object_recycle: true
|
|
recycle_path: '@Recycle.Bin'
|
|
user:
|
|
- chris
|
|
- hannah
|
|
- kamue
|
|
- lotta
|
|
- vincent
|
|
|
|
- name: Quali
|
|
path: /data/samba/Quali
|
|
group_valid_users: quali
|
|
group_write_list: quali
|
|
file_create_mask: '0660'
|
|
dir_create_mask: '2770'
|
|
vfs_object_recycle: true
|
|
recycle_path: '@Recycle.Bin'
|
|
user:
|
|
- chris
|
|
- hannah
|
|
- kamue
|
|
- mara
|
|
- henrike
|
|
|
|
- name: Aktion-Mensch
|
|
path: /data/samba/Aktion-Mensch
|
|
group_valid_users: aktion-mensch
|
|
group_write_list: aktion-mensch
|
|
file_create_mask: '0660'
|
|
dir_create_mask: '2770'
|
|
vfs_object_recycle: true
|
|
recycle_path: '@Recycle.Bin'
|
|
user:
|
|
- chris
|
|
- hannah
|
|
- kamue
|
|
- kirstin
|
|
- mustafa
|
|
|
|
- name: Strukturfoerderung-und-Archiv-Projekte
|
|
path: /data/samba/Strukturfoerderung-und-Archiv-Projekte
|
|
group_valid_users: foerderung
|
|
group_write_list: foerderung
|
|
file_create_mask: '0660'
|
|
dir_create_mask: '2770'
|
|
vfs_object_recycle: true
|
|
recycle_path: '@Recycle.Bin'
|
|
user:
|
|
- chris
|
|
- hannah
|
|
- kamue
|
|
- mara
|
|
|
|
- name: Buchhaltung
|
|
path: /data/samba/Buchhaltung
|
|
group_valid_users: buchhaltung
|
|
group_write_list: buchhaltung
|
|
file_create_mask: '0660'
|
|
dir_create_mask: '2770'
|
|
vfs_object_recycle: true
|
|
recycle_path: '@Recycle.Bin'
|
|
user:
|
|
- chris
|
|
- hannah
|
|
|
|
- name: Verwaltung
|
|
path: /data/samba/Verwaltung
|
|
group_valid_users: verwaltung
|
|
group_write_list: verwaltung
|
|
file_create_mask: '0660'
|
|
dir_create_mask: '2770'
|
|
vfs_object_recycle: true
|
|
recycle_path: '@Recycle.Bin'
|
|
user:
|
|
- chris
|
|
- hannah
|
|
- kamue
|
|
|
|
- name: Install
|
|
path: /data/samba/Install
|
|
group_valid_users: team
|
|
group_write_list: team
|
|
file_create_mask: '0660'
|
|
dir_create_mask: '2770'
|
|
vfs_object_recycle: true
|
|
recycle_path: '@Recycle.Bin'
|
|
user:
|
|
- chris
|
|
- hannah
|
|
- kamue
|
|
|
|
|
|
# ==========
|
|
# vars used by roles/common/tasks/system-user-systemfiles.yml
|
|
# ==========
|
|
|
|
# ! Notice !
|
|
#
|
|
# variables used from other previos sections:
|
|
#
|
|
# - system_users: roles/common/tasks/system-user.yml
|
|
|
|
|
|
# ==========
|
|
# vars used by roles/common/tasks/nis-user-systemfiles.yml
|
|
# ==========
|
|
|
|
# ! Notice !
|
|
#
|
|
# variables used from other previos sections:
|
|
#
|
|
# - nis_user: roles/common/tasks/nis-install-server.yml
|
|
|
|
|
|
# ==========
|
|
# vars used by roles/common/tasks/sudoers-pc.yml
|
|
# ==========
|
|
|
|
sudo_pc_users:
|
|
- chris
|
|
- sysadm
|
|
|
|
|
|
# ==========
|
|
# vars used by roles/common/tasks/sudoers-server.yml
|
|
# ==========
|
|
|
|
|
|
# ==========
|
|
# vars used by roles/common/tasks/ubuntu-x11vnc-1604-amd64.yml
|
|
# vars used by roles/common/tasks/ubuntu-x11vnc-1804-amd64.yml
|
|
# ==========
|
|
|
|
|
|
# ==========
|
|
# vars used by roles/common/tasks/luks.yml
|
|
# ==========
|
|
|