--- # --- # vars used by roles/network_interfaces # --- # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted network_manage_devices: True # Should the interfaces be reloaded after config change? network_interface_reload: False network_interface_path: /etc/network/interfaces.d network_interface_required_packages: - vlan - bridge-utils - ifmetric - ifupdown - ifenslave - resolvconf network_interfaces: - device: eno1 # use only once per device (for the first device entry) headline: eno1 - LAN # auto & allow are only used for the first device entry allow: [] # array of allow-[stanzas] eg. allow-hotplug auto: true family: inet method: static description: address: 192.168.162.10 netmask: 24 gateway: 192.168.162.254 # optional dns settings nameservers: [] # # nameservers: # - 194.150.168.168 # dns.as250.net # - 91.239.100.100 # anycast.censurfridns.dk # search: warenform.de # nameservers: - 192.168.162.1 search: blkr.netz # --- # vars used by roles/ansible_dependencies # --- # --- # vars used by roles/ansible_user # --- # --- # vars used by roles/common/tasks/basic.yml # --- # --- # vars used by roles/common/tasks/sshd.yml # --- sshd_macs: - hmac-sha1 - hmac-sha2-256-etm@openssh.com - hmac-sha2-512-etm@openssh.com - umac-128-etm@openssh.com sshd_hostkeyalgorithms: - ecdsa-sha2-nistp256-cert-v01@openssh.com - ecdsa-sha2-nistp384-cert-v01@openssh.com - ecdsa-sha2-nistp521-cert-v01@openssh.com - ssh-ed25519-cert-v01@openssh.com - rsa-sha2-512-cert-v01@openssh.com - rsa-sha2-256-cert-v01@openssh.com - ssh-rsa-cert-v01@openssh.com - ecdsa-sha2-nistp256 - ecdsa-sha2-nistp384 - ecdsa-sha2-nistp521 - ssh-ed25519 - rsa-sha2-512 - rsa-sha2-256 - ssh-rsa # --- # vars used by roles/common/tasks/apt.yml # --- # --- # vars used by roles/common/tasks/cron.yml # --- cron_user_special_time_entries: - name: "Restart DNS Cache service 'systemd-resolved'" special_time: reboot job: "sleep 10 ; /bin/systemctl restart systemd-resolved" insertafter: PATH # --- # vars used by roles/common/tasks/users.yml # --- default_user: - name: chris password: $6$bSHlaLHC$URSMVq090e/cJ1v55Jh9ws0w5WekhO7X3Y0RqryAl5R76K9khWBegC76Smjastja.xMiD57/LzUUXW7y9NvAL. shell: /bin/bash ssh_keys: - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO90culn3sicU2chTHn40ytcTay0nUIHap0uF/5fVM6P chris@sol' - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOQHMUKlDh2ufno5pZOhUY5xFljC1R5zQ/GjOHDkS58D root@sol' - name: sysadm user_id: 1050 group_id: 1050 group: sysadm password: $6$EEVWxA5E$bNxU8EOp/tTcYVghFharUM10k3vRt2siEnIiiznfGmhMSM6zJTP0umdxql9VVEj856oKa.Sp.q3N2nthgNMeN1 shell: /bin/bash ssh_keys: - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO90culn3sicU2chTHn40ytcTay0nUIHap0uF/5fVM6P chris@sol' - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOQHMUKlDh2ufno5pZOhUY5xFljC1R5zQ/GjOHDkS58D root@sol' - name: back user_id: 1060 group_id: 1060 group: back password: $6$GntX81EP$O1GEmQF.BbOQfTMMw/m/BDKSXmANVpqmz0nyzw4O4R2/iK9huGOAjT/2eq8FVdMghvNOvdwrWtwohO.Mg4V9n. shell: /bin/bash ssh_keys: - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO90culn3sicU2chTHn40ytcTay0nUIHap0uF/5fVM6P chris@sol' - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOQHMUKlDh2ufno5pZOhUY5xFljC1R5zQ/GjOHDkS58D root@sol' sudo_users: - chris - sysadm - localadmin # --- # vars used by roles/common/tasks/users-systemfiles.yml # --- # --- # vars used by roles/common/tasks/webadmin-user.yml # --- # --- # vars used by roles/common/tasks/sudoers.yml # --- # # see: roles/common/tasks/vars # --- # vars used by roles/common/tasks/caching-nameserver.yml # --- # --- # vars used by roles/common/tasks/git.yml # --- # --- # vars used by roles/common/tasks/samba-config-server.yml # vars used by roles/common/tasks/samba-user.yml # --- samba_server_ip: 192.168.162.10 samba_server_cidr_prefix: 24 samba_workgroup: BLKR samba_netbios_name: FILE-BLKR samba_server_min_protocol: !!str NT1 samba_groups: - name: buero group_id: 1100 - name: verwaltung group_id: 1110 samba_user: - name: anya groups: - buero - verwaltung password: 'Mq9R.WhKtP4v' - name: chris groups: - buero - verwaltung password: !vault | $ANSIBLE_VAULT;1.1;AES256 63643330373231636537366333326630333265303265653933613835656262323863363038653234 3462653135633266373439626263356636646637643035340a653466356235346663626163306363 61313164643061306433643738643563303036646334376536626531383965303036386162393832 6631333038306462610a356535633265633563633962333137326533633834636331343562633765 3631 - name: josephine groups: - buero - verwaltung password: 'H7jnJ/m9W-bf' - name: julius groups: - buero - verwaltung password: 'fx9j/3X-thPr' - name: julius-e groups: - buero password: '2/kcx3jju-tr' - name: leonie groups: - buero password: '6.4aVX7rQ-9H' - name: philip groups: - buero - verwaltung password: 'fN%749Psv_NR' - name: buero1 groups: - buero password: 'Mfr!7tK+d49C' - name: buero2 groups: - buero password: 'gW-wg3Pttf4/' - name: buero3 groups: - buero password: 'Qc-WyMhJ/3-2' - name: referendariat groups: - buero password: '4/zCNXnVF7+i' - name: ref1 groups: - buero password: '???' - name: sebastian groups: - buero password: 'bhNC.P5eTy-2' base_home: /home # remove_samba_users: # - name: name1 # - name: name2 # remove_samba_users: [] samba_shares: - name: buero comment: Buero auf Fileserver path: /data/samba/shares/buero group_valid_users: buero group_write_list: buero file_create_mask: !!str 664 dir_create_mask: !!str 2775 vfs_object_recycle: true recycle_path: '@Recycle' - name: Verwaltung comment: verwaltung auf Fileserver path: /data/samba/shares/verwaltung group_valid_users: verwaltung group_write_list: verwaltung file_create_mask: !!str 664 dir_create_mask: !!str 2775 vfs_object_recycle: true recycle_path: '@Recycle' # ============================== # --- # vars used by scripts/reset_root_passwd.yml # --- root_user: name: root password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.