--- # --- # vars used by roles/network_interfaces # --- # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted network_manage_devices: True # Should the interfaces be reloaded after config change? network_interface_reload: False network_interface_path: /etc/network/interfaces.d network_interface_required_packages: - vlan - bridge-utils - ifmetric - ifupdown - ifenslave - resolvconf network_interfaces: - device: br0 # use only once per device (for the first device entry) headline: br0 - bridge over device eno1 # auto & allow are only used for the first device entry allow: [] # array of allow-[stanzas] eg. allow-hotplug auto: true family: inet method: static hwaddress: 3c:ec:ef:96:ab:f6 description: address: 192.168.182.10 netmask: 24 gateway: 192.168.182.254 # optional dns settings nameservers: [] # # nameservers: # - 194.150.168.168 # dns.as250.net # - 91.239.100.100 # anycast.censurfridns.dk # search: warenform.de # nameservers: - 192.168.182.1 search: ebs.netz # optional bridge parameters bridge: {} # bridge: # ports: # stp: # fd: # maxwait: # waitport: bridge: ports: eno1 # for mor devices support a blank separated list stp: !!str off fd: 5 hello: 2 maxage: 12 # inline hook scripts pre-up: - !!str "ip link set dev eno1 up" # pre-up script lines up: [] #up script lines post-up: [] # post-up script lines (alias for up) pre-down: [] # pre-down script lines (alias for down) down: [] # down script lines post-down: [] # post-down script lines # --- # vars used by roles/ansible_dependencies # --- # --- # vars used by roles/ansible_user # --- # --- # vars used by roles/common/tasks/basic.yml # --- # --- # vars used by roles/common/tasks/sshd.yml # --- # --- # vars used by roles/common/tasks/apt.yml # --- # --- # vars used by roles/common/tasks/cron.yml # --- cron_user_special_time_entries: - name: "Restart DNS Cache service 'systemd-resolved'" special_time: reboot job: "sleep 10 ; /bin/systemctl restart systemd-resolved" insertafter: PATH # --- # vars used by roles/common/tasks/users.yml # --- default_user: - name: chris password: $y$j9T$0XQhh8c6la88C73wfsF821$mDs6UDfRQ3FnVdqOS/SNZXPi60lgnIlNkKYF97QnoH6 shell: /bin/bash ssh_keys: - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO90culn3sicU2chTHn40ytcTay0nUIHap0uF/5fVM6P chris@sol' - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOQHMUKlDh2ufno5pZOhUY5xFljC1R5zQ/GjOHDkS58D root@sol' - name: sysadm user_id: 1050 group_id: 1050 group: sysadm password: $y$j9T$WWsYp2DSIw4jNx5/IaKzY1$VjvTQYvSaQtJDiiNYxOUDEx9QdIPTZ1YWXSSaS1whH/ shell: /bin/bash ssh_keys: - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO90culn3sicU2chTHn40ytcTay0nUIHap0uF/5fVM6P chris@sol' - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOQHMUKlDh2ufno5pZOhUY5xFljC1R5zQ/GjOHDkS58D root@sol' - name: back user_id: 1060 group_id: 1060 group: back password: $y$j9T$7dGxS1lj0Q8ByCwWA5kgO.$SFwveSqiDbxnsHxmSDjx3O4NscLJbgsEIwA9aPiQDe1 shell: /bin/bash ssh_keys: - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO90culn3sicU2chTHn40ytcTay0nUIHap0uF/5fVM6P chris@sol' - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOQHMUKlDh2ufno5pZOhUY5xFljC1R5zQ/GjOHDkS58D root@sol' sudo_users: - chris - sysadm # --- # vars used by roles/common/tasks/users-systemfiles.yml # --- # --- # vars used by roles/common/tasks/webadmin-user.yml # --- # --- # vars used by roles/common/tasks/sudoers.yml # --- # # see: roles/common/tasks/vars # --- # vars used by roles/common/tasks/caching-nameserver.yml # --- # --- # vars used by roles/common/tasks/git.yml # --- # --- # vars used by roles/common/tasks/nfs.yml # --- nfs_server: 192.168.182.10 # Set 'fs_encrypted' to true if filesystem lives on an encrypted # partition. # # NOTE !! # Take car to increase 'fsid' in case of more than one export # nfs_exports: - src: 192.168.182.10:/data/samba/shares path: /data/samba/shares mount_opts: users,rsize=8192,wsize=8192,hard,intr export_opt: rw,root_squash,sync,subtree_check export_networks: - 192.168.182.0/24 - 10.0.192.0/24 - 10.1.192.0/24 - 192.168.63.0/24 use_fsid_option: true # --- # vars used by roles/common/tasks/samba-config-server.yml # vars used by roles/common/tasks/samba-user.yml # --- samba_server_ip: 192.168.182.10 samba_server_cidr_prefix: 24 samba_workgroup: EBS samba_netbios_name: FILE-EBS #samba_server_min_protocol: !!str NT1 samba_groups: - name: admin group_id: 1100 - name: alle group_id: 1110 - name: akten group_id: 1120 - name: archiv group_id: 1130 - name: kanzlei group_id: 1140 - name: recherche group_id: 1150 samba_user: - name: chris groups: - admin - alle - akten - archiv - kanzlei - recherche password: !vault | $ANSIBLE_VAULT;1.1;AES256 63643330373231636537366333326630333265303265653933613835656262323863363038653234 3462653135633266373439626263356636646637643035340a653466356235346663626163306363 61313164643061306433643738643563303036646334376536626531383965303036386162393832 6631333038306462610a356535633265633563633962333137326533633834636331343562633765 3631 - name: back groups: [] password: 'back2023' - name: sysadm groups: - admin - alle - akten - archiv - kanzlei - recherche password: 'IrcR3uo-QJ.5' - name: buero groups: - alle - akten - archiv - kanzlei - recherche password: 'buero-ebs/2022.%' - name: axel groups: - alle - akten - archiv - kanzlei - recherche password: 'ah-ebs.2022-!' - name: bjoern groups: - alle - akten - archiv - kanzlei - recherche password: 'be-ebs-2022/%' - name: christoph groups: - alle - akten - archiv - kanzlei - recherche password: 'ck-ebs-2022.%' - name: kristin groups: - alle - akten - archiv - kanzlei - recherche password: 'kp-ebs.2022_%' - name: maik groups: - alle - akten - archiv - kanzlei - recherche password: 'me-ebs_2022.!' base_home: /data/home # remove_samba_users: # - name: name1 # - name: name2 # remove_samba_users: [] samba_shares: - name: 4all comment: 4all auf Fileserver path: /data/samba/shares/4all group_valid_users: alle group_write_list: alle file_create_mask: !!str 660 dir_create_mask: !!str 2770 vfs_object_recycle: true recycle_path: '@Recycle.Bin' - name: Akten comment: Akten auf Fileserver path: /data/samba/shares/Akten group_valid_users: akten group_write_list: akten file_create_mask: !!str 660 dir_create_mask: !!str 2770 vfs_object_recycle: true recycle_path: '@Recycle.Bin' - name: Archiv comment: Archiv auf Fileserver path: /data/samba/shares/Archiv group_valid_users: archiv group_write_list: archiv file_create_mask: !!str 660 dir_create_mask: !!str 2770 vfs_object_recycle: true recycle_path: '@Recycle.Bin' - name: Kanzlei comment: Kanzlei auf Fileserver path: /data/samba/shares/Kanzlei group_valid_users: kanzlei group_write_list: kanzlei file_create_mask: !!str 660 dir_create_mask: !!str 2770 vfs_object_recycle: true recycle_path: '@Recycle.Bin' - name: Recherche comment: Recherche auf Fileserver path: /data/samba/shares/Recherche group_valid_users: recherche group_write_list: recherche file_create_mask: !!str 660 dir_create_mask: !!str 2770 vfs_object_recycle: true recycle_path: '@Recycle.Bin' - name: Install comment: Install auf Fileserver path: /data/samba/shares/Install group_valid_users: admin group_write_list: admin file_create_mask: !!str 660 dir_create_mask: !!str 2770 vfs_object_recycle: true recycle_path: '@Recycle.Bin' # --- # - This share will be written by windows schedulescript 'backup-advoware.bat' # --- - name: Advoware-Backup comment: Advoware-Backup (only read) on Fileserver path: /data/samba/shares/Advoware-Backup group_valid_users: back group_write_list: back file_create_mask: !!str 664 dir_create_mask: !!str 2775 guest_ok: !!str yes vfs_object_recycle: false # ============================== # --- # vars used by scripts/reset_root_passwd.yml # --- root_user: name: root password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.