515 lines
8.8 KiB
YAML
515 lines
8.8 KiB
YAML
---
|
|
|
|
# ---
|
|
# vars used by roles/ansible_dependencies
|
|
# ---
|
|
|
|
apt_ansible_dependencies:
|
|
- python
|
|
- python-apt
|
|
- python3
|
|
- python3-apt
|
|
- lsb-release
|
|
- vim
|
|
|
|
|
|
# ---
|
|
# vars used by roles/ansible_user
|
|
# ---
|
|
|
|
ansible_remote_user:
|
|
|
|
- name: chris
|
|
password: $6$bSHlaLHC$URSMVq090e/cJ1v55Jh9ws0w5WekhO7X3Y0RqryAl5R76K9khWBegC76Smjastja.xMiD57/LzUUXW7y9NvAL.
|
|
shell: /bin/bash
|
|
ssh_keys:
|
|
- 'ssh-rsa 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 chris@luna'
|
|
- 'ssh-rsa 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 root@luna'
|
|
|
|
|
|
# ---
|
|
# vars used by roles/common/tasks/basic.yml
|
|
# ---
|
|
|
|
time_zone: Europe/Berlin
|
|
|
|
locales:
|
|
- en_US.UTF-8
|
|
- de_DE.UTF-8
|
|
|
|
set_default_limit_nofile: false
|
|
|
|
|
|
# ---
|
|
# vars used by roles/common/tasks/sshd.yml
|
|
# ---
|
|
|
|
sshd_ports:
|
|
- 22
|
|
|
|
sshd_listen_address:
|
|
- '::'
|
|
- '0.0.0.0'
|
|
|
|
sshd_host_keys:
|
|
- /etc/ssh/ssh_host_rsa_key
|
|
- /etc/ssh/ssh_host_ecdsa_key
|
|
- /etc/ssh/ssh_host_ed25519_key
|
|
|
|
sshd_permit_root_login: !!str "no"
|
|
|
|
sshd_authorized_keys_file: ".ssh/authorized_keys .ssh/authorized_keys2"
|
|
|
|
sshd_pubkey_authentication: !!str "yes"
|
|
|
|
sshd_password_authentication: !!str "no"
|
|
|
|
sshd_print_motd: !!str "no"
|
|
|
|
sshd_use_dns: !!str "no"
|
|
|
|
|
|
# ---
|
|
# vars used by apt.yml
|
|
# ---
|
|
|
|
apt_manage_sources_list: true
|
|
|
|
apt_src_enable: true
|
|
apt_backports_enable: true
|
|
|
|
apt_debian_mirror: http://ftp.de.debian.org/debian/
|
|
apt_debian_contrib_nonfree_enable: true
|
|
|
|
apt_update_cache_valid_time: 3600
|
|
|
|
apt_upgrade: true
|
|
apt_update: true
|
|
|
|
apt_clean: true
|
|
apt_autoremove: true
|
|
|
|
apt_dpkg_configure: true
|
|
apt_upgrade_type: dist
|
|
apt_upgrade_dpkg_options:
|
|
- force-confdef
|
|
- force-confold
|
|
|
|
apt_initial_install_stretch:
|
|
- openssh-server
|
|
- rssh
|
|
- vim
|
|
- vim-common
|
|
- vim-doc
|
|
- mc
|
|
- screen
|
|
- tmux
|
|
- bc
|
|
- figlet
|
|
- rcconf
|
|
- sudo
|
|
- rsync
|
|
- dselect
|
|
- iputils-ping
|
|
- apt-utils
|
|
- aptitude
|
|
- apt-transport-https
|
|
- zip
|
|
- unzip
|
|
- bzip2
|
|
- arj
|
|
- locate
|
|
- curl
|
|
- gawk
|
|
- mawk
|
|
- lynx
|
|
- links
|
|
- w3m
|
|
- exuberant-ctags
|
|
- mime-support
|
|
- file
|
|
- coreutils
|
|
- moreutils
|
|
- less
|
|
- realpath
|
|
- sipcalc
|
|
- psmisc
|
|
- dnsutils
|
|
- rblcheck
|
|
- whois
|
|
- gettext
|
|
- gettext-base
|
|
- gettext-doc
|
|
- debian-keyring
|
|
- patch
|
|
- patchutils
|
|
- recode
|
|
- recode-doc
|
|
- librecode0
|
|
- librecode-dev
|
|
- sharutils
|
|
- perl
|
|
- perl-modules-5.24
|
|
- perl-doc
|
|
- libperl-dev
|
|
- libterm-readline-gnu-perl
|
|
- libterm-readline-perl-perl
|
|
- libterm-readkey-perl
|
|
- libmail-imapclient-perl
|
|
- libtime-duration-perl
|
|
- libtimedate-perl
|
|
- libwww-perl
|
|
- libpcre3
|
|
- libreadline5
|
|
- re2c
|
|
- util-linux
|
|
- parted
|
|
- lshw
|
|
- gdisk
|
|
- smartmontools
|
|
- tcpdump
|
|
- telnet
|
|
- unhide
|
|
- lsof
|
|
- hdparm
|
|
- groff
|
|
- iproute2
|
|
- bridge-utils
|
|
- vlan
|
|
- ethtool
|
|
- wipe
|
|
- iperf
|
|
- mtr
|
|
- iptraf
|
|
- wget
|
|
- logrotate
|
|
- rsyslog
|
|
- haveged
|
|
- rdate
|
|
- ntpdate
|
|
- wipe
|
|
- man-db
|
|
- groff
|
|
- iptables
|
|
- shellcheck
|
|
- ssl-cert
|
|
- ssl-cert-check
|
|
- git
|
|
- ftp
|
|
- htop
|
|
- net-tools
|
|
- lsb-release
|
|
- attr
|
|
- acl
|
|
- quota
|
|
- quotatool
|
|
- needrestart
|
|
|
|
apt_initial_install_buster:
|
|
- openssh-server
|
|
- rush
|
|
- vim
|
|
- vim-common
|
|
- vim-doc
|
|
- mc
|
|
- screen
|
|
- tmux
|
|
- bc
|
|
- figlet
|
|
- rcconf
|
|
- sudo
|
|
- rsync
|
|
- dselect
|
|
- iputils-ping
|
|
- apt-utils
|
|
- aptitude
|
|
- apt-transport-https
|
|
- zip
|
|
- unzip
|
|
- bzip2
|
|
- arj
|
|
- locate
|
|
- curl
|
|
- gawk
|
|
- mawk
|
|
- lynx
|
|
- links
|
|
- w3m
|
|
- ctags
|
|
- mime-support
|
|
- file
|
|
- coreutils
|
|
- moreutils
|
|
- less
|
|
- sipcalc
|
|
- psmisc
|
|
- dnsutils
|
|
- rblcheck
|
|
- whois
|
|
- gettext
|
|
- gettext-base
|
|
- gettext-doc
|
|
- debian-keyring
|
|
- patch
|
|
- patchutils
|
|
- recode
|
|
- recode-doc
|
|
- librecode0
|
|
- librecode-dev
|
|
- sharutils
|
|
- perl
|
|
- perl-modules-5.28
|
|
- perl-doc
|
|
- libperl-dev
|
|
- libterm-readline-gnu-perl
|
|
- libterm-readline-perl-perl
|
|
- libterm-readkey-perl
|
|
- libmail-imapclient-perl
|
|
- libtime-duration-perl
|
|
- libtimedate-perl
|
|
- libwww-perl
|
|
- libpcre3
|
|
- libio-compress-perl
|
|
- libreadline5
|
|
- re2c
|
|
- util-linux
|
|
- parted
|
|
- lshw
|
|
- gdisk
|
|
- smartmontools
|
|
- tcpdump
|
|
- telnet
|
|
- unhide
|
|
- lsof
|
|
- hdparm
|
|
- groff
|
|
- iproute2
|
|
- bridge-utils
|
|
- vlan
|
|
- ethtool
|
|
- wipe
|
|
- iperf
|
|
- mtr
|
|
- iptraf
|
|
- wget
|
|
- logrotate
|
|
- rsyslog
|
|
- haveged
|
|
- rdate
|
|
- ntpdate
|
|
- wipe
|
|
- man
|
|
- groff
|
|
- iptables
|
|
- shellcheck
|
|
- ssl-cert
|
|
- ssl-cert-check
|
|
- git
|
|
- ftp
|
|
- htop
|
|
- net-tools
|
|
- lsb-release
|
|
- attr
|
|
- acl
|
|
- quota
|
|
- quotatool
|
|
- needrestart
|
|
|
|
apt_install_compiler_pkgs: false
|
|
apt_compiler_pkgs:
|
|
- g++
|
|
- g++-multilib
|
|
- gcc
|
|
- gcc-multilib
|
|
- cpp
|
|
- make
|
|
- automake
|
|
- autoconf
|
|
- libtool
|
|
- flex
|
|
- bison
|
|
- gettext
|
|
- pkg-config
|
|
- gnu-standards
|
|
- libssl-dev
|
|
- libreadline-dev
|
|
- libncurses-dev
|
|
- libsystemd-dev
|
|
- libnss3-dev
|
|
- python-dev
|
|
|
|
apt_install_webserver_pkgs: false
|
|
apt_webserver_pkgs:
|
|
- libdb-dev
|
|
- zlib1g
|
|
- zlib1g-dev
|
|
- libssl-dev
|
|
- libneon27-dev
|
|
- libxml2
|
|
- libxml2-dev
|
|
- curl
|
|
- libcurl4-openssl-dev
|
|
- libqdbm-dev
|
|
- libgdbm-dev
|
|
- libpspell-dev
|
|
- libjpeg-dev
|
|
- libpng-dev
|
|
- libxpm-dev
|
|
- libfreetype6-dev
|
|
- libwmf-dev
|
|
- libtiff-dev
|
|
- libpaper-dev
|
|
- libmagic-dev
|
|
- libgraphics-magick-perl
|
|
- libgraphicsmagick++1-dev
|
|
- libgraphicsmagick-q16-3
|
|
- libgraphicsmagick1-dev
|
|
- libgraphviz-dev
|
|
- libcroco3-dev
|
|
- libgsf-1-dev
|
|
- libilmbase-dev
|
|
- libvpx-dev
|
|
- vpx-tools
|
|
- libgpm-dev
|
|
- libkpathsea-dev
|
|
- libopenexr-dev
|
|
- librsvg2-dev
|
|
- libdjvulibre-dev
|
|
- libatm-dev
|
|
- libexpat-dev
|
|
- imagemagick
|
|
- graphicsmagick
|
|
- exif
|
|
- libexiv2-dev
|
|
- re2c
|
|
- netpbm
|
|
- libnetpbm10-dev
|
|
- libmcrypt-dev
|
|
- mcrypt
|
|
- default-libmysqlclient-dev
|
|
- libpq-dev
|
|
- postgresql-client
|
|
- libreadline-dev
|
|
- libncurses-dev
|
|
- libdb5.3
|
|
- libdb5.3++
|
|
- libdb5.3++-dev
|
|
- libdb5.3-dev
|
|
- libxslt1-dev
|
|
- libpcre3-dev
|
|
- libc-client2007e-dev
|
|
- libc-client-dev
|
|
- libicu-dev
|
|
- libtidy-dev
|
|
- libmm-dev
|
|
- libgmp-dev
|
|
- libkrb5-dev
|
|
- libldap-dev
|
|
- libmhash-dev
|
|
- libgd-dev
|
|
- liblua5.3-dev
|
|
- libapr1-dev
|
|
- libaprutil1-dev
|
|
- libsctp-dev
|
|
- libcrypto++-dev
|
|
- ffmpeg
|
|
- libmagickwand-dev
|
|
- libgeoip-dev
|
|
- tk-dev
|
|
- tcl-dev
|
|
- tclreadline
|
|
- expect
|
|
- expect-dev
|
|
- libexpect-perl
|
|
|
|
apt_install_postgresql_pkgs: false
|
|
apt_postgresql_pkgs:
|
|
- postgresql
|
|
|
|
apt_install_bind9_packages: false
|
|
apt_bind9_pkgs:
|
|
- bind9
|
|
|
|
apt_install_lxc_host_pkgs: false
|
|
apt_lxc_host_pkgs:
|
|
- bridge-utils
|
|
- lxc
|
|
- btrfs-tools
|
|
- lua5.3
|
|
|
|
apt_install: {}
|
|
apt_install_state: latest
|
|
|
|
apt_remove:
|
|
- rpcbind
|
|
|
|
apt_remove_purge: false
|
|
|
|
microcode_package: intel-microcode
|
|
|
|
|
|
# ---
|
|
# vars used by roles/common/tasks/users.yml
|
|
# ---
|
|
|
|
insert_ssh_keypair_backup_server: false
|
|
|
|
ssh_keypair_backup_server: {}
|
|
|
|
insert_root_ssh_keypair: false
|
|
|
|
root_ssh_keypair: {}
|
|
|
|
default_user: {}
|
|
|
|
extra_user: {}
|
|
|
|
sudo_users: {}
|
|
|
|
|
|
# ---
|
|
# vars used by roles/common/tasks/users-systemfiles.yml
|
|
# ---
|
|
|
|
|
|
# ---
|
|
# vars used by roles/common/tasks/webadmin-user.yml
|
|
# ---
|
|
|
|
insert_webadmin_ssh_keypair: false
|
|
|
|
webadmin_ssh_keypair: {}
|
|
|
|
webadmin_user: {}
|
|
|
|
|
|
# ---
|
|
# vars used by roles/common/tasks/sudoers.yml
|
|
# ---
|
|
#
|
|
# see: roles/common/tasks/vars
|
|
|
|
|
|
# ---
|
|
# vars used by roles/common/tasks/caching-nameserver.yml
|
|
# ---
|
|
|
|
acl_caching_nameserver: {}
|
|
|
|
|
|
# ---
|
|
# vars used by roles/common/tasks/git.yml
|
|
# ---
|
|
#
|
|
# see: roles/common/tasks/vars
|
|
|
|
|
|
# ==============================
|
|
|
|
|
|
# ---
|
|
# vars used by scripts/reset_root_passwd.yml
|
|
# ---
|
|
|
|
root_user: {}
|