400 lines
18 KiB
YAML
400 lines
18 KiB
YAML
---
|
|
|
|
# ---
|
|
# vars used by roles/ansible_dependencies
|
|
# ---
|
|
|
|
|
|
# ---
|
|
# vars used by roles/ansible_user
|
|
# ---
|
|
|
|
insert_root_ssh_keypair: true
|
|
|
|
root_ssh_keypair:
|
|
- name: borg-client_key
|
|
priv_key_src: backup.oopen.de/root/.ssh/borg-client_key
|
|
priv_key_dest: /root/.ssh/borg-client_key
|
|
pub_key_src: backup.oopen.de/root/.ssh/borg-client_key.pub
|
|
pub_key_dest: /root/.ssh/borg-client_key.pub
|
|
- name: id_ed25519-borg-backup
|
|
priv_key_src: backup.oopen.de/root/.ssh/id_ed25519-borg-backup
|
|
priv_key_dest: /root/.ssh/id_ed25519-borg-backup
|
|
pub_key_src: backup.oopen.de/root/.ssh/id_ed25519-borg-backup.pub
|
|
pub_key_dest: /root/.ssh/id_ed25519-borg-backup.pub
|
|
- name: id_ed25519-backup
|
|
priv_key_src: backup.oopen.de/root/.ssh/id_ed25519-backup
|
|
priv_key_dest: /root/.ssh/id_ed25519-backup
|
|
pub_key_src: backup.oopen.de/root/.ssh/id_ed25519-backup.pub
|
|
pub_key_dest: /root/.ssh/id_ed25519-backup.pub
|
|
- name: id_ed25519-gitea
|
|
priv_key_src: backup.oopen.de/root/.ssh/id_ed25519-gitea
|
|
priv_key_dest: /root/.ssh/id_ed25519-gitea
|
|
pub_key_src: backup.oopen.de/root/.ssh/id_ed25519-gitea.pub
|
|
pub_key_dest: /root/.ssh/id_ed25519-gitea.pub
|
|
# - name: id_rsa
|
|
# priv_key_src: backup.oopen.de/root/.ssh/id_rsa
|
|
# priv_key_dest: /root/.ssh/id_rsa
|
|
# pub_key_src: backup.oopen.de/root/.ssh/id_rsa.pub
|
|
# pub_key_dest: /root/.ssh/id_rsa.pub
|
|
|
|
|
|
# ---
|
|
# vars used by roles/common/tasks/basic.yml
|
|
# ---
|
|
|
|
|
|
# ---
|
|
# vars used by roles/common/tasks/sshd.yml
|
|
# ---
|
|
|
|
|
|
# ---
|
|
# vars used by roles/common/tasks/apt.yml
|
|
# ---
|
|
|
|
|
|
# ---
|
|
# vars used by roles/common/tasks/systemd-resolved.yml
|
|
# ---
|
|
|
|
systemd_resolved: true
|
|
|
|
# CyberGhost - Schnelle Verbindung mit Keine-Logs-Datenschutzrichtlinie
|
|
# Primäre DNS-Adresse: 38.132.106.139
|
|
# Sekundäre DNS-Adresse: 194.187.251.67
|
|
#
|
|
# Cloudflare (USA) Bester kostenloser DNS-Server für Gaming mit zuverlässigen Verbindungen
|
|
# primäre DNS-Adresse
|
|
# IPv4: 1.1.1.1
|
|
# IPv6: 2606:4700:4700::1111
|
|
# sekundäre DNS-Adresse
|
|
# IPv4: 1.0.0.1
|
|
# IPv6: 2606:4700:4700::1001
|
|
#
|
|
# Google (USA) Public DNS - Großartige Kombination aus Geschwindigkeit und Sicherheit
|
|
# primäre DNS-Adresse
|
|
# IPv4: 8.8.8.8
|
|
# IPv6: 2001:4860:4860::8888
|
|
# sekundäre DNS-Adresse
|
|
# IPv4: 8.8.4.4
|
|
# IPv6: 2001:4860:4860::8844
|
|
#
|
|
# Quad9 (CH) - Blockiert mühelos schädliche Seiten und verhindert Phishing-Betrug
|
|
# primäre DNS-Adresse
|
|
# IPv4: 9.9.9.9
|
|
# IPv6: 2620:fe::fe
|
|
# sekundäre DNS-Adresse
|
|
# IPv4: 149.112.112.112
|
|
# IPv6: 2620:fe::9
|
|
#
|
|
# OpenNIC - https://www.opennic.org/
|
|
# IPv4: 195.10.195.195 - ns31.de
|
|
# IPv4: 94.16.114.254 - ns28.de
|
|
# IPv4: 51.254.162.59 - ns9.de
|
|
# IPv4: 194.36.144.87 - ns29.de
|
|
# IPv6: 2a00:f826:8:2::195 - ns31.de
|
|
#
|
|
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
|
|
# IPv4: 5.1.66.255
|
|
# IPv6: 2001:678:e68:f000::
|
|
# Servername für DNS-over-TLS: dot.ffmuc.net
|
|
# IPv4: 185.150.99.255
|
|
# IPv6: 2001:678:ed0:f000::
|
|
# Servername für DNS-over-TLS: dot.ffmuc.net
|
|
# für iOS 14+: DoT-Server-Konfiguration (unsigniert, vom PrHdb)
|
|
resolved_nameserver:
|
|
- 185.12.64.2
|
|
- 2a01:4ff:ff00::add:1
|
|
|
|
# search domains
|
|
#
|
|
# If there are more than one search domains, then specify them here in the order in which
|
|
# the resolver should also search them
|
|
#
|
|
#resolved_domains: []
|
|
resolved_domains:
|
|
- ~.
|
|
- oopen.de
|
|
|
|
resolved_dnssec: false
|
|
|
|
# dns.as250.net: 194.150.168.168
|
|
#
|
|
resolved_fallback_nameserver:
|
|
- 194.150.168.168
|
|
|
|
|
|
# ---
|
|
# vars used by roles/common/tasks/cron.yml
|
|
# ---
|
|
|
|
cron_env_entries:
|
|
- name: PATH
|
|
job: /root/bin/admin-stuff:/root/bin:/usr/local/apache2/bin:/usr/local/php/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
|
|
|
|
- name: SHELL
|
|
job: /bin/bash
|
|
insertafter: PATH
|
|
|
|
|
|
cron_user_special_time_entries:
|
|
|
|
- name: "Restart DNS Cache service 'systemd-resolved'"
|
|
special_time: reboot
|
|
job: "sleep 5 ; /bin/systemctl restart systemd-resolved"
|
|
insertafter: PATH
|
|
|
|
- name: "Check if postfix mailservice is running. Restart service if needed."
|
|
special_time: reboot
|
|
job: "sleep 10 ; /root/bin/monitoring/check_postfix.sh > /dev/null 2>&1"
|
|
insertafter: PATH
|
|
|
|
|
|
cron_user_entries:
|
|
|
|
- name: "Check if SSH service is running. Restart service if needed."
|
|
minute: '*/5'
|
|
hour: '*'
|
|
job: /root/bin/monitoring/check_ssh.sh
|
|
|
|
- name: "Check if Postfix Mailservice is up and running?"
|
|
minute: '*/15'
|
|
hour: '*'
|
|
job: /root/bin/monitoring/check_postfix.sh
|
|
|
|
- name: "/root/bin/postfix/check-postfix-fatal-errors.sh"
|
|
minute: '*/17'
|
|
hour: '*'
|
|
job: /root/bin/postfix/check-postfix-fatal-errors.sh
|
|
|
|
- name: "Generate/Renew Let's Encrypt Certificates if needed (using dehydrated script)"
|
|
minute: '23'
|
|
hour: '05'
|
|
job: /var/lib/dehydrated/cron/dehydrated_cron.sh
|
|
|
|
- name: "Check whether all certificates are included in the VHOST configurations"
|
|
minute: '33'
|
|
hour: '05'
|
|
job: /var/lib/dehydrated/tools/update_ssl_directives.sh
|
|
|
|
- name: "Check if remote website is online"
|
|
minute: '*/15'
|
|
hour: '7-23'
|
|
job: /root/bin/monitoring/check_remote_websites.sh
|
|
|
|
- name: "Remote Borg2 Backup"
|
|
minute: '04'
|
|
hour: '00'
|
|
job: /root/crontab/backup-rborg2/rborg2.sh
|
|
|
|
- name: "Remote Borg Backup"
|
|
minute: '34'
|
|
hour: '01'
|
|
job: /root/crontab/backup-rborg/rborg.sh
|
|
|
|
- name: "Check hard disc usage."
|
|
minute: '43'
|
|
hour: '6'
|
|
job: /root/bin/admin-stuff/check-disc-usage.sh -c 85
|
|
|
|
|
|
# ---
|
|
# vars used by roles/common/tasks/users.yml
|
|
# ---
|
|
|
|
|
|
default_user:
|
|
|
|
- name: chris
|
|
password: $y$j9T$t0OK33lTuB/3TME5h/GHn.$4EjhvjhelkpUB2vqWPBdDCV3xCwBcJHpDobTkkuHxy.
|
|
shell: /bin/bash
|
|
ssh_keys:
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO90culn3sicU2chTHn40ytcTay0nUIHap0uF/5fVM6P chris@sol'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOQHMUKlDh2ufno5pZOhUY5xFljC1R5zQ/GjOHDkS58D root@sol'
|
|
|
|
- name: sysadm
|
|
|
|
user_id: 1050
|
|
group_id: 1050
|
|
group: sysadm
|
|
password: $y$j9T$LIF1RrShGDGdCXkUubRPR/$N8M5c/dhBdJkJrLP3/Lchyosjg0FxaQ2M4epvuzTI78
|
|
shell: /bin/bash
|
|
ssh_keys:
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO90culn3sicU2chTHn40ytcTay0nUIHap0uF/5fVM6P chris@sol'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOQHMUKlDh2ufno5pZOhUY5xFljC1R5zQ/GjOHDkS58D root@sol'
|
|
|
|
- name: localadmin
|
|
user_id: 1051
|
|
group_id: 1051
|
|
password: $y$j9T$bqr.c39mSZOjjhVo/qmM2.$riPJ81SHLqfJMQ6/ZdeWNP7ma8R5nehI9mo5K8oUkw1
|
|
shell: /bin/bash
|
|
ssh_keys:
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO90culn3sicU2chTHn40ytcTay0nUIHap0uF/5fVM6P chris@sol'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOQHMUKlDh2ufno5pZOhUY5xFljC1R5zQ/GjOHDkS58D root@sol'
|
|
|
|
- name: back
|
|
user_id: 1060
|
|
group_id: 1060
|
|
group: back
|
|
password: $y$j9T$uYqbl2A6vQ6WsLinzhUfG0$/w02iPud/LURbhY19DGtKWgKNFTpNEP7J.jOu5CZPh.
|
|
shell: /bin/bash
|
|
ssh_keys:
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO90culn3sicU2chTHn40ytcTay0nUIHap0uF/5fVM6P chris@sol'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKd0AwTHbDBK4Dgs+IZWmtnDBjoVIogOUvkLIYvsff1y root@backup.open.de'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINj0nCdFOZm51AVCfPbZ22QROIEiboXZ7RamHvM2E9IM root@backup.warenform.de'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBZQMCGCyIvs5hoNDoTIkKvKmEbxLf+uCYI1vx//ZQYY root@o26-backup'
|
|
|
|
- name: borg
|
|
user_id: 1065
|
|
group_id: 1065
|
|
group: borg
|
|
password: $y$j9T$JPKlR6kIk7GJStSdmAQWq/$e1vJER6KL/dk1diFNtC.COw9lu2uT6ZdrUgGcNVb912
|
|
shell: /bin/bash
|
|
ssh_keys:
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO90culn3sicU2chTHn40ytcTay0nUIHap0uF/5fVM6P chris@sol'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOQHMUKlDh2ufno5pZOhUY5xFljC1R5zQ/GjOHDkS58D root@sol'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINmfp+4waTzHxdT5TaxAMsIPDDwNe8Dwuif1jL+9v9GP root@a.mx'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFBIyXel+KOTLB6VB2xJwyWaZc0KuCJzocwlziFdovCl root@a.ns'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGi22vcCilahX9KwbqcF8/D0RnzQXvgzTUFTmRHNJsBZ root@anabaena'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINU1InXFKZX9emaT5QsY4Nr0tr8CzbyV8Js8RzZC9vGk root@b.mx'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPo7hI8oIS+/xufCUNTTgNoz592udJaU+79L0uADzKJY root@b.ns'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMtIXFS9OrKBvBl+fKtYN/lOOKpPuuc02H8HV+++LeBU root@backup'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMZkez42c+5KVt/ZOhwslO321ibzV02oMImImRGNBIRD root@backup.warenform.de'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKT+QOy+R6O4ojAeB7y/CRMmfbB19rFstvEW7saHpHMX root@c.mx'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDXaxrm1MdUsiGviWJX/LaaaTaHga7+GKXYZPjUr5aBV root@chamaesiphon'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICPrJu40Up1x9VCTTac6+ANjJ2NFXfDb5v3dP4pVgm+c root@cl-01'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK7JBJ0qQJsTlADj/zMoxGlzPCGlnh0ngDS5+tkyVqgf root@cl-02'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIORi7e7u0KhCkCB8iCmPud0hzCwnJVhxpPmy8vFFkFgY root@cl-dissens'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN3VloFw13vVt8UAV5h0860Wq/vFJEm5EazOqM+cVe17 root@cl-flr'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGRaUsGqBvZBDzyh1kuldC/jdbtuoXFgBZ7PbgSqytSn root@cl-fm'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEvmOpsiL+eiJ3qZVDJiUCFVZge0OQJ1hpZgw7pJ8sq5 root@cl-irights'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL7h6rR+q5bRh/qgzA7ZyiZcRr9vMbo7cxhQsoukWmUn root@cl-vbrg'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIcHQfSVG8DM1qHp2ce73ZBWXknZGZFur5s27V58T7ON root@cl-opp'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIClnyNS5RQsbXmgOX7NU7i154DElOlha3y0ybF6FwScT root@cl-test'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN9juGhHhby43voUlTszqmhteuRl4pEWBGjypB1mmDfq root@cloud.akweb.de'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAjhcoyYp05x8cp0WxOqSMQmWP8Kk/JGqCYdjcym0oFY root@cp-01'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMTgn7Wu9MC0ZlyYfZ4RtTImJu2BBAtsZ7DSt9cO/N2y root@cp-flr'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAguHJx7QJyFEb26ffG84oZ09rcvrWPoLZMIaAeZttHq root@d.mx'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDNzUe1NSR+r3RTQ11QMUudiyrAWVwWzsgAlxvxx43wN root@dc-opp'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICMHxvK5kzKgypVi8ZvshveSpyo0eSXiBCnAC5Pcjdgv root@discourse'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDy5WM1qsLE2SRwWG1Y38WJcMYUpL8MuQiraqiXfHzaH root@e.mx'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOvOkCWNKUJ5o9e+0NhY4IFZv8LA7tkkkEFjr8nqFKhe root@formbricks-nd'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJPbony+4g4iFS32Cv/Bkmet4FsCAsrGTffwWm2eM16x root@git.warenform'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDqqmBWh3qmnx41NiLCn1LhVG0mn4++IUvRNC0OMh6h6 root@gitoea'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFEm1P7Pg3Tlm02bxkropKf3CcyTCAB3YCMxPSjai2lc root@gw-dissens'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBYFe6i0UdPRyENvfaJSJVCHtmnlJmhbqGEsdIlTapsj root@initiativenserver'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJ54/I+TdZUA+Xc6bixSa3f0hN5y4kWW+xl9kqSZPBYS root@keycloak-nd'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO886BNZ/o9aBwkKqHku+MjS5/GEVRBbXXSF76ry7oZR root@mail-cadus'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKsPJQGHl1GVZ3yPl3Oi3xlH+EUsN1/EWDY2XAohag/P root@mail-fm'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICM4+Zvs5SY3E2cAMdnta1BujzudGg/97nz+nE5sipVD root@matomo-01'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDNIGI5HpfYnZCvDM3bf3UQti8SRhgL7wLu8LfxZLqwB root@meet.akweb.de'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINoLG5tE0tHh+iFRzellU80eJTxZfqDB3e6Dg4XRKBrA root@meet.oopen.de'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF2bxZZNXrlsvERYo0VyXzdW1AZuGmsTNjgF4oQJNfnn root@mm-irights'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILpKuS8DFuHHvfQZCHOGiurOvzlFkx1unnMfZWEM3wUY root@mm-rav'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMnwSzzSrAQJN3I0Y3xRU0rjlrO2KlHD3tFMgCqEyk0i root@mm'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMBTRzuXg2lzAERsNWpQYHEI1T6dP7VJehBPKF2pAsH4 root@o12'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFAyyyFaDWqjQjDFgOSW6cs71yxw7DRNFQapWMZXds03 root@o13'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJN6Z+3zYorB3NKO3TObynG8vn9xi1H8IBmadIOQBPE+ root@o13-cryptpad'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINgejUarJhSeXVswvyycIC62BIdGZWevz+Lr1spEJClR root@o13-git'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHIzL5IM0ljUs0b8lRv20qoZzPZRXVA5CKzGql42zPer root@o13-mail'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBIQfWW6et5x2DU7jG9iR+T6kbAipVxyjKuRksTtcvtb root@o13-mumble'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMTxl1BwIslVhsiFCZeRlgwoSO2ahaHWwMeiKAIRFJm6 root@o13-pad'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBHl2xONyeBX/gnJ4iVeSVoxu/W6ku2VorA5gxAbp95q root@o13-staging-board'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBaXEVvhblxX045H2/B/6RJmoW77WOKJM5FQfvMUPCIs root@o13-web'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAp24VDXOsa0MuzGFaFa3CPDUsnA/ASojHAiN344m+dP root@o14'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICcQ9MFqTMOmjnec4ftUJAYiAe8p7pp7a5EBSIM0A5ji root@o17'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFstQOOM/U18SV27+XTtBhso+vICK5L4aOGC83QnvS8+ root@o19'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC85aj16Ow1ZPutkp5TmZdxjMsECkhnO64ktc3OYZJHc root@o25-board'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICurG4lWMuEercht716M3x2KgsUYKIwku4VdF52sBu41 root@o21-oolm-db'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC4zWDGHh75cKB0AZKIbiWHosK4Xvk6vS2r/aChs8u42 root@o22'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGcgS05xGLPuECQ7E5zjzfSDxdFBO1mAjkSV2bktxld+ root@o23'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEM1SI7Lwk0G8UycysL7ZPdXm1DRGgPnr01B0ewRGEKi root@o24'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAJKfPInE9VjXVe+6DQ+4/H1nQJwXljYEK6gwfmTDgGy root@o26'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIES9ftVcNMv6pW2HDM12fIbOOEvq1fcd74kbO4LHfhGH root@o28'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDtACieGFf34NDepB9GqJjVqji6bf6xrO1LevXgm3aN+ root@o29'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIE70FVVu2bsdH2qJITFVSDEPraiI4uSCuzEkYlbl6pRW root@o30'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF0+aRoMxzmiQCAIMajNhbTZEumtZ9yCG2Nb4ucqK8lo root@o31'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOJvhepf3kho9zJz1QO52aLbr4/Rim/FLdENg1GNKCPx root@o32'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICMuN9gOcpjKIh468XkKJDkLqfHr3dAClpJQEHKgv16y root@o33'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOa43l92OhS5mCArXvIL1Ub3Oj6wu1esooaqoTNwWt7O root@o35'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKBSDsGwvvuxMbBsD8CIazWVZYDxZsrUP7SWvxtlJOA2 root@o36'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKzgTXbAtndo6ZhbBTiveznUoyRGbmNr2TTDvUTB4ikF root@o38'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEaU4dQebr9Zu9UUX9W9KIHBvlyKzIWPqY3Ta+wq5N6d root@o39'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAwKlqSxMkU699gyHGrJwltGK81agT4hwlg38rnviN8X root@o40'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB4J/cF/pB9cWyWEKmyTkVEDocPHH3ZMNHdoiqcOmsfp root@o41'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDW54VI+M5SjV6dQLew/IA31RI1GOneIqg5dI1/VZQgJ root@o42'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII2b60T/OXKCoze083GsHXuMFtm8Zo3WnCFb9Q9ofGie root@o43'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMUnxlKIffm8a5BmoQE40h8ut0R6eCxcm+Iewv3evmE9 root@oolm-shop'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF4ylglAkPst7G6kES2lE96ECp0AGXGjzCVkZSqGVru6 root@oolm-shop-dev'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIUZ0WNd3rTqHH1tiXAELwssGw6xUP1ROdhgxKbMinYY root@oolm-web'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID82UUUkYKYFbJdmTcMYu+vl3M0FVQznXFbngqPoumP+ root@prometheus-nd'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJU5HzfGYZwWeaoAGGFF7/3VQP19ce6Rgn5wcOR98Q3o root@server26'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBRfCFz6mPdn3TKVCgffHQAKt3LN/0srS/gBsMoOyZpi root@shop-agr'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHbeMf/CvAYIU/4UW8Ql59FgPo/3vcZ3vI3QzK2kOadE root@srv-cityslang'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINiVJ2QVuGz0bLlrJVa3CJ+DtwOv0pt6M53ipkGbW1JQ root@stolpersteine'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDVZ38bJGxecaM5cNj8U+3t1h7+qEEMyjNZ8hzwf2LIT root@test.mariadb'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGD79xl6N7GJVXKLdKTmuOp4LFuGLWjintKn1/jRSijN root@web-01'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBUaZJexZs5IgoaHtXe9BmP7F1lo1CoXPuY+u3Sy1KZg root@web.cadus.org'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBWTNSuBRncq7cK7JRvXDFZtY9SX4V27HrdJLI4MafHw root@web-02'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOfm+DaBXSQEqhBSCrLqtG4pykjqqvJFSONauO5Y4/nQ root@web-03'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIOzSjKX9dVlCN9GLvG3gtD201O+WlC8TgdtB+USk3bY root@web-04'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJplxgMsGCaiLf2KtHYW1Xp1U7D7geQn3fHci0GWZGi9 root@web-05'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPAUmUR9jN7rZcFGlBoURwhFJbEK7wtZOKsQiwJgYkBv root@web-06'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPzt5Gfw+BbB53qSXdzhLtzbCcp9vZSOtO0DB6PBKNwh root@web-07'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID2ByQIUPa7F+AmU1swI3goQoS1dzlxVq3uMdVLkmqcn root@web-08'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBhsrYnt08oQ3bt/dU/uw9lpYhsUK7e+2GXZJO9aqufK root@web-09'
|
|
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAHeAPDssTd+j9fOUt+fPtmt7s2ukFKTzig788I5tldH root@web-nd'
|
|
|
|
sudo_users:
|
|
- chris
|
|
- sysadm
|
|
- localadmin
|
|
|
|
|
|
# ---
|
|
# vars used by roles/common/tasks/users-systemfiles.yml
|
|
# ---
|
|
|
|
|
|
# ---
|
|
# vars used by roles/common/tasks/webadmin-user.yml
|
|
# ---
|
|
|
|
|
|
# ---
|
|
# vars used by roles/common/tasks/sudoers.yml
|
|
# ---
|
|
#
|
|
# see: roles/common/tasks/vars
|
|
|
|
sudoers_file_user_back_svn_privileges:
|
|
- 'ALL=(root) NOPASSWD: /usr/bin/svnadmin'
|
|
|
|
|
|
# ---
|
|
# vars used by roles/common/tasks/caching-nameserver.yml
|
|
# ---
|
|
|
|
|
|
# ---
|
|
# vars used by roles/common/tasks/git.yml
|
|
# ---
|
|
|
|
git_firewall_repository:
|
|
name: ipt-server
|
|
repo: https://git.oopen.de/firewall/ipt-server
|
|
dest: /usr/local/src/ipt-server
|
|
|
|
# ==============================
|
|
|
|
|
|
# ---
|
|
# vars used by scripts/reset_root_passwd.yml
|
|
# ---
|
|
|
|
root_user:
|
|
name: root
|
|
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
|
|
|