redisign ..

2021-06-02 23:43:02 +02:00
parent ec20eeb8aa
commit 9a6acd6230
79 changed files with 24372 additions and 234 deletions
--- a/group_vars/all/main.yml
+++ b/group_vars/all/main.yml
--- a/group_vars/all/main.yml.BAK.2021-06-01
+++ b/group_vars/all/main.yml.BAK.2021-06-01
@@ -0,0 +1,467 @@
+---
+
+# ---
+# NFS
+# ---
+
+nfs_server: 192.168.92.10
+
+# Set 'fs_encrypted' to true if filesystem lives on an encrypted
+# partition.
+#
+nfs_exports:
+   - src: 192.168.92.10:/data/home
+     path: /data/home
+     mount_opts: users,rsize=8192,wsize=8192,hard,intr
+     export_opt: rw,root_squash,sync,subtree_check
+     export_networks:
+       - 192.168.92.0/24
+       - 10.0.92.0/24
+       - 10.1.92.0/24
+       - 192.168.63.0/24
+     fs_encrypted: false
+
+# ---
+# Samba / NIS
+# ---
+
+samba_server: file-spr.sprachenatelier.netz
+
+samba_shares:
+  - name: Transfer
+    user:
+      - alina
+      - anahit
+      - andrea
+      - bueropraktikum
+      - chema
+      - chris
+      - eva
+      - hannah
+      - isadora
+      - katrine
+      - konstantin
+      - kristin
+      - lara
+      - linda
+      - margit
+      - marei
+      - mariam
+      - matija
+      - musa
+      - praktikant1
+      - praktikant2
+      - praktikant3
+      - praktikant4
+      - praktikant5
+      - praktikant6
+      - saravic
+      - sysadm
+      - tali
+      - thea
+      - virginia
+  - name: Verwaltung
+    user:
+      - alina
+      - anahit
+      - andrea
+      - bueropraktikum
+      - chema
+      - chris
+      - eva
+      - hannah
+      - isadora
+      - katrine
+      - konstantin
+      - kristin
+      - lara
+      - linda
+      - margit
+      - marei
+      - mariam
+      - matija
+      - musa
+      - saravic
+      - sysadm
+      - tali
+      - thea
+      - virginia
+  - name: Multimedia
+    user:
+      - chris
+      - margit
+      - musa
+
+nis_domain: sprachenatelier.netz
+#nis_domain: local.netz
+
+nis_server_address: 192.168.92.10
+#nis_server_address: 192.168.63.20
+
+nis_server_name: file-spr.sprachenatelier.netz
+#nis_server_name: luna.local.netz
+
+nis_common_packages:
+  - nis
+  - nscd
+
+nis_deleted_user:
+   - name: test-user
+   - name: gast
+   - name: s7
+
+
+nis_base_home: /data/home
+
+nis_groups:
+  - name: intern
+    group_id: 1100
+  - name: buero
+    group_id: 1110
+  - name: no-backup
+    group_id: 1120
+
+nis_user:
+  - name: chris
+    groups:
+      - intern
+      - buero
+      - no-backup
+    is_samba_user: true
+    password: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          38643435653764393333613564393733666139656264343833333632373938323230393036303234
+          3633303562636465643930643961663165646237386664370a386362346162313037353163383365
+          61343263386239316164613935633062343165363863376462653165306464633136313839343962
+          3865353333373661390a643564386432643532396632323664383330646430613033643130626430
+          6139
+
+  - name: alina
+    groups:
+      - intern
+      - buero
+    is_samba_user: true
+    password: '140686'
+
+  - name: anahit
+    groups:
+      - intern
+      - buero
+    is_samba_user: true
+    password: '150290'
+
+  - name: andrea
+    groups:
+      - intern
+      - buero
+      - lpadmin
+    is_samba_user: true
+    password: 'kurse2010'
+
+  - name: bueropraktikum
+    groups:
+      - intern
+      - buero
+    is_samba_user: true
+    password: 's2016bp'
+
+  - name: chema
+    groups:
+      - intern
+      - buero
+    is_samba_user: true
+    password: 'spa2014'
+
+  - name: elke
+    groups:
+      - intern
+      - buero
+    is_samba_user: true
+    password: 'luis11'
+
+  - name: eva
+    groups:
+      - intern
+      - buero
+    is_samba_user: true
+    password: '250791'
+
+  - name: hannah
+    groups:
+      - intern
+      - buero
+    is_samba_user: true
+    password: '28031973'
+
+  - name: isadora
+    groups:
+      - intern
+      - buero
+    is_samba_user: true
+    password: '270988'
+
+  - name: katrine
+    groups:
+      - intern
+      - buero
+    is_samba_user: true
+    password: '200290'
+
+  - name: konstantin
+    groups:
+      - intern
+      - buero
+    is_samba_user: true
+    password: '100978'
+
+  - name: kristin
+    groups:
+      - intern
+      - buero
+    is_samba_user: true
+    password: '49371'
+
+  - name: lara
+    groups:
+      - intern
+      - buero
+      - lpadmin
+    is_samba_user: true
+    password: 'sommer13'
+
+  - name: linda
+    groups:
+      - intern
+      - buero
+    is_samba_user: true
+    password: '050381'
+
+  - name: margit
+    groups:
+      - intern
+      - buero
+      - no-backup
+      - lpadmin
+    is_samba_user: true
+    password: 'beelen10'
+
+  - name: marei
+    groups:
+      - intern
+      - buero
+    is_samba_user: true
+    password: '220792'
+
+  - name: mariam
+    groups:
+      - intern
+      - buero
+    is_samba_user: true
+    password: '240991'
+
+  - name: matija
+    groups:
+      - intern
+      - buero
+    is_samba_user: true
+    password: '010985'
+
+  - name: musa
+    groups:
+      - intern
+      - buero
+      - no-backup
+      - lpadmin
+    is_samba_user: true
+    password: 'bermu18'
+
+  - name: praktikant1
+    groups:
+      - buero
+    is_samba_user: true
+    password: 'praktikant1'
+
+  - name: praktikant2
+    groups:
+      - buero
+    is_samba_user: true
+    password: 'praktikant2'
+
+  - name: praktikant3
+    groups:
+      - buero
+    is_samba_user: true
+    password: 'praktikant3'
+
+  - name: praktikant4
+    groups:
+      - buero
+    is_samba_user: true
+    password: 'praktikant4'
+
+  - name: praktikant5
+    groups:
+      - buero
+    is_samba_user: true
+    password: 'praktikant5'
+
+  - name: praktikant6
+    groups:
+      - buero
+    is_samba_user: true
+    password: 'praktikant6'
+
+  - name: s1
+    groups: []
+    is_samba_user: false
+    password: 's1'
+
+  - name: s2
+    groups: []
+    is_samba_user: false
+    password: 's2'
+
+  - name: s3
+    groups: []
+    is_samba_user: false
+    password: 's3'
+
+  - name: s4
+    groups: []
+    is_samba_user: false
+    password: 's4'
+
+  - name: s5
+    groups: []
+    is_samba_user: false
+    password: 's5'
+
+  - name: s6
+    groups: []
+    is_samba_user: false
+    password: 's6'
+
+  - name: saravic
+    groups:
+      - intern
+      - buero
+    is_samba_user: true
+    password: '2408'
+
+  - name: tali
+    groups:
+      - intern
+      - buero
+    is_samba_user: true
+    password: '220686'
+
+  - name: thea
+    groups:
+      - intern
+      - buero
+    is_samba_user: true
+    password: '060995'
+
+  - name: virginia
+    groups:
+      - intern
+      - buero
+    is_samba_user: true
+    password: '160292'
+
+
+
+# ---
+# vars used by roles/ansible_dependencies
+# ---
+
+apt_ansible_dependencies:
+  - python
+  - python-apt
+  - python3
+  - python3-apt
+  - lsb-release
+  - apt-transport-https
+  - dbus
+  - sudo
+  - vim
+  - net-tools
+  - vlan
+
+
+# ---
+# vars used by roles/ansible_user
+# ---
+
+ssh_keys_admin:
+  - 'ssh-rsa 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 chris@luna'
+  - 'ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCyWbdnjnN/xfy1F6kPbsRXp8zvJEh8uHfTZuZKyaRV/iRuhsvqRiDB+AhUAlIaPwgQ8itaI6t5hijD+sZf+2oXXbNy3hkOHTrCDKCoVAWfMRKPuA1m8RqS4ZXXgayaeCzVnPEq6UrC5z0wO/XBwAktT37RRSQ/Hq2zCHy36NQEQYrhF3+ytX7ayb10pJAMVGRctYmr5YnLEVMSIREbPxZTNc80H1zqNPVJwYZhl8Ox61U4MoNhJmJwbKWPRPZsJpbTh9W2EU37tdwRBVQP6yxhua3TR6C7JnNPVY0IK23BYlNtQEDY4PHcIuewkamEWpP0+jhEjtwy1TqjRPdU/y+2uQjC6FSOVMsSPxgd8mw4cSsfp+Ard7P+YOevUXD81+jFZ3Wz0PRXbWMWAm2OCe7n8jVvkXMz+KxSYtrsvKNw1WugJq1z//bJNMTK6ISWpqaXDevGYQRJJ8dPbMmbey40WpS5CA/l29P7fj/cOl59w3LZGshrMOm7lVz9qysVV0ylfE3OpfKCGitkpY0Asw4lSkuLHoNZnDo6I5/ulRuKi6gsLk27LO5LYS8Zm1VOis/qHk1Gg1+QY47C4RzdTUxlU1CGesPIiQ1uUX2Z4bD7ebTrrOuEFcmNs3Wu5nif21Qq0ELEWhWby6ChFrbFHPn+hWlDwNM0Nr11ftwg0+sqVw== root@luna'
+
+ansible_remote_user:
+  - name: local
+    password: $6$hJSDt2xM$mWlfc6Ve11Y7F9J3KRapYGpN7KCD1IlbelYq/jd/xuG.UfK04nl2VOHJXVPYqC3H6q3VToAyD3yPqEcwT.KPA0
+    shell: /bin/bash
+
+
+
+# ---
+# vars used by roles/common/tasks/basic.yml
+# ---
+
+time_zone: Europe/Berlin
+
+locales:
+  - en_US.UTF-8
+  - de_DE.UTF-8
+
+set_default_limit_nofile: false
+
+
+# ---
+# vars used by roles/common/tasks/sudoers.yml
+# ---
+
+sudo_users:
+  - local
+  - chris
+  - sysadm
+  - localadmin
+
+
+# /etc/sudoers
+#
+sudoers_defaults:
+  - env_reset
+  - mail_badpass
+  - 'secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"'
+
+sudoers_host_aliases: []
+
+sudoers_user_aliases: []
+
+sudoers_cmnd_aliases: []
+
+sudoers_runas_aliases: []
+
+sudoers_user_privileges:
+  - name: root
+    entry: 'ALL=(ALL:ALL) ALL'
+
+sudoers_group_privileges: []
+
+
+
+# /etc/sudoers.d/50-user
+#
+sudoers_file_defaults: []
+
+sudoers_file_host_aliases: []
+
+sudoers_file_user_aliases: []
+
+sudoers_file_cmnd_aliases:
+  - name: MOUNT 
+    entry: '/bin/mount,/bin/umount'
+
+sudoers_file_runas_aliases: []
+