ansible/oopen-server
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

chore(ansible): clean up host_vars YAML and normalize mail text blocks

Browse Source
This commit is contained in:
Christoph
2026-07-28 21:24:03 +02:00
parent ae60fa01a5
commit 4d92340f9b
306 changed files with 2049 additions and 2484 deletions
Download Patch File Download Diff File Expand all files Collapse all files
host_vars/a.mx.oopen.de/a.mx-common.yml
+35 -81
View File
@@ -45,8 +45,8 @@ systemd_resolved: true
# IPv6: 2606:4700:4700::1111
# sekundäre DNS-Adresse
# IPv4: 1.0.0.1
# IPv6: 2606:4700:4700::1001
#
# IPv6: 2606:4700:4700::1001
#
# Google (USA) Public DNS - Großartige Kombination aus Geschwindigkeit und Sicherheit
# primäre DNS-Adresse
# IPv4: 8.8.8.8
@@ -57,20 +57,20 @@ systemd_resolved: true
#
# Quad9 (CH) - Blockiert mühelos schädliche Seiten und verhindert Phishing-Betrug
# primäre DNS-Adresse
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# sekundäre DNS-Adresse
# IPv4: 149.112.112.112
# IPv6: 2620:fe::9
#
# OpenNIC - https://www.opennic.org/
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 194.36.144.87 - ns29.de
# IPv6: 2a00:f826:8:2::195 - ns31.de
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
# IPv4: 5.1.66.255
# IPv6: 2001:678:e68:f000::
# Servername für DNS-over-TLS: dot.ffmuc.net
@@ -83,10 +83,10 @@ resolved_nameserver:
# search domains
#
# If there are more than one search domains, then specify them here in the order in which
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- oopen.de
@@ -96,7 +96,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 185.12.64.2
- 185.12.64.2
# ---
@@ -107,14 +107,14 @@ insert_root_ssh_keypair: true
root_ssh_keypair:
- name: id-rsa-dehydrated
priv_key_src: a.mx/root/.ssh/a.mx-id_rsa-dehydrated
priv_key_src: a.mx.oopen.de/root/.ssh/a.mx-id_rsa-dehydrated
priv_key_dest: /root/.ssh/id_rsa-dehydrated
pub_key_src: a.mx/root/.ssh/a.mx-id_rsa-dehydrated.pub
pub_key_src: a.mx.oopen.de/root/.ssh/a.mx-id_rsa-dehydrated.pub
pub_key_dest: /root/.ssh/id_rsa-dehydrated.pub
- name: id-rsa-opendkim
priv_key_src: a.mx/root/.ssh/a.mx-id_rsa-opendkim
priv_key_src: a.mx.oopen.de/root/.ssh/a.mx-id_rsa-opendkim
priv_key_dest: /root/.ssh/id_rsa-opendkim
pub_key_src: a.mx/root/.ssh/a.mx-id_rsa-opendkim.pub
pub_key_src: a.mx.oopen.de/root/.ssh/a.mx-id_rsa-opendkim.pub
pub_key_dest: /root/.ssh/id_rsa-opendkim.pub
@@ -151,53 +151,6 @@ root_ssh_keypair:
# vars used by roles/common/tasks/copy_files.yml
# ---
copy_plain_files:
# /root/bin/monitoring
#
- name: monitoring_check_cert_for_dovecot.conf
src_path: a.mx/root/bin/monitoring/conf/check_cert_for_dovecot.conf
dest_path: /root/bin/monitoring/conf/check_cert_for_dovecot.conf
# /root/bin/postfix
#
- name: postfix_create_opendkim_key.conf
src_path: a.mx/root/bin/postfix/conf/create_opendkim_key.conf
dest_path: /root/bin/postfix/conf/create_opendkim_key.conf
- name: postfix_postfix_add_mailboxes.conf
src_path: a.mx/root/bin/postfix/conf/postfix_add_mailboxes.conf
dest_path: /root/bin/postfix/conf/postfix_add_mailboxes.conf
- name: postfix_sent_userinfo_postfix.conf
src_path: a.mx/root/bin/postfix/conf/sent_userinfo_postfix.conf
dest_path: /root/bin/postfix/conf/sent_userinfo_postfix.conf
- name: postfix_whitelist_mb_sigs.conf
src_path: a.mx/root/bin/postfix/conf/whitelist_mb_sigs.conf
dest_path: /root/bin/postfix/conf/whitelist_mb_sigs.conf
copy_plain_files_postfwd_host_specific:
# Postfix Firewall postfwd
#
- name: postfwd.wl-user
src_path: a.mx/etc/postfix/postfwd.wl-user
dest_path: /etc/postfix/postfwd.wl-user
- name: postfwd.bl-recipient-exeeds-msg-size-20mb
src_path: a.mx/etc/postfix/postfwd.bl-recipient-exeeds-msg-size-20mb
dest_path: /etc/postfix/postfwd.bl-recipient-exeeds-msg-size-20mb
#copy_template_files: []
#
# - name: mailsystem_install_amavis.conf
# src_path: usr/local/src/mailsystem/conf/install_amavis.conf.j2
# dest_path: /usr/local/src/mailsystem/conf/install_amavis.conf
# ---
# vars used by roles/common/tasks/config_files_mailsystem_scripts.yml
@@ -219,7 +172,7 @@ db_in_use: !!str "true"
postfix_db_type: PostgreSQL
postfix_db_name: postfix
postfix_db_user: postfix
#postfix_db_host: /run/postgresql
# postfix_db_host: /run/postgresql
postfix_db_pass: FKt4z55FxMZp
# install_amavis.conf
@@ -228,33 +181,34 @@ mp_receipt_number: 106015125438
si_authorisation_signature: abb4ec6b194639f3d123154f1b971843a3b8751d8c1bcdc7d07ed6db26621b11bca0e23d2a42b60aef3f7b7803a1466a964d90c7b1e82d67c7680c8f46b59a4e
# install_postfixadmin.conf
#
#
website_name_postfixadmin: adm.oopen.de
email_welcome_message: "\n
Hallo,\n
email_welcome_message: |
Ihre/Deine neue E-Mail Adresse ist eingerichtet.\n
Hallo,
O.OPEN\n
Ihre/Deine neue E-Mail Adresse ist eingerichtet.
--\n
O.OPEN | Phone: +49 30 / 290 484 91\n
Erkelenzdamm 21 | Fax: +49 30 / 290 484 99\n
D-10999 Berlin | E-MAIL: oo@oopen.de\n
"
O.OPEN
--
O.OPEN | Phone: +49 30 / 290 484 91
Erkelenzdamm 21 | Fax: +49 30 / 290 484 99
D-10999 Berlin | E-MAIL: oo@oopen.de
# install_update_dovecot.conf
#
dovecot_from_address: "o.open <oo@oopen.de>"
dovecot_reply_to: "oo@oopen.de"
webmailer_address: "https://webmail.oopen.de"
salutation: "O.OPEN\n
salutation: |
O.OPEN
--\n
O.OPEN | Phone: +49 30 / 290 484 91\n
Erkelenzdamm 21 | Fax: +49 30 / 290 484 99\n
D-10999 Berlin | http://oopen.de\n"
--
O.OPEN | Phone: +49 30 / 290 484 91
Erkelenzdamm 21 | Fax: +49 30 / 290 484 99
D-10999 Berlin | http://oopen.de
# install_upgrade_roundcube-webmail.conf
#
@@ -265,7 +219,7 @@ autoreply_hostname: autoreply.oopen.de
roundcube_db_type: pgsql
roundcube_db_name: roundcubemail
roundcube_db_user: roundcube
#roundcube_db_host: localhost
# roundcube_db_host: localhost
roundcube_db_pass: '3Dsz3j5R'
roundcube_acl_plugin: true
@@ -281,7 +235,7 @@ autoreply_2_hostname: autoreply.oopen.de
roundcube_2_db_type: pgsql
roundcube_2_db_name: roundcubemail2
roundcube_2_db_user: roundcube
#roundcube_2_db_host: localhost
# roundcube_2_db_host: localhost
roundcube_2_db_pass: '3Dsz3j5R'
roundcube2_acl_plugin: true
host_vars/a.mx.oopen.de/a.mx-ipt-server.yml
+1 -1
View File
@@ -42,4 +42,4 @@ fw_jitsi_dovecot_auth: true
fw_rsync_out_ips: $ext_1_ip
# --- Protection / limits
fw_per_IP_connection_limit: 250
fw_per_IP_connection_limit: 250 # noqa: var-naming[pattern]
host_vars/a.ns.oopen.de/a.ns-common.yml
+43 -46
View File
@@ -1,4 +1,5 @@
---
# yamllint disable rule:line-length
# ---
# vars used by roles/ansible_dependencies
@@ -86,8 +87,8 @@ systemd_resolved: true
# IPv6: 2606:4700:4700::1111
# sekundäre DNS-Adresse
# IPv4: 1.0.0.1
# IPv6: 2606:4700:4700::1001
#
# IPv6: 2606:4700:4700::1001
#
# Google (USA) Public DNS - Großartige Kombination aus Geschwindigkeit und Sicherheit
# primäre DNS-Adresse
# IPv4: 8.8.8.8
@@ -98,20 +99,20 @@ systemd_resolved: true
#
# Quad9 (CH) - Blockiert mühelos schädliche Seiten und verhindert Phishing-Betrug
# primäre DNS-Adresse
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# sekundäre DNS-Adresse
# IPv4: 149.112.112.112
# IPv6: 2620:fe::9
#
# OpenNIC - https://www.opennic.org/
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 194.36.144.87 - ns29.de
# IPv6: 2a00:f826:8:2::195 - ns31.de
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
# IPv4: 5.1.66.255
# IPv6: 2001:678:e68:f000::
# Servername für DNS-over-TLS: dot.ffmuc.net
@@ -129,10 +130,10 @@ resolved_nameserver:
# search domains
#
# If there are more than one search domains, then specify them here in the order in which
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- oopen.de
@@ -142,7 +143,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -198,45 +199,45 @@ copy_plain_files:
# ---
symlink_files:
- name: bind_get_domain_by_hostname
src_path: /root/bin/bind/bind_get_domain_by_hostname.sh
dest_path: /usr/local/bin/bind_get_domain_by_hostname.sh
- name: bind_get_domain_by_hostname
src_path: /root/bin/bind/bind_get_domain_by_hostname.sh
dest_path: /usr/local/bin/bind_get_domain_by_hostname.sh
- name: bind_get_zonefile_by_hostname
src_path: /root/bin/bind/bind_get_zonefile_by_hostname.sh
dest_path: /usr/local/bin/bind_get_zonefile_by_hostname.sh
- name: bind_get_zonefile_by_hostname
src_path: /root/bin/bind/bind_get_zonefile_by_hostname.sh
dest_path: /usr/local/bin/bind_get_zonefile_by_hostname.sh
- name: bind_rndc_sync_clean
src_path: /root/bin/bind/bind_rndc_sync_clean.sh
dest_path: /usr/local/bin/bind_rndc_sync_clean.sh
- name: bind_rndc_sync_clean
src_path: /root/bin/bind/bind_rndc_sync_clean.sh
dest_path: /usr/local/bin/bind_rndc_sync_clean.sh
- name: /bind_set_new_serial
src_path: /root/bin/bind/bind_set_new_serial.sh
dest_path: /usr/local/bin/bind_set_new_serial.sh
- name: /bind_set_new_serial
src_path: /root/bin/bind/bind_set_new_serial.sh
dest_path: /usr/local/bin/bind_set_new_serial.sh
- name: bind_set_renew_tlsa
src_path: /root/bin/bind/bind_set_renew_tlsa.sh
dest_path: /usr/local/bin/bind_set_renew_tlsa.sh
- name: bind_set_renew_tlsa
src_path: /root/bin/bind/bind_set_renew_tlsa.sh
dest_path: /usr/local/bin/bind_set_renew_tlsa.sh
- name: bind_add_dkim_zone_master
src_path: /root/bin/bind/bind_add_dkim_zone_master.sh
dest_path: /usr/local/bin/bind_add_dkim_zone_master.sh
- name: bind_add_dkim_zone_master
src_path: /root/bin/bind/bind_add_dkim_zone_master.sh
dest_path: /usr/local/bin/bind_add_dkim_zone_master.sh
- name: bind_add_dkim_zone_slave
src_path: /root/bin/bind/bind_add_dkim_zone_slave.sh
dest_path: /usr/local/bin/bind_add_dkim_zone_slave.sh
- name: bind_add_dkim_zone_slave
src_path: /root/bin/bind/bind_add_dkim_zone_slave.sh
dest_path: /usr/local/bin/bind_add_dkim_zone_slave.sh
- name: bind_reload_all_zones
src_path: /root/bin/bind/bind_reload_all_zones.sh
dest_path: /usr/local/bin/bind_reload_all_zones.sh
- name: bind_reload_all_zones
src_path: /root/bin/bind/bind_reload_all_zones.sh
dest_path: /usr/local/bin/bind_reload_all_zones.sh
- name: bind_remove_domain_on_master
src_path: /root/bin/bind/bind_remove_domain_on_master.sh
dest_path: /usr/local/bin/bind_remove_domain_on_master.sh
- name: bind_remove_domain_on_master
src_path: /root/bin/bind/bind_remove_domain_on_master.sh
dest_path: /usr/local/bin/bind_remove_domain_on_master.sh
- name: bind_remove_domain_on_slave
src_path: /root/bin/bind/bind_remove_domain_on_slave.sh
dest_path: /usr/local/bin/bind_remove_domain_on_slave.sh
- name: bind_remove_domain_on_slave
src_path: /root/bin/bind/bind_remove_domain_on_slave.sh
dest_path: /usr/local/bin/bind_remove_domain_on_slave.sh
# ---
@@ -244,13 +245,9 @@ symlink_files:
# ---
# ==============================
# ---
# vars used by scripts/reset_root_passwd.yml
# ---
host_vars/ak-plan.oopen.de/ak-plan-common.yml
+12 -13
View File
@@ -42,8 +42,8 @@ systemd_resolved: true
# IPv6: 2606:4700:4700::1111
# sekundäre DNS-Adresse
# IPv4: 1.0.0.1
# IPv6: 2606:4700:4700::1001
#
# IPv6: 2606:4700:4700::1001
#
# Google (USA) Public DNS - Großartige Kombination aus Geschwindigkeit und Sicherheit
# primäre DNS-Adresse
# IPv4: 8.8.8.8
@@ -54,20 +54,20 @@ systemd_resolved: true
#
# Quad9 (CH) - Blockiert mühelos schädliche Seiten und verhindert Phishing-Betrug
# primäre DNS-Adresse
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# sekundäre DNS-Adresse
# IPv4: 149.112.112.112
# IPv6: 2620:fe::9
#
# OpenNIC - https://www.opennic.org/
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 194.36.144.87 - ns29.de
# IPv6: 2a00:f826:8:2::195 - ns31.de
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
# IPv4: 5.1.66.255
# IPv6: 2001:678:e68:f000::
# Servername für DNS-over-TLS: dot.ffmuc.net
@@ -83,10 +83,10 @@ resolved_nameserver:
# search domains
#
# If there are more than one search domains, then specify them here in the order in which
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- oopen.de
@@ -96,7 +96,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -139,4 +139,3 @@ resolved_fallback_nameserver:
# ---
# vars used by scripts/reset_root_passwd.yml
# ---
host_vars/anita.wf.netz/anita-common.yml
+4 -4
View File
@@ -1,4 +1,5 @@
---
# yamllint disable rule:line-length
# ---
# vars used by roles/ansible_dependencies
@@ -29,7 +30,7 @@
# vars used by roles/common/tasks/users.yml
# ---
extra_user:
extra_user:
- name: kaya
user_id: 1002
@@ -121,7 +122,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- wf.netz
@@ -131,7 +132,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -290,4 +291,3 @@ samba_shares:
# ---
# vars used by scripts/reset_root_passwd.yml
# ---
host_vars/at-10-neu.ak.netz/at-10-neu-common.yml
+6 -7
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True
network_manage_devices: true
# Should the interfaces be reloaded after config change?
network_interface_reload: False
network_interface_reload: false
network_interface_path: /etc/network/interfaces.d
network_interface_required_packages:
@@ -120,7 +120,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- ak.local
@@ -130,7 +130,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 172.16.0.254
- 172.16.0.254
# ---
@@ -145,7 +145,6 @@ cron_user_special_time_entries:
insertafter: PATH
# ---
# vars used by roles/common/tasks/users.yml
# ---
@@ -279,7 +278,7 @@ samba_homes_virusfilter: true
# - name: name2
#
remove_samba_users: []
#remove_samba_users:
# remove_samba_users:
# - name: evren
samba_shares:
@@ -306,7 +305,7 @@ samba_shares:
recycle_path: '@Recycle'
- name: redakteure
comment: Verzeichnis für Redakteure
comment: Verzeichnis für Redakteure
path: /data/samba/shares/redakteure
group_valid_users: redakteure
group_write_list: redakteure
host_vars/b.mx.oopen.de/b.mx-common.yml
+12 -13
View File
@@ -43,8 +43,8 @@ systemd_resolved: true
# IPv6: 2606:4700:4700::1111
# sekundäre DNS-Adresse
# IPv4: 1.0.0.1
# IPv6: 2606:4700:4700::1001
#
# IPv6: 2606:4700:4700::1001
#
# Google (USA) Public DNS - Großartige Kombination aus Geschwindigkeit und Sicherheit
# primäre DNS-Adresse
# IPv4: 8.8.8.8
@@ -55,20 +55,20 @@ systemd_resolved: true
#
# Quad9 (CH) - Blockiert mühelos schädliche Seiten und verhindert Phishing-Betrug
# primäre DNS-Adresse
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# sekundäre DNS-Adresse
# IPv4: 149.112.112.112
# IPv6: 2620:fe::9
#
# OpenNIC - https://www.opennic.org/
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 194.36.144.87 - ns29.de
# IPv6: 2a00:f826:8:2::195 - ns31.de
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
# IPv4: 5.1.66.255
# IPv6: 2001:678:e68:f000::
# Servername für DNS-over-TLS: dot.ffmuc.net
@@ -81,10 +81,10 @@ resolved_nameserver:
# search domains
#
# If there are more than one search domains, then specify them here in the order in which
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- oopen.de
@@ -94,7 +94,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -189,7 +189,6 @@ copy_template_files: []
# dest_path: /usr/local/src/mailsystem/conf/install_amavis.conf
# ---
# vars used by roles/common/tasks/config_files_mailsystem_scripts.yml
# ---
host_vars/b.ns.oopen.de/b.ns-common.yml
+44 -44
View File
@@ -1,4 +1,5 @@
---
# yamllint disable rule:line-length
# ---
# vars used by roles/ansible_dependencies
@@ -34,7 +35,7 @@ extra_user:
- 'ssh-rsa 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 root@ga-st-mail-opendkim'
- 'ssh-rsa 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 root@ga-st-mail-dehydrated'
- 'ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQClupkurU+acJRtp2s9GgiC+rANqlup8SfhtulV0a/8z6nobjcpQWrfVq+MNjM7VghnlMAwMjz7tccFGyCmJoSS11RcnFtPmqnSNj0/TI8zyYOZUvZCczPBSeqs/IxawyYz91e3RlPWbpv71Nj+/EHUZApZkkdTkpYHduSJYWtKYA2l2Glzmjd2d2u/IFIkqXhvl1bT3RUMLZJqYdEwYAvlW2JB84EIWNf4ytcGcu6rakXCRP9o62BbRza3AfMgSfa45PLodPi5VpqDiTHSCIBll+VOuLqTgQCBYeANRPClMLbueVXXcMrmEwrDXeC0dpqTdgaF2Tz3xYsrAzTe6bcNJsGgGCQyTtDKpsAgoKb31agsyy68CoZto13Ea4WYsNVx0T3KaRlaDm98KqnUJXHJvXnLegqfXiURL5BpxXmAnFvZ0duHrtRkVpzeu5n5vz41RLnFHyLln2VE6a+IYdiLlPl2hC+7pswb+nBP9yNn6T4WQZNtHp4YssANuYKO+/gJaHpMJ1TqgL/Ip66erK+372M1T/6ibiU3+qHbwW7FbXVfn3Dz2abJGyNkoaZGpQIXtx0UxWYZHF8E35Z0ll9NQo1CnDvV3jA1aMnYVTv9DuSYxqLY34oHWXEFzMyStCRWup4Tfrp3pT61GRhb2h8kZi5dqQur9KrqWmA6HF9D+Q== root@lists.mx'
- 'ssh-rsa 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 root@test.mx'
- 'ssh-rsa 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 root@test.mx'
- 'ssh-rsa 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 root@web-01-opendkim'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICCvag/r50Dxfsh3fcG3fZSZ+vbsCwbV+WDoJ++zNSHl root@web-01-dns'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFpQyckVQMI2YMbIQ9Gqf2JyGyM2JufIPf0lv7jvMxLI root@web-02-dns'
@@ -80,8 +81,8 @@ systemd_resolved: true
# IPv6: 2606:4700:4700::1111
# sekundäre DNS-Adresse
# IPv4: 1.0.0.1
# IPv6: 2606:4700:4700::1001
#
# IPv6: 2606:4700:4700::1001
#
# Google (USA) Public DNS - Großartige Kombination aus Geschwindigkeit und Sicherheit
# primäre DNS-Adresse
# IPv4: 8.8.8.8
@@ -92,20 +93,20 @@ systemd_resolved: true
#
# Quad9 (CH) - Blockiert mühelos schädliche Seiten und verhindert Phishing-Betrug
# primäre DNS-Adresse
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# sekundäre DNS-Adresse
# IPv4: 149.112.112.112
# IPv6: 2620:fe::9
#
# OpenNIC - https://www.opennic.org/
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 194.36.144.87 - ns29.de
# IPv6: 2a00:f826:8:2::195 - ns31.de
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
# IPv4: 5.1.66.255
# IPv6: 2001:678:e68:f000::
# Servername für DNS-over-TLS: dot.ffmuc.net
@@ -123,10 +124,10 @@ resolved_nameserver:
# search domains
#
# If there are more than one search domains, then specify them here in the order in which
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- oopen.de
@@ -136,7 +137,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -188,45 +189,45 @@ copy_plain_files:
# ---
symlink_files:
- name: bind_get_domain_by_hostname
src_path: /root/bin/bind/bind_get_domain_by_hostname.sh
dest_path: /usr/local/bin/bind_get_domain_by_hostname.sh
- name: bind_get_domain_by_hostname
src_path: /root/bin/bind/bind_get_domain_by_hostname.sh
dest_path: /usr/local/bin/bind_get_domain_by_hostname.sh
- name: bind_get_zonefile_by_hostname
src_path: /root/bin/bind/bind_get_zonefile_by_hostname.sh
dest_path: /usr/local/bin/bind_get_zonefile_by_hostname.sh
- name: bind_get_zonefile_by_hostname
src_path: /root/bin/bind/bind_get_zonefile_by_hostname.sh
dest_path: /usr/local/bin/bind_get_zonefile_by_hostname.sh
- name: bind_rndc_sync_clean
src_path: /root/bin/bind/bind_rndc_sync_clean.sh
dest_path: /usr/local/bin/bind_rndc_sync_clean.sh
- name: bind_rndc_sync_clean
src_path: /root/bin/bind/bind_rndc_sync_clean.sh
dest_path: /usr/local/bin/bind_rndc_sync_clean.sh
- name: /bind_set_new_serial
src_path: /root/bin/bind/bind_set_new_serial.sh
dest_path: /usr/local/bin/bind_set_new_serial.sh
- name: /bind_set_new_serial
src_path: /root/bin/bind/bind_set_new_serial.sh
dest_path: /usr/local/bin/bind_set_new_serial.sh
- name: bind_set_renew_tlsa
src_path: /root/bin/bind/bind_set_renew_tlsa.sh
dest_path: /usr/local/bin/bind_set_renew_tlsa.sh
- name: bind_set_renew_tlsa
src_path: /root/bin/bind/bind_set_renew_tlsa.sh
dest_path: /usr/local/bin/bind_set_renew_tlsa.sh
- name: bind_add_dkim_zone_master
src_path: /root/bin/bind/bind_add_dkim_zone_master.sh
dest_path: /usr/local/bin/bind_add_dkim_zone_master.sh
- name: bind_add_dkim_zone_master
src_path: /root/bin/bind/bind_add_dkim_zone_master.sh
dest_path: /usr/local/bin/bind_add_dkim_zone_master.sh
- name: bind_add_dkim_zone_slave
src_path: /root/bin/bind/bind_add_dkim_zone_slave.sh
dest_path: /usr/local/bin/bind_add_dkim_zone_slave.sh
- name: bind_add_dkim_zone_slave
src_path: /root/bin/bind/bind_add_dkim_zone_slave.sh
dest_path: /usr/local/bin/bind_add_dkim_zone_slave.sh
- name: bind_reload_all_zones
src_path: /root/bin/bind/bind_reload_all_zones.sh
dest_path: /usr/local/bin/bind_reload_all_zones.sh
- name: bind_reload_all_zones
src_path: /root/bin/bind/bind_reload_all_zones.sh
dest_path: /usr/local/bin/bind_reload_all_zones.sh
- name: bind_remove_domain_on_master
src_path: /root/bin/bind/bind_remove_domain_on_master.sh
dest_path: /usr/local/bin/bind_remove_domain_on_master.sh
- name: bind_remove_domain_on_master
src_path: /root/bin/bind/bind_remove_domain_on_master.sh
dest_path: /usr/local/bin/bind_remove_domain_on_master.sh
- name: bind_remove_domain_on_slave
src_path: /root/bin/bind/bind_remove_domain_on_slave.sh
dest_path: /usr/local/bin/bind_remove_domain_on_slave.sh
- name: bind_remove_domain_on_slave
src_path: /root/bin/bind/bind_remove_domain_on_slave.sh
dest_path: /usr/local/bin/bind_remove_domain_on_slave.sh
# ---
@@ -240,4 +241,3 @@ symlink_files:
# ---
# vars used by scripts/reset_root_passwd.yml
# ---
host_vars/backup.oopen.de/backup-common.yml
+12 -13
View File
@@ -70,8 +70,8 @@ systemd_resolved: true
# IPv6: 2606:4700:4700::1111
# sekundäre DNS-Adresse
# IPv4: 1.0.0.1
# IPv6: 2606:4700:4700::1001
#
# IPv6: 2606:4700:4700::1001
#
# Google (USA) Public DNS - Großartige Kombination aus Geschwindigkeit und Sicherheit
# primäre DNS-Adresse
# IPv4: 8.8.8.8
@@ -82,20 +82,20 @@ systemd_resolved: true
#
# Quad9 (CH) - Blockiert mühelos schädliche Seiten und verhindert Phishing-Betrug
# primäre DNS-Adresse
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# sekundäre DNS-Adresse
# IPv4: 149.112.112.112
# IPv6: 2620:fe::9
#
# OpenNIC - https://www.opennic.org/
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 194.36.144.87 - ns29.de
# IPv6: 2a00:f826:8:2::195 - ns31.de
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
# IPv4: 5.1.66.255
# IPv6: 2001:678:e68:f000::
# Servername für DNS-over-TLS: dot.ffmuc.net
@@ -109,10 +109,10 @@ resolved_nameserver:
# search domains
#
# If there are more than one search domains, then specify them here in the order in which
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- oopen.de
@@ -122,7 +122,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -410,4 +410,3 @@ git_firewall_repository:
root_user:
name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/backup.warenform.de/backup-common.yml
-3
View File
@@ -188,8 +188,6 @@ cron_user_entries:
insert_ssh_keypair_backup_server: false
default_user:
- name: chris
@@ -308,4 +306,3 @@ git_firewall_repository:
root_user:
name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/bbb-server.b3-bornim.netz/bbb-server-common.yml
+8 -9
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True
network_manage_devices: true
# Should the interfaces be reloaded after config change?
network_interface_reload: False
network_interface_reload: false
network_interface_path: /etc/network/interfaces.d
network_interface_required_packages:
@@ -44,9 +44,9 @@ network_interfaces:
# - 91.239.100.100 # anycast.censurfridns.dk
# search: warenform.de
#
#nameservers:
# nameservers:
# - 192.168.42.1
#search: b3-bornim.netz
# search: b3-bornim.netz
# ---
@@ -131,7 +131,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- b3-bornim.netz
@@ -141,7 +141,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 172.16.42.254
- 172.16.42.254
# ---
@@ -156,7 +156,6 @@ cron_user_special_time_entries:
insertafter: PATH
# ---
# vars used by roles/common/tasks/users.yml
# ---
@@ -236,7 +235,7 @@ samba_user:
groups:
- praktikant
password: '20-b3_praktikant-22%'
- name: caroline
groups:
- praktikant
@@ -394,7 +393,7 @@ samba_shares:
recycle_path: '@Recycle'
- name: gs
comment: Gesellschafter
comment: Gesellschafter
path: /data/samba/share/gesellschafter
group_valid_users: gs
group_write_list: gs
host_vars/c.mx.oopen.de/c.mx-common.yml
+35 -79
View File
@@ -45,8 +45,8 @@ systemd_resolved: true
# IPv6: 2606:4700:4700::1111
# sekundäre DNS-Adresse
# IPv4: 1.0.0.1
# IPv6: 2606:4700:4700::1001
#
# IPv6: 2606:4700:4700::1001
#
# Google (USA) Public DNS - Großartige Kombination aus Geschwindigkeit und Sicherheit
# primäre DNS-Adresse
# IPv4: 8.8.8.8
@@ -57,20 +57,20 @@ systemd_resolved: true
#
# Quad9 (CH) - Blockiert mühelos schädliche Seiten und verhindert Phishing-Betrug
# primäre DNS-Adresse
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# sekundäre DNS-Adresse
# IPv4: 149.112.112.112
# IPv6: 2620:fe::9
#
# OpenNIC - https://www.opennic.org/
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 194.36.144.87 - ns29.de
# IPv6: 2a00:f826:8:2::195 - ns31.de
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
# IPv4: 5.1.66.255
# IPv6: 2001:678:e68:f000::
# Servername für DNS-over-TLS: dot.ffmuc.net
@@ -83,10 +83,10 @@ resolved_nameserver:
# search domains
#
# If there are more than one search domains, then specify them here in the order in which
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- oopen.de
@@ -96,7 +96,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -107,19 +107,19 @@ insert_root_ssh_keypair: true
root_ssh_keypair:
- name: id-rsa-dehydrated
priv_key_src: c.mx/root/.ssh/c.mx-id_rsa-dehydrated
priv_key_src: c.mx.oopen.de/root/.ssh/c.mx-id_rsa-dehydrated
priv_key_dest: /root/.ssh/id_rsa-dehydrated
pub_key_src: c.mx/root/.ssh/c.mx-id_rsa-dehydrated.pub
pub_key_src: c.mx.oopen.de/root/.ssh/c.mx-id_rsa-dehydrated.pub
pub_key_dest: /root/.ssh/id_rsa-dehydrated.pub
- name: id-rsa-opendkim
priv_key_src: c.mx/root/.ssh/c.mx-id_rsa-opendkim
priv_key_src: c.mx.oopen.de/root/.ssh/c.mx-id_rsa-opendkim
priv_key_dest: /root/.ssh/id_rsa-opendkim
pub_key_src: c.mx/root/.ssh/c.mx-id_rsa-opendkim.pub
pub_key_src: c.mx.oopen.de/root/.ssh/c.mx-id_rsa-opendkim.pub
pub_key_dest: /root/.ssh/id_rsa-opendkim.pub
- name: id-rsa
priv_key_src: c.mx/root/.ssh/c.mx-id_rsa
priv_key_src: c.mx.oopen.de/root/.ssh/c.mx-id_rsa
priv_key_dest: /root/.ssh/id_rsa
pub_key_src: c.mx/root/.ssh/c.mx-id_rsa.pub
pub_key_src: c.mx.oopen.de/root/.ssh/c.mx-id_rsa.pub
pub_key_dest: /root/.ssh/id_rsa.pub
@@ -156,49 +156,6 @@ root_ssh_keypair:
# vars used by roles/common/tasks/copy_files.yml
# ---
copy_plain_files:
# /root/bin/monitoring
#
- name: monitoring_check_cert_for_dovecot.conf
src_path: c.mx/root/bin/monitoring/conf/check_cert_for_dovecot.conf
dest_path: /root/bin/monitoring/conf/check_cert_for_dovecot.conf
# /root/bin/postfix
#
- name: postfix_create_opendkim_key.conf
src_path: c.mx/root/bin/postfix/conf/create_opendkim_key.conf
dest_path: /root/bin/postfix/conf/create_opendkim_key.conf
- name: postfix_postfix_add_mailboxes.conf
src_path: c.mx/root/bin/postfix/conf/postfix_add_mailboxes.conf
dest_path: /root/bin/postfix/conf/postfix_add_mailboxes.conf
- name: postfix_sent_userinfo_postfix.conf
src_path: c.mx/root/bin/postfix/conf/sent_userinfo_postfix.conf
dest_path: /root/bin/postfix/conf/sent_userinfo_postfix.conf
- name: postfix_whitelist_mb_sigs.conf
src_path: c.mx/root/bin/postfix/conf/whitelist_mb_sigs.conf
dest_path: /root/bin/postfix/conf/whitelist_mb_sigs.conf
copy_plain_files_postfwd_host_specific: []
# Postfix Firewall postfwd
#
#- name: postfwd.wl-user
# src_path: c.mx/etc/postfix/postfwd.wl-user
# dest_path: /etc/postfix/postfwd.wl-user
#copy_template_files: []
#
# - name: mailsystem_install_amavis.conf
# src_path: usr/local/src/mailsystem/conf/install_amavis.conf.j2
# dest_path: /usr/local/src/mailsystem/conf/install_amavis.conf
# ---
# vars used by roles/common/tasks/config_files_mailsystem_scripts.yml
@@ -218,7 +175,7 @@ db_in_use: !!str "true"
postfix_db_type: MySQL
postfix_db_name: postfix
postfix_db_user: postfix
#postfix_db_host:
# postfix_db_host:
postfix_db_pass: AeB4kohyie5rahJ7
# install_amavis.conf
@@ -227,33 +184,33 @@ mp_receipt_number: 106015125438
si_authorisation_signature: abb4ec6b194639f3d123154f1b971843a3b8751d8c1bcdc7d07ed6db26621b11bca0e23d2a42b60aef3f7b7803a1466a964d90c7b1e82d67c7680c8f46b59a4e
# install_postfixadmin.conf
#
#
website_name_postfixadmin: adm.initiativenserver.de
email_welcome_message: "\n
Hallo,\n
email_welcome_message: |
Hallo,
Ihre/Deine neue E-Mail Adresse ist eingerichtet.\n
Ihre/Deine neue E-Mail Adresse ist eingerichtet.
Aktionsbündnis gegen Gewalt, Rechtsextremismus und Fremdenfeindlichkeit
Aktionsbündnis gegen Gewalt, Rechtsextremismus und Fremdenfeindlichkeit
--\n
Initiativenserver | phone: 0331 505824-28\n
Mittelstraße 38/39 | fax: 0331 505824-29\n
14467 Potsdam | email: kontakt@initiativenserver.de\n
"
--
Initiativenserver | phone: 0331 505824-28
Mittelstraße 38/39 | fax: 0331 505824-29
14467 Potsdam | email: kontakt@initiativenserver.de
# install_update_dovecot.conf
#
dovecot_from_address: "Admin Initiativenserver <admin@initiativenserver.de>"
dovecot_reply_to: "admin@initiativenserver.de"
webmailer_address: "https://webmail.initiativenserver.de"
salutation: "Aktionsbündnis gegen Gewalt, Rechtsextremismus und FremdenfeindlichkeitN\n
salutation: |
Aktionsbündnis gegen Gewalt, Rechtsextremismus und Fremdenfeindlichkeit
--\n
Initiativenserver | phone: 0331 505824-28\n
Mittelstraße 38/39 | fax: 0331 505824-29\n
14467 Potsdam | email: kontakt@initiativenserver.de\n"
--
Initiativenserver | phone: 0331 505824-28
Mittelstraße 38/39 | fax: 0331 505824-29
14467 Potsdam | email: kontakt@initiativenserver.de
# install_upgrade_roundcube-webmail.conf
#
@@ -264,7 +221,7 @@ autoreply_hostname: autoreply.initiativenserver.de
roundcube_db_type: mysql
roundcube_db_name: roundcubemail
roundcube_db_user: roundcube
#roundcube_db_host:
# roundcube_db_host:
roundcube_db_pass: 're6Xe8Fereejai3D'
roundcube_acl_plugin: false
@@ -295,4 +252,3 @@ template_files_mailsystem_script:
- name: mailsystem_install_upgrade_roundcube-webmail.conf
src_path: usr/local/src/mailsystem/conf/install_upgrade_roundcube-webmail.conf.j2
dest_path: /usr/local/src/mailsystem/conf/install_upgrade_roundcube-webmail.conf
host_vars/cl-01.oopen.de/cl-01-common.yml
+12 -13
View File
@@ -42,8 +42,8 @@ systemd_resolved: true
# IPv6: 2606:4700:4700::1111
# sekundäre DNS-Adresse
# IPv4: 1.0.0.1
# IPv6: 2606:4700:4700::1001
#
# IPv6: 2606:4700:4700::1001
#
# Google (USA) Public DNS - Großartige Kombination aus Geschwindigkeit und Sicherheit
# primäre DNS-Adresse
# IPv4: 8.8.8.8
@@ -54,20 +54,20 @@ systemd_resolved: true
#
# Quad9 (CH) - Blockiert mühelos schädliche Seiten und verhindert Phishing-Betrug
# primäre DNS-Adresse
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# sekundäre DNS-Adresse
# IPv4: 149.112.112.112
# IPv6: 2620:fe::9
#
# OpenNIC - https://www.opennic.org/
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 194.36.144.87 - ns29.de
# IPv6: 2a00:f826:8:2::195 - ns31.de
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
# IPv4: 5.1.66.255
# IPv6: 2001:678:e68:f000::
# Servername für DNS-over-TLS: dot.ffmuc.net
@@ -85,10 +85,10 @@ resolved_nameserver:
# search domains
#
# If there are more than one search domains, then specify them here in the order in which
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- oopen.de
@@ -98,7 +98,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -163,4 +163,3 @@ sudoers_file_user_privileges:
# ---
# vars used by scripts/reset_root_passwd.yml
# ---
host_vars/cl-02.oopen.de/cl-02-common.yml
+2 -3
View File
@@ -88,7 +88,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- oopen.de
@@ -98,7 +98,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -150,4 +150,3 @@ sudoers_file_user_privileges:
# ---
# vars used by scripts/reset_root_passwd.yml
# ---
host_vars/cl-dissens.oopen.de/cl-dissens-common.yml
+12 -13
View File
@@ -42,8 +42,8 @@ systemd_resolved: true
# IPv6: 2606:4700:4700::1111
# sekundäre DNS-Adresse
# IPv4: 1.0.0.1
# IPv6: 2606:4700:4700::1001
#
# IPv6: 2606:4700:4700::1001
#
# Google (USA) Public DNS - Großartige Kombination aus Geschwindigkeit und Sicherheit
# primäre DNS-Adresse
# IPv4: 8.8.8.8
@@ -54,20 +54,20 @@ systemd_resolved: true
#
# Quad9 (CH) - Blockiert mühelos schädliche Seiten und verhindert Phishing-Betrug
# primäre DNS-Adresse
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# sekundäre DNS-Adresse
# IPv4: 149.112.112.112
# IPv6: 2620:fe::9
#
# OpenNIC - https://www.opennic.org/
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 194.36.144.87 - ns29.de
# IPv6: 2a00:f826:8:2::195 - ns31.de
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
# IPv4: 5.1.66.255
# IPv6: 2001:678:e68:f000::
# Servername für DNS-over-TLS: dot.ffmuc.net
@@ -83,10 +83,10 @@ resolved_nameserver:
# search domains
#
# If there are more than one search domains, then specify them here in the order in which
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- oopen.de
@@ -96,7 +96,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -148,4 +148,3 @@ sudoers_file_user_privileges:
# ---
# vars used by scripts/reset_root_passwd.yml
# ---
host_vars/cl-flr.oopen.de/cl-flr-common.yml
+12 -13
View File
@@ -42,8 +42,8 @@ systemd_resolved: true
# IPv6: 2606:4700:4700::1111
# sekundäre DNS-Adresse
# IPv4: 1.0.0.1
# IPv6: 2606:4700:4700::1001
#
# IPv6: 2606:4700:4700::1001
#
# Google (USA) Public DNS - Großartige Kombination aus Geschwindigkeit und Sicherheit
# primäre DNS-Adresse
# IPv4: 8.8.8.8
@@ -54,20 +54,20 @@ systemd_resolved: true
#
# Quad9 (CH) - Blockiert mühelos schädliche Seiten und verhindert Phishing-Betrug
# primäre DNS-Adresse
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# sekundäre DNS-Adresse
# IPv4: 149.112.112.112
# IPv6: 2620:fe::9
#
# OpenNIC - https://www.opennic.org/
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 194.36.144.87 - ns29.de
# IPv6: 2a00:f826:8:2::195 - ns31.de
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
# IPv4: 5.1.66.255
# IPv6: 2001:678:e68:f000::
# Servername für DNS-over-TLS: dot.ffmuc.net
@@ -83,10 +83,10 @@ resolved_nameserver:
# search domains
#
# If there are more than one search domains, then specify them here in the order in which
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- oopen.de
@@ -96,7 +96,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -148,4 +148,3 @@ sudoers_file_user_privileges:
# ---
# vars used by scripts/reset_root_passwd.yml
# ---
host_vars/cl-fm.oopen.de/cl-fm-common.yml
+12 -13
View File
@@ -42,8 +42,8 @@ systemd_resolved: true
# IPv6: 2606:4700:4700::1111
# sekundäre DNS-Adresse
# IPv4: 1.0.0.1
# IPv6: 2606:4700:4700::1001
#
# IPv6: 2606:4700:4700::1001
#
# Google (USA) Public DNS - Großartige Kombination aus Geschwindigkeit und Sicherheit
# primäre DNS-Adresse
# IPv4: 8.8.8.8
@@ -54,20 +54,20 @@ systemd_resolved: true
#
# Quad9 (CH) - Blockiert mühelos schädliche Seiten und verhindert Phishing-Betrug
# primäre DNS-Adresse
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# sekundäre DNS-Adresse
# IPv4: 149.112.112.112
# IPv6: 2620:fe::9
#
# OpenNIC - https://www.opennic.org/
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 194.36.144.87 - ns29.de
# IPv6: 2a00:f826:8:2::195 - ns31.de
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
# IPv4: 5.1.66.255
# IPv6: 2001:678:e68:f000::
# Servername für DNS-over-TLS: dot.ffmuc.net
@@ -83,10 +83,10 @@ resolved_nameserver:
# search domains
#
# If there are more than one search domains, then specify them here in the order in which
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- oopen.de
@@ -96,7 +96,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -232,4 +232,3 @@ sudoers_file_user_privileges:
# ---
# vars used by scripts/reset_root_passwd.yml
# ---
host_vars/cl-irights.oopen.de/cl-irights-common.yml
+2 -3
View File
@@ -86,7 +86,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- oopen.de
@@ -96,7 +96,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -232,4 +232,3 @@ sudoers_file_user_privileges:
# ---
# vars used by scripts/reset_root_passwd.yml
# ---
host_vars/cl-lubax.oopen.de/cl-lubax-common.yml
+13 -14
View File
@@ -19,7 +19,7 @@
# vars used by roles/common/tasks/sshd.yml
# ---
#sshd_permit_root_login: !!str "prohibit-password"
# sshd_permit_root_login: !!str "prohibit-password"
sshd_permit_root_login: !!str "no"
# ---
@@ -43,8 +43,8 @@ systemd_resolved: false
# IPv6: 2606:4700:4700::1111
# sekundäre DNS-Adresse
# IPv4: 1.0.0.1
# IPv6: 2606:4700:4700::1001
#
# IPv6: 2606:4700:4700::1001
#
# Google (USA) Public DNS - Großartige Kombination aus Geschwindigkeit und Sicherheit
# primäre DNS-Adresse
# IPv4: 8.8.8.8
@@ -55,20 +55,20 @@ systemd_resolved: false
#
# Quad9 (CH) - Blockiert mühelos schädliche Seiten und verhindert Phishing-Betrug
# primäre DNS-Adresse
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# sekundäre DNS-Adresse
# IPv4: 149.112.112.112
# IPv6: 2620:fe::9
#
# OpenNIC - https://www.opennic.org/
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 194.36.144.87 - ns29.de
# IPv6: 2a00:f826:8:2::195 - ns31.de
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
# IPv4: 5.1.66.255
# IPv6: 2001:678:e68:f000::
# Servername für DNS-over-TLS: dot.ffmuc.net
@@ -84,10 +84,10 @@ resolved_nameserver:
# search domains
#
# If there are more than one search domains, then specify them here in the order in which
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- oopen.de
@@ -97,7 +97,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -149,4 +149,3 @@ sudoers_file_user_privileges:
# ---
# vars used by scripts/reset_root_passwd.yml
# ---
host_vars/cl-lubax.oopen.de/cl-lubax-ipt-server.yml
+1 -1
View File
@@ -24,4 +24,4 @@ fw_http_server_ips: $ext_1_ip
fw_mail_client_ips: $ext_1_ip
# --- Block
#fw_blocked_ips: 222.184.0.0/13 61.160.0.0/16 116.8.0.0/14
# fw_blocked_ips: 222.184.0.0/13 61.160.0.0/16 116.8.0.0/14
host_vars/cl-nd.oopen.de/cl-nd-common.yml
+12 -13
View File
@@ -42,8 +42,8 @@ systemd_resolved: true
# IPv6: 2606:4700:4700::1111
# sekundäre DNS-Adresse
# IPv4: 1.0.0.1
# IPv6: 2606:4700:4700::1001
#
# IPv6: 2606:4700:4700::1001
#
# Google (USA) Public DNS - Großartige Kombination aus Geschwindigkeit und Sicherheit
# primäre DNS-Adresse
# IPv4: 8.8.8.8
@@ -54,20 +54,20 @@ systemd_resolved: true
#
# Quad9 (CH) - Blockiert mühelos schädliche Seiten und verhindert Phishing-Betrug
# primäre DNS-Adresse
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# sekundäre DNS-Adresse
# IPv4: 149.112.112.112
# IPv6: 2620:fe::9
#
# OpenNIC - https://www.opennic.org/
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 194.36.144.87 - ns29.de
# IPv6: 2a00:f826:8:2::195 - ns31.de
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
# IPv4: 5.1.66.255
# IPv6: 2001:678:e68:f000::
# Servername für DNS-over-TLS: dot.ffmuc.net
@@ -83,10 +83,10 @@ resolved_nameserver:
# search domains
#
# If there are more than one search domains, then specify them here in the order in which
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- oopen.de
@@ -96,7 +96,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -232,4 +232,3 @@ sudoers_file_user_privileges:
# ---
# vars used by scripts/reset_root_passwd.yml
# ---
host_vars/cl-ndm.oopen.de/cl-ndm-common.yml
+12 -13
View File
@@ -42,8 +42,8 @@ systemd_resolved: true
# IPv6: 2606:4700:4700::1111
# sekundäre DNS-Adresse
# IPv4: 1.0.0.1
# IPv6: 2606:4700:4700::1001
#
# IPv6: 2606:4700:4700::1001
#
# Google (USA) Public DNS - Großartige Kombination aus Geschwindigkeit und Sicherheit
# primäre DNS-Adresse
# IPv4: 8.8.8.8
@@ -54,20 +54,20 @@ systemd_resolved: true
#
# Quad9 (CH) - Blockiert mühelos schädliche Seiten und verhindert Phishing-Betrug
# primäre DNS-Adresse
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# sekundäre DNS-Adresse
# IPv4: 149.112.112.112
# IPv6: 2620:fe::9
#
# OpenNIC - https://www.opennic.org/
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 194.36.144.87 - ns29.de
# IPv6: 2a00:f826:8:2::195 - ns31.de
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
# IPv4: 5.1.66.255
# IPv6: 2001:678:e68:f000::
# Servername für DNS-over-TLS: dot.ffmuc.net
@@ -83,10 +83,10 @@ resolved_nameserver:
# search domains
#
# If there are more than one search domains, then specify them here in the order in which
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- oopen.de
@@ -96,7 +96,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -232,4 +232,3 @@ sudoers_file_user_privileges:
# ---
# vars used by scripts/reset_root_passwd.yml
# ---
host_vars/cl-opp.oopen.de/cl-opp-common.yml
+12 -13
View File
@@ -42,8 +42,8 @@ systemd_resolved: true
# IPv6: 2606:4700:4700::1111
# sekundäre DNS-Adresse
# IPv4: 1.0.0.1
# IPv6: 2606:4700:4700::1001
#
# IPv6: 2606:4700:4700::1001
#
# Google (USA) Public DNS - Großartige Kombination aus Geschwindigkeit und Sicherheit
# primäre DNS-Adresse
# IPv4: 8.8.8.8
@@ -54,20 +54,20 @@ systemd_resolved: true
#
# Quad9 (CH) - Blockiert mühelos schädliche Seiten und verhindert Phishing-Betrug
# primäre DNS-Adresse
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# sekundäre DNS-Adresse
# IPv4: 149.112.112.112
# IPv6: 2620:fe::9
#
# OpenNIC - https://www.opennic.org/
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 194.36.144.87 - ns29.de
# IPv6: 2a00:f826:8:2::195 - ns31.de
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
# IPv4: 5.1.66.255
# IPv6: 2001:678:e68:f000::
# Servername für DNS-over-TLS: dot.ffmuc.net
@@ -83,10 +83,10 @@ resolved_nameserver:
# search domains
#
# If there are more than one search domains, then specify them here in the order in which
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- oopen.de
@@ -96,7 +96,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -143,4 +143,3 @@ sudoers_file_user_privileges:
# ---
# vars used by scripts/reset_root_passwd.yml
# ---
host_vars/cl-test.oopen.de/cl-test-common.yml
+12 -13
View File
@@ -42,8 +42,8 @@ systemd_resolved: true
# IPv6: 2606:4700:4700::1111
# sekundäre DNS-Adresse
# IPv4: 1.0.0.1
# IPv6: 2606:4700:4700::1001
#
# IPv6: 2606:4700:4700::1001
#
# Google (USA) Public DNS - Großartige Kombination aus Geschwindigkeit und Sicherheit
# primäre DNS-Adresse
# IPv4: 8.8.8.8
@@ -54,20 +54,20 @@ systemd_resolved: true
#
# Quad9 (CH) - Blockiert mühelos schädliche Seiten und verhindert Phishing-Betrug
# primäre DNS-Adresse
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# sekundäre DNS-Adresse
# IPv4: 149.112.112.112
# IPv6: 2620:fe::9
#
# OpenNIC - https://www.opennic.org/
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 194.36.144.87 - ns29.de
# IPv6: 2a00:f826:8:2::195 - ns31.de
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
# IPv4: 5.1.66.255
# IPv6: 2001:678:e68:f000::
# Servername für DNS-over-TLS: dot.ffmuc.net
@@ -81,10 +81,10 @@ resolved_nameserver:
# search domains
#
# If there are more than one search domains, then specify them here in the order in which
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- oopen.de
@@ -93,7 +93,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -140,4 +140,3 @@ sudoers_file_user_privileges:
# ---
# vars used by scripts/reset_root_passwd.yml
# ---
host_vars/cl-vbrg.oopen.de/cl-vbrg-common.yml
-1
View File
@@ -70,4 +70,3 @@ sudoers_file_user_privileges:
# ---
# vars used by scripts/reset_root_passwd.yml
# ---
host_vars/cloud-giz.warenform.de/cloud-giz-common.yml
-1
View File
@@ -70,4 +70,3 @@ sudoers_file_user_privileges:
# ---
# vars used by scripts/reset_root_passwd.yml
# ---
host_vars/cloud.akweb.de/cloud-common.yml
+2 -3
View File
@@ -87,7 +87,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- oopen.de
@@ -97,7 +97,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -144,4 +144,3 @@ sudoers_file_user_privileges:
# ---
# vars used by scripts/reset_root_passwd.yml
# ---
host_vars/cp-01.oopen.de/cp-01-common.yml
+12 -13
View File
@@ -42,8 +42,8 @@ systemd_resolved: true
# IPv6: 2606:4700:4700::1111
# sekundäre DNS-Adresse
# IPv4: 1.0.0.1
# IPv6: 2606:4700:4700::1001
#
# IPv6: 2606:4700:4700::1001
#
# Google (USA) Public DNS - Großartige Kombination aus Geschwindigkeit und Sicherheit
# primäre DNS-Adresse
# IPv4: 8.8.8.8
@@ -54,20 +54,20 @@ systemd_resolved: true
#
# Quad9 (CH) - Blockiert mühelos schädliche Seiten und verhindert Phishing-Betrug
# primäre DNS-Adresse
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# sekundäre DNS-Adresse
# IPv4: 149.112.112.112
# IPv6: 2620:fe::9
#
# OpenNIC - https://www.opennic.org/
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 194.36.144.87 - ns29.de
# IPv6: 2a00:f826:8:2::195 - ns31.de
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
# IPv4: 5.1.66.255
# IPv6: 2001:678:e68:f000::
# Servername für DNS-over-TLS: dot.ffmuc.net
@@ -85,10 +85,10 @@ resolved_nameserver:
# search domains
#
# If there are more than one search domains, then specify them here in the order in which
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- oopen.de
@@ -98,7 +98,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -158,4 +158,3 @@ sudoers_file_user_privileges:
# ---
# vars used by scripts/reset_root_passwd.yml
# ---
host_vars/cp-flr.oopen.de/cp-flr-common.yml
+12 -13
View File
@@ -42,8 +42,8 @@ systemd_resolved: true
# IPv6: 2606:4700:4700::1111
# sekundäre DNS-Adresse
# IPv4: 1.0.0.1
# IPv6: 2606:4700:4700::1001
#
# IPv6: 2606:4700:4700::1001
#
# Google (USA) Public DNS - Großartige Kombination aus Geschwindigkeit und Sicherheit
# primäre DNS-Adresse
# IPv4: 8.8.8.8
@@ -54,20 +54,20 @@ systemd_resolved: true
#
# Quad9 (CH) - Blockiert mühelos schädliche Seiten und verhindert Phishing-Betrug
# primäre DNS-Adresse
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# sekundäre DNS-Adresse
# IPv4: 149.112.112.112
# IPv6: 2620:fe::9
#
# OpenNIC - https://www.opennic.org/
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 194.36.144.87 - ns29.de
# IPv6: 2a00:f826:8:2::195 - ns31.de
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
# IPv4: 5.1.66.255
# IPv6: 2001:678:e68:f000::
# Servername für DNS-over-TLS: dot.ffmuc.net
@@ -83,10 +83,10 @@ resolved_nameserver:
# search domains
#
# If there are more than one search domains, then specify them here in the order in which
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- oopen.de
@@ -96,7 +96,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -156,4 +156,3 @@ sudoers_file_user_privileges:
# ---
# vars used by scripts/reset_root_passwd.yml
# ---
host_vars/d.mx.oopen.de/d.mx-common.yml
+12 -13
View File
@@ -45,8 +45,8 @@ systemd_resolved: true
# IPv6: 2606:4700:4700::1111
# sekundäre DNS-Adresse
# IPv4: 1.0.0.1
# IPv6: 2606:4700:4700::1001
#
# IPv6: 2606:4700:4700::1001
#
# Google (USA) Public DNS - Großartige Kombination aus Geschwindigkeit und Sicherheit
# primäre DNS-Adresse
# IPv4: 8.8.8.8
@@ -57,20 +57,20 @@ systemd_resolved: true
#
# Quad9 (CH) - Blockiert mühelos schädliche Seiten und verhindert Phishing-Betrug
# primäre DNS-Adresse
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# sekundäre DNS-Adresse
# IPv4: 149.112.112.112
# IPv6: 2620:fe::9
#
# OpenNIC - https://www.opennic.org/
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 194.36.144.87 - ns29.de
# IPv6: 2a00:f826:8:2::195 - ns31.de
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
# IPv4: 5.1.66.255
# IPv6: 2001:678:e68:f000::
# Servername für DNS-over-TLS: dot.ffmuc.net
@@ -83,10 +83,10 @@ resolved_nameserver:
# search domains
#
# If there are more than one search domains, then specify them here in the order in which
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- oopen.de
@@ -96,7 +96,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -173,7 +173,6 @@ copy_template_files: []
# dest_path: /usr/local/src/mailsystem/conf/install_amavis.conf
# ---
# vars used by roles/common/tasks/config_files_mailsystem_scripts.yml
# ---
host_vars/dc-opp.oopen.de/dc-opp-common.yml
+12 -13
View File
@@ -42,8 +42,8 @@ systemd_resolved: true
# IPv6: 2606:4700:4700::1111
# sekundäre DNS-Adresse
# IPv4: 1.0.0.1
# IPv6: 2606:4700:4700::1001
#
# IPv6: 2606:4700:4700::1001
#
# Google (USA) Public DNS - Großartige Kombination aus Geschwindigkeit und Sicherheit
# primäre DNS-Adresse
# IPv4: 8.8.8.8
@@ -54,20 +54,20 @@ systemd_resolved: true
#
# Quad9 (CH) - Blockiert mühelos schädliche Seiten und verhindert Phishing-Betrug
# primäre DNS-Adresse
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# sekundäre DNS-Adresse
# IPv4: 149.112.112.112
# IPv6: 2620:fe::9
#
# OpenNIC - https://www.opennic.org/
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 194.36.144.87 - ns29.de
# IPv6: 2a00:f826:8:2::195 - ns31.de
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
# IPv4: 5.1.66.255
# IPv6: 2001:678:e68:f000::
# Servername für DNS-over-TLS: dot.ffmuc.net
@@ -83,10 +83,10 @@ resolved_nameserver:
# search domains
#
# If there are more than one search domains, then specify them here in the order in which
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- oopen.de
@@ -96,7 +96,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -139,4 +139,3 @@ resolved_fallback_nameserver:
# ---
# vars used by scripts/reset_root_passwd.yml
# ---
host_vars/devel-cloud.wf.netz/devel-cloud-common.yml
+4 -4
View File
@@ -1,4 +1,5 @@
---
# yamllint disable rule:line-length
# ---
# vars used by roles/ansible_dependencies
@@ -81,7 +82,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- wf.netz
@@ -91,14 +92,14 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
# vars used by roles/common/tasks/users.yml
# ---
extra_user:
extra_user:
- name: kaya
password: $6$t9gheUvd$hFTJ5mp0bdu4Hc5zGmS6HuSAfFOc4QRROLX4wnCauLjwTxUtvhgeLDlL5YkjGfiWOCEe84krH4op0DdKjTJWG/
@@ -150,4 +151,3 @@ sudo_users:
root_user:
name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/devel-db.wf.netz/devel-db-common.yml
+2 -5
View File
@@ -87,7 +87,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- wf.netz
@@ -97,7 +97,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -142,15 +142,12 @@ resolved_fallback_nameserver:
# ---
# ---
# vars used by roles/common/tasks/samba-config-server.yml
# vars used by roles/common/tasks/samba-user.yml
# ---
# ==============================
host_vars/devel-php.wf.netz/devel-php-common.yml
+2 -5
View File
@@ -94,7 +94,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- wf.netz
@@ -104,7 +104,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -149,15 +149,12 @@ resolved_fallback_nameserver:
# ---
# ---
# vars used by roles/common/tasks/samba-config-server.yml
# vars used by roles/common/tasks/samba-user.yml
# ---
# ==============================
host_vars/devel-repos.wf.netz/devel-repos-common.yml
+2 -5
View File
@@ -87,7 +87,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- wf.netz
@@ -97,7 +97,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -142,15 +142,12 @@ resolved_fallback_nameserver:
# ---
# ---
# vars used by roles/common/tasks/samba-config-server.yml
# vars used by roles/common/tasks/samba-user.yml
# ---
# ==============================
host_vars/devel-root.wf.netz/devel-root-common.yml
+2 -5
View File
@@ -87,7 +87,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- wf.netz
@@ -97,7 +97,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -142,15 +142,12 @@ resolved_fallback_nameserver:
# ---
# ---
# vars used by roles/common/tasks/samba-config-server.yml
# vars used by roles/common/tasks/samba-user.yml
# ---
# ==============================
host_vars/devel-wiki.wf.netz/devel-wiki-common.yml
+2 -5
View File
@@ -87,7 +87,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- wf.netz
@@ -97,7 +97,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -142,15 +142,12 @@ resolved_fallback_nameserver:
# ---
# ---
# vars used by roles/common/tasks/samba-config-server.yml
# vars used by roles/common/tasks/samba-user.yml
# ---
# ==============================
host_vars/dns0.warenform.de/dns0-common.yml
+9 -10
View File
@@ -41,8 +41,8 @@ systemd_resolved: true
# IPv6: 2606:4700:4700::1111
# sekundäre DNS-Adresse
# IPv4: 1.0.0.1
# IPv6: 2606:4700:4700::1001
#
# IPv6: 2606:4700:4700::1001
#
# Google (USA) Public DNS - Großartige Kombination aus Geschwindigkeit und Sicherheit
# primäre DNS-Adresse
# IPv4: 8.8.8.8
@@ -53,20 +53,20 @@ systemd_resolved: true
#
# Quad9 (CH) - Blockiert mühelos schädliche Seiten und verhindert Phishing-Betrug
# primäre DNS-Adresse
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# sekundäre DNS-Adresse
# IPv4: 149.112.112.112
# IPv6: 2620:fe::9
#
# OpenNIC - https://www.opennic.org/
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 194.36.144.87 - ns29.de
# IPv6: 2a00:f826:8:2::195 - ns31.de
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
# IPv4: 5.1.66.255
# IPv6: 2001:678:e68:f000::
# Servername für DNS-over-TLS: dot.ffmuc.net
@@ -121,4 +121,3 @@ git_firewall_repository: {}
# ---
# vars used by scripts/reset_root_passwd.yml
# ---
host_vars/dns1.warenform.de/dns1-common.yml
+12 -13
View File
@@ -41,8 +41,8 @@ systemd_resolved: true
# IPv6: 2606:4700:4700::1111
# sekundäre DNS-Adresse
# IPv4: 1.0.0.1
# IPv6: 2606:4700:4700::1001
#
# IPv6: 2606:4700:4700::1001
#
# Google (USA) Public DNS - Großartige Kombination aus Geschwindigkeit und Sicherheit
# primäre DNS-Adresse
# IPv4: 8.8.8.8
@@ -53,20 +53,20 @@ systemd_resolved: true
#
# Quad9 (CH) - Blockiert mühelos schädliche Seiten und verhindert Phishing-Betrug
# primäre DNS-Adresse
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# sekundäre DNS-Adresse
# IPv4: 149.112.112.112
# IPv6: 2620:fe::9
#
# OpenNIC - https://www.opennic.org/
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 194.36.144.87 - ns29.de
# IPv6: 2a00:f826:8:2::195 - ns31.de
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
# IPv4: 5.1.66.255
# IPv6: 2001:678:e68:f000::
# Servername für DNS-over-TLS: dot.ffmuc.net
@@ -81,10 +81,10 @@ resolved_nameserver:
# search domains
#
# If there are more than one search domains, then specify them here in the order in which
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- warenform.de
@@ -94,7 +94,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -138,4 +138,3 @@ git_firewall_repository: {}
# ---
# vars used by scripts/reset_root_passwd.yml
# ---
host_vars/e.mx.oopen.de/e.mx-common.yml
+33 -62
View File
@@ -45,8 +45,8 @@ systemd_resolved: true
# IPv6: 2606:4700:4700::1111
# sekundäre DNS-Adresse
# IPv4: 1.0.0.1
# IPv6: 2606:4700:4700::1001
#
# IPv6: 2606:4700:4700::1001
#
# Google (USA) Public DNS - Großartige Kombination aus Geschwindigkeit und Sicherheit
# primäre DNS-Adresse
# IPv4: 8.8.8.8
@@ -57,20 +57,20 @@ systemd_resolved: true
#
# Quad9 (CH) - Blockiert mühelos schädliche Seiten und verhindert Phishing-Betrug
# primäre DNS-Adresse
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# sekundäre DNS-Adresse
# IPv4: 149.112.112.112
# IPv6: 2620:fe::9
#
# OpenNIC - https://www.opennic.org/
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 194.36.144.87 - ns29.de
# IPv6: 2a00:f826:8:2::195 - ns31.de
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
# IPv4: 5.1.66.255
# IPv6: 2001:678:e68:f000::
# Servername für DNS-over-TLS: dot.ffmuc.net
@@ -83,10 +83,10 @@ resolved_nameserver:
# search domains
#
# If there are more than one search domains, then specify them here in the order in which
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- oopen.de
@@ -96,7 +96,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -105,16 +105,16 @@ resolved_fallback_nameserver:
insert_root_ssh_keypair: true
#root_ssh_keypair:
# root_ssh_keypair:
# - name: id-rsa-dehydrated
# priv_key_src: e.mx/root/.ssh/e.mx-id_rsa-dehydrated
# priv_key_src: e.mx.oopen.de/root/.ssh/e.mx-id_rsa-dehydrated
# priv_key_dest: /root/.ssh/id_rsa-dehydrated
# pub_key_src: e.mx/root/.ssh/e.mx-id_rsa-dehydrated.pub
# pub_key_src: e.mx.oopen.de/root/.ssh/e.mx-id_rsa-dehydrated.pub
# pub_key_dest: /root/.ssh/id_rsa-dehydrated.pub
# - name: id-rsa-opendkim
# priv_key_src: e.mx/root/.ssh/e.mx-id_rsa-opendkim
# priv_key_src: e.mx.oopen.de/root/.ssh/e.mx-id_rsa-opendkim
# priv_key_dest: /root/.ssh/id_rsa-opendkim
# pub_key_src: e.mx/root/.ssh/e.mx-id_rsa-opendkim.pub
# pub_key_src: e.mx.oopen.de/root/.ssh/e.mx-id_rsa-opendkim.pub
# pub_key_dest: /root/.ssh/id_rsa-opendkim.pub
@@ -151,36 +151,6 @@ insert_root_ssh_keypair: true
# vars used by roles/common/tasks/copy_files.yml
# ---
#copy_plain_files:
#
# - name: monitoring_check_cert_for_dovecot.conf
# src_path: e.mx/root/bin/monitoring/conf/check_cert_for_dovecot.conf
# dest_path: /root/bin/monitoring/conf/check_cert_for_dovecot.conf
#
# - name: postfix_create_opendkim_key.conf
# src_path: e.mx/root/bin/postfix/conf/create_opendkim_key.conf
# dest_path: /root/bin/postfix/conf/create_opendkim_key.conf
#
# - name: postfix_postfix_add_mailboxes.conf
# src_path: e.mx/root/bin/postfix/conf/postfix_add_mailboxes.conf
# dest_path: /root/bin/postfix/conf/postfix_add_mailboxes.conf
#
# - name: postfix_sent_userinfo_postfix.conf
# src_path: e.mx/root/bin/postfix/conf/sent_userinfo_postfix.conf
# dest_path: /root/bin/postfix/conf/sent_userinfo_postfix.conf
#
# - name: postfix_whitelist_mb_sigs.conf
# src_path: e.mx/root/bin/postfix/conf/whitelist_mb_sigs.conf
# dest_path: /root/bin/postfix/conf/whitelist_mb_sigs.conf
#
#
#copy_template_files: []
#
# - name: mailsystem_install_amavis.conf
# src_path: usr/local/src/mailsystem/conf/install_amavis.conf.j2
# dest_path: /usr/local/src/mailsystem/conf/install_amavis.conf
# ---
# vars used by roles/common/tasks/config_files_mailsystem_scripts.yml
@@ -208,33 +178,34 @@ mp_receipt_number: 106015125438
si_authorisation_signature: abb4ec6b194639f3d123154f1b971843a3b8751d8c1bcdc7d07ed6db26621b11bca0e23d2a42b60aef3f7b7803a1466a964d90c7b1e82d67c7680c8f46b59a4e
# install_postfixadmin.conf
#
#
website_name_postfixadmin: adm-e.oopen.de
email_welcome_message: "\n
Hallo,\n
email_welcome_message: |
Ihre/Deine neue E-Mail Adresse ist eingerichtet.\n
Hallo,
O.OPEN\n
Ihre/Deine neue E-Mail Adresse ist eingerichtet.
--\n
O.OPEN | Phone: +49 30 / 290 484 91\n
Erkelenzdamm 21 | Fax: +49 30 / 290 484 99\n
D-10999 Berlin | E-MAIL: oo@oopen.de\n
"
O.OPEN
--
O.OPEN | Phone: +49 30 / 290 484 91
Erkelenzdamm 21 | Fax: +49 30 / 290 484 99
D-10999 Berlin | E-MAIL: oo@oopen.de
# install_update_dovecot.conf
#
dovecot_from_address: "o.open <oo@oopen.de>"
dovecot_reply_to: "oo@oopen.de"
webmailer_address: "https://webmail-e.oopen.de"
salutation: "O.OPEN\n
salutation: |
O.OPEN
--\n
O.OPEN | Phone: +49 30 / 290 484 91\n
Erkelenzdamm 21 | Fax: +49 30 / 290 484 99\n
D-10999 Berlin | http://oopen.de"
--
O.OPEN | Phone: +49 30 / 290 484 91
Erkelenzdamm 21 | Fax: +49 30 / 290 484 99
D-10999 Berlin | http://oopen.de
# install_upgrade_roundcube-webmail.conf
#
host_vars/file-ah.kanzlei-kiel.netz/file-ah-common.yml
+9 -11
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True
network_manage_devices: true
# Should the interfaces be reloaded after config change?
network_interface_reload: False
network_interface_reload: false
network_interface_path: /etc/network/interfaces.d
network_interface_required_packages:
@@ -45,9 +45,9 @@ network_interfaces:
# - 91.239.100.100 # anycast.censurfridns.dk
# search: warenform.de
#
#nameservers:
# nameservers:
# - 192.168.100.1
#search: kanzlei-kiel.netz
# search: kanzlei-kiel.netz
# optional bridge parameters bridge: {}
# bridge:
@@ -66,7 +66,7 @@ network_interfaces:
# inline hook scripts
pre-up:
- !!str "ip link set dev eno1np0 up" # pre-up script lines
up: [] #up script lines
up: [] # up script lines
post-up: [] # post-up script lines (alias for up)
pre-down: [] # pre-down script lines (alias for down)
down: [] # down script lines
@@ -155,7 +155,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- kanzlei-kiel.netz
@@ -165,7 +165,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -233,7 +233,6 @@ default_user:
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIItQLQ7lhBY2USF4Jcp4teF+1NydI73VeHYbQW8q4Mcw root@gw-ah'
# ---
# vars used by roles/common/tasks/cron.yml
# ---
@@ -273,7 +272,7 @@ cron_user_special_time_entries:
job: "sleep 10 ; /bin/systemctl restart systemd-resolved"
insertafter: PATH
#cron_user_special_time_entries:
# cron_user_special_time_entries:
#
# - name: "Restart DNS Cache service 'systemd-resolved'"
# special_time: reboot
@@ -281,7 +280,6 @@ cron_user_special_time_entries:
# insertafter: PATH
# ---
# vars used by roles/common/tasks/users.yml
# ---
@@ -431,7 +429,7 @@ samba_user:
- name: buchholz
groups:
- buero
- buero
- intern
- verwaltung
password: '20-buch_holz-20'
host_vars/file-blkr-alt.blkr.netz/file-blkr-alt-common.yml
+6 -7
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True
network_manage_devices: true
# Should the interfaces be reloaded after config change?
network_interface_reload: False
network_interface_reload: false
network_interface_path: /etc/network/interfaces.d
network_interface_required_packages:
@@ -44,9 +44,9 @@ network_interfaces:
# - 91.239.100.100 # anycast.censurfridns.dk
# search: warenform.de
#
#nameservers:
# nameservers:
# - 192.168.162.1
#search: blkr.netz
# search: blkr.netz
# ---
@@ -152,7 +152,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- blkr.netz
@@ -162,7 +162,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -177,7 +177,6 @@ cron_user_special_time_entries:
insertafter: PATH
# ---
# vars used by roles/common/tasks/users.yml
# ---
host_vars/file-blkr.blkr.netz/file-blkr-common.yml
+22 -23
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True
network_manage_devices: true
# Should the interfaces be reloaded after config change?
network_interface_reload: False
network_interface_reload: false
network_interface_path: /etc/network/interfaces.d
network_interface_required_packages:
@@ -44,9 +44,9 @@ network_interfaces:
# - 91.239.100.100 # anycast.censurfridns.dk
# search: warenform.de
#
#nameservers:
# nameservers:
# - 192.168.162.1
#search: blkr.netz
# search: blkr.netz
# ---
@@ -152,7 +152,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- blkr.netz
@@ -162,7 +162,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -177,7 +177,6 @@ cron_user_special_time_entries:
insertafter: PATH
# ---
# vars used by roles/common/tasks/users.yml
# ---
@@ -200,14 +199,14 @@ cron_user_special_time_entries:
# see: roles/common/tasks/vars
sudoers_file_user_aliases:
- name: MAIN_USER
entry: 'josephine, julius, julius-e, leonie, buero1, buero2, buero3, referendariat, refa, ref1, sebastian, buero-05, buero-06, lap-01'
- name: MAIN_USER
entry: 'josephine, julius, julius-e, leonie, buero1, buero2, buero3, referendariat, refa, ref1, sebastian, buero-05, buero-06, lap-01'
sudoers_file_cmnd_aliases:
- name: REBOOT
entry: '/sbin/reboot'
- name: MANAGE_SERVICE
entry: '/usr/bin/systemctl'
- name: REBOOT
entry: '/sbin/reboot'
- name: MANAGE_SERVICE
entry: '/usr/bin/systemctl'
sudoers_file_user_privileges:
@@ -249,16 +248,16 @@ nfs_server: 192.168.162.10
# Take car to increase 'fsid' in case of more than one export
#
nfs_exports:
- src: 192.168.162.10:/data/samba/shares
path: /data/samba/shares
mount_opts: users,rsize=8192,wsize=8192,hard,intr
export_opt: rw,root_squash,sync,subtree_check
export_networks:
- 192.168.162.0/24
- 10.0.192.0/24
- 10.1.192.0/24
- 192.168.63.0/24
use_fsid_option: true
- src: 192.168.162.10:/data/samba/shares
path: /data/samba/shares
mount_opts: users,rsize=8192,wsize=8192,hard,intr
export_opt: rw,root_squash,sync,subtree_check
export_networks:
- 192.168.162.0/24
- 10.0.192.0/24
- 10.1.192.0/24
- 192.168.63.0/24
use_fsid_option: true
# ---
host_vars/file-dissens.dissens.netz/file-dissens-common.yml
+24 -24
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True
network_manage_devices: true
# Should the interfaces be reloaded after config change?
network_interface_reload: False
network_interface_reload: false
network_interface_path: /etc/network/interfaces.d
network_interface_required_packages:
@@ -44,9 +44,9 @@ network_interfaces:
# - 91.239.100.100 # anycast.censurfridns.dk
# search: warenform.de
#
#nameservers:
# nameservers:
# - 192.168.132.1
#search: blkr.netz
# search: blkr.netz
# ---
@@ -130,7 +130,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- dissens.netz
@@ -140,7 +140,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -189,7 +189,7 @@ default_user:
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINj0nCdFOZm51AVCfPbZ22QROIEiboXZ7RamHvM2E9IM root@backup.warenform.de'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBZQMCGCyIvs5hoNDoTIkKvKmEbxLf+uCYI1vx//ZQYY root@o26-backup'
#extra_user:
# extra_user:
#
# - name: borg
# user_id: 1065
@@ -272,14 +272,14 @@ cron_user_special_time_entries:
# see: roles/common/tasks/vars
sudoers_file_user_aliases:
- name: MAIN_USER
entry: 'malte.taeubrich, ulla.wittenzellner, sarah.klemm, bernard.koennecke, elenor.faellgren, mario.freidank '
- name: MAIN_USER
entry: 'malte.taeubrich, ulla.wittenzellner, sarah.klemm, bernard.koennecke, elenor.faellgren, mario.freidank '
sudoers_file_cmnd_aliases:
- name: REBOOT
entry: '/sbin/reboot'
- name: MANAGE_SERVICE
entry: '/usr/bin/systemctl'
- name: REBOOT
entry: '/sbin/reboot'
- name: MANAGE_SERVICE
entry: '/usr/bin/systemctl'
sudoers_file_user_privileges:
@@ -330,16 +330,16 @@ nfs_server: 192.168.132.10
# Take car to increase 'fsid' in case of more than one export
#
nfs_exports:
- src: 192.168.132.10:/data/samba/shares
path: /data/samba/shares
mount_opts: users,rsize=8192,wsize=8192,hard,intr
export_opt: rw,root_squash,sync,subtree_check
export_networks:
- 192.168.132.0/24
- 10.0.192.0/24
- 10.1.192.0/24
- 192.168.63.0/24
use_fsid_option: true
- src: 192.168.132.10:/data/samba/shares
path: /data/samba/shares
mount_opts: users,rsize=8192,wsize=8192,hard,intr
export_opt: rw,root_squash,sync,subtree_check
export_networks:
- 192.168.132.0/24
- 10.0.192.0/24
- 10.1.192.0/24
- 192.168.63.0/24
use_fsid_option: true
# ---
@@ -534,7 +534,7 @@ base_home: /data/home
samba_homes_virusfilter: true
remove_samba_users: []
#remove_samba_users:
# remove_samba_users:
# - name: sebastian.scheele
# - name: rositsa.mahdi
# - name: laura.sasse
host_vars/file-ebs.ebs.netz/file-ebs-common.yml
+18 -21
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True
network_manage_devices: true
# Should the interfaces be reloaded after config change?
network_interface_reload: False
network_interface_reload: false
network_interface_path: /etc/network/interfaces.d
network_interface_required_packages:
@@ -44,9 +44,9 @@ network_interfaces:
# - 91.239.100.100 # anycast.censurfridns.dk
# search: warenform.de
#
#nameservers:
# nameservers:
# - 192.168.182.1
#search: ebs.netz
# search: ebs.netz
# optional bridge parameters bridge: {}
# bridge:
@@ -65,7 +65,7 @@ network_interfaces:
# inline hook scripts
pre-up:
- !!str "ip link set dev eno1 up" # pre-up script lines
up: [] #up script lines
up: [] # up script lines
post-up: [] # post-up script lines (alias for up)
pre-down: [] # pre-down script lines (alias for down)
down: [] # down script lines
@@ -161,7 +161,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- ebs.netz
@@ -171,7 +171,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 172.16.182.254
- 172.16.182.254
# ---
@@ -247,7 +247,6 @@ cron_user_special_time_entries:
insertafter: PATH
# ---
# vars used by roles/common/tasks/users.yml
# ---
@@ -293,17 +292,16 @@ nfs_server: 192.168.182.10
# Take car to increase 'fsid' in case of more than one export
#
nfs_exports:
- src: 192.168.182.10:/data/samba/shares
path: /data/samba/shares
mount_opts: users,rsize=8192,wsize=8192,hard,intr
export_opt: rw,root_squash,sync,subtree_check
export_networks:
- 192.168.182.0/24
- 10.0.192.0/24
- 10.1.192.0/24
- 192.168.63.0/24
use_fsid_option: true
- src: 192.168.182.10:/data/samba/shares
path: /data/samba/shares
mount_opts: users,rsize=8192,wsize=8192,hard,intr
export_opt: rw,root_squash,sync,subtree_check
export_networks:
- 192.168.182.0/24
- 10.0.192.0/24
- 10.1.192.0/24
- 192.168.63.0/24
use_fsid_option: true
# ---
@@ -318,7 +316,7 @@ samba_workgroup: EBS
samba_netbios_name: FILE-EBS
#samba_server_min_protocol: !!str NT1
# samba_server_min_protocol: !!str NT1
samba_groups:
@@ -557,7 +555,6 @@ samba_shares:
vfs_object_recycle: false
# ==============================
host_vars/file-fhxb.fhxb.netz/file-fhxb-common.yml
+49 -52
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True
network_manage_devices: true
# Should the interfaces be reloaded after config change?
network_interface_reload: False
network_interface_reload: false
network_interface_path: /etc/network/interfaces.d
network_interface_required_packages:
@@ -44,9 +44,9 @@ network_interfaces:
# - 91.239.100.100 # anycast.censurfridns.dk
# search: warenform.de
#
#nameservers:
# nameservers:
# - 192.168.192.1
#search: fhxb.netz
# search: fhxb.netz
# ---
@@ -131,7 +131,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- fhxb.netz
@@ -141,7 +141,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 172.16.192.254
- 172.16.192.254
# ---
@@ -156,7 +156,6 @@ cron_user_special_time_entries:
insertafter: PATH
# ---
# vars used by roles/common/tasks/users.yml
# ---
@@ -202,28 +201,27 @@ nfs_server: 192.168.192.10
# Take car to increase 'fsid' in case of more than one export
#
nfs_exports:
- src: 192.168.192.10:/data/home
path: /data/home
mount_opts: users,rsize=8192,wsize=8192,hard,intr
export_opt: rw,root_squash,sync,subtree_check
export_networks:
- 192.168.192.0/23
- 10.0.192.0/24
- 10.1.192.0/24
- 192.168.63.0/24
use_fsid_option: true
- src: 192.168.192.10:/data/samba/shares
path: /data/samba/shares
mount_opts: users,rsize=8192,wsize=8192,hard,intr
export_opt: rw,root_squash,sync,subtree_check
export_networks:
- 192.168.192.0/23
- 10.0.192.0/24
- 10.1.192.0/24
- 192.168.63.0/24
use_fsid_option: true
- src: 192.168.192.10:/data/home
path: /data/home
mount_opts: users,rsize=8192,wsize=8192,hard,intr
export_opt: rw,root_squash,sync,subtree_check
export_networks:
- 192.168.192.0/23
- 10.0.192.0/24
- 10.1.192.0/24
- 192.168.63.0/24
use_fsid_option: true
- src: 192.168.192.10:/data/samba/shares
path: /data/samba/shares
mount_opts: users,rsize=8192,wsize=8192,hard,intr
export_opt: rw,root_squash,sync,subtree_check
export_networks:
- 192.168.192.0/23
- 10.0.192.0/24
- 10.1.192.0/24
- 192.168.63.0/24
use_fsid_option: true
# ---
@@ -285,7 +283,7 @@ samba_groups:
group_id: 1480
- name: vermittlung
group_id: 1490
- name: altlasten
group_id: 1510
@@ -358,7 +356,7 @@ samba_user:
password: '5hE-7n.JRQ9Y'
# Archiv01
- name : a.rchiv01
- name: a.rchiv01
groups:
- archiv
- ausstellungen
@@ -371,7 +369,7 @@ samba_user:
password: '45pS2X-rim.e'
# Archiv02
- name : a.rchiv02
- name: a.rchiv02
groups:
- archiv
- ausstellungen
@@ -384,7 +382,7 @@ samba_user:
password: '7gqKY/7-nh3Q'
# Astrid Schiemann
- name : a.schiemann
- name: a.schiemann
groups:
- archiv
- ausstellungen
@@ -408,7 +406,7 @@ samba_user:
password: 'G.u3r.tJ6Qkh'
# Babara Schaller
- name : b.schaller
- name: b.schaller
groups:
- archiv
- ausstellungen
@@ -421,7 +419,7 @@ samba_user:
password: 'ufPmZ.L/63yJ'
# Ellen Thieleman
- name : e.thieleman
- name: e.thieleman
groups:
- ausstellungen
- buero
@@ -430,14 +428,14 @@ samba_user:
password: 'MFS79-tzWA/c'
# Erika Hausotter
- name : e.hausotter
- name: e.hausotter
groups:
- archiv
- team
password: 'A/pY4-9VvUdo'
# Fabian Bovens
- name : f.bovens
- name: f.bovens
groups:
- archiv
- ausstellungen
@@ -449,7 +447,7 @@ samba_user:
password: 'z/Cw3.IzP2xn'
# Florian Helm
- name : f.helm
- name: f.helm
groups:
- altlasten
- archiv
@@ -475,7 +473,7 @@ samba_user:
password: 'z2FE..fUh4fx'
# Frauke Erdmann
- name : f.erdmann
- name: f.erdmann
groups:
- archiv
- ausstellungen
@@ -488,7 +486,7 @@ samba_user:
password: 'P/yV5N9rxA-Y'
# Gerhard Grosche
- name : g.grosche
- name: g.grosche
groups:
- archiv
- ausstellungen
@@ -500,7 +498,7 @@ samba_user:
password: '6/H-EgRqP9-T'
# Heike Müller
- name : h.mueller
- name: h.mueller
groups:
- administration
- buero
@@ -508,7 +506,7 @@ samba_user:
password: 'VT7/n5hHy-Av'
# Jana König
- name : j.koenig
- name: j.koenig
groups:
- administration
- archiv
@@ -532,7 +530,7 @@ samba_user:
password: 'fE6.2K/HpnuS'
# Jorinde Splettstößer
- name : j.splettstoesser
- name: j.splettstoesser
groups:
- administration
- archiv
@@ -557,7 +555,7 @@ samba_user:
password: '2/octHEm/g5H'
# Natalie Bayer
- name : n.bayer
- name: n.bayer
groups:
- administration
- altlasten
@@ -584,7 +582,7 @@ samba_user:
password: 'AI/.44Jt6rhY'
# Natalie Maier
- name : n.maier
- name: n.maier
groups:
- administration
- altlasten
@@ -611,7 +609,7 @@ samba_user:
password: 'kI25L.pfQI/q'
# Norbert Schropp
- name : n.schropp
- name: n.schropp
groups:
- archiv
- ausstellungen
@@ -623,7 +621,7 @@ samba_user:
password: 'rK/puJ2.7sb4'
# Praktikum 01
- name : p.raktikum01
- name: p.raktikum01
groups:
- ausstellungen
- buero
@@ -634,7 +632,7 @@ samba_user:
password: '2IN.R5HIq-ig'
# Praktikum 02
- name : p.raktikum02
- name: p.raktikum02
groups:
- ausstellungen
- buero
@@ -645,7 +643,7 @@ samba_user:
password: 'NnRYo5-d6i/n'
# Volo 01
- name : v.olo01
- name: v.olo01
groups:
- archiv
- ausstellungen
@@ -665,7 +663,7 @@ samba_user:
password: 'A/pY4-9VvUdo'
# Volo 02
- name : v.olo02
- name: v.olo02
groups:
- archiv
- ausstellungen
@@ -686,7 +684,7 @@ samba_user:
password: 'sp29q-Yn-6PY'
# Volo 03
- name : v.olo03
- name: v.olo03
groups:
- archiv
- ausstellungen
@@ -716,7 +714,7 @@ samba_homes_virusfilter: true
# - name: name1
# - name: name2
#
#remove_samba_users: []
# remove_samba_users: []
remove_samba_users:
- name: evren
@@ -963,7 +961,6 @@ samba_shares:
recycle_path: '@Recycle'
# ==============================
host_vars/file-fm.fm.netz/file-fm-common.yml
+24 -24
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True
network_manage_devices: true
# Should the interfaces be reloaded after config change?
network_interface_reload: False
network_interface_reload: false
network_interface_path: /etc/network/interfaces.d
network_interface_required_packages:
@@ -44,9 +44,9 @@ network_interfaces:
# - 91.239.100.100 # anycast.censurfridns.dk
# search: warenform.de
#
#nameservers:
# nameservers:
# - 192.168.222.1
#search: blkr.netz
# search: blkr.netz
# ---
@@ -130,7 +130,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- fm.netz
@@ -140,7 +140,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -203,7 +203,7 @@ default_user:
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHUvk8+UduCcBbQO1YxXSU8SaGIl8x+TBmIFmPb9JQu8 root@gw-fm'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN0ibOee8TvYlrEzKno5J6h3ZQs79i0wPElqYvQxAymK root@file-fm'
#extra_user:
# extra_user:
#
# - name: borg
# user_id: 1065
@@ -296,14 +296,14 @@ cron_user_special_time_entries:
# see: roles/common/tasks/vars
sudoers_file_user_aliases:
- name: MAIN_USER
entry: 'sysadm'
- name: MAIN_USER
entry: 'sysadm'
sudoers_file_cmnd_aliases:
- name: REBOOT
entry: '/sbin/reboot'
- name: MANAGE_SERVICE
entry: '/usr/bin/systemctl'
- name: REBOOT
entry: '/sbin/reboot'
- name: MANAGE_SERVICE
entry: '/usr/bin/systemctl'
sudoers_file_user_privileges:
@@ -354,16 +354,16 @@ nfs_server: 192.168.222.10
# Take car to increase 'fsid' in case of more than one export
#
nfs_exports:
- src: 192.168.222.10:/data/samba/shares
path: /data/samba/shares
mount_opts: users,rsize=8192,wsize=8192,hard,intr
export_opt: rw,root_squash,sync,subtree_check
export_networks:
- 192.168.222.0/24
- 10.0.222.0/24
- 10.1.222.0/24
- 192.168.63.0/24
use_fsid_option: true
- src: 192.168.222.10:/data/samba/shares
path: /data/samba/shares
mount_opts: users,rsize=8192,wsize=8192,hard,intr
export_opt: rw,root_squash,sync,subtree_check
export_networks:
- 192.168.222.0/24
- 10.0.222.0/24
- 10.1.222.0/24
- 192.168.63.0/24
use_fsid_option: true
# ---
@@ -480,7 +480,7 @@ samba_homes_virusfilter: true
# - name: name2
#
remove_samba_users: []
#remove_samba_users:
# remove_samba_users:
# - name: elenor.faellgrem
# - name: maiken.schiele
host_vars/file-ipa.local.netz/file-ipa-common.yml
+1 -2
View File
@@ -66,14 +66,13 @@ install_compiler_pkgs: true
# ---
#copy_template_files: []
# copy_template_files: []
#
# - name: mailsystem_install_amavis.conf
# src_path: usr/local/src/mailsystem/conf/install_amavis.conf.j2
# dest_path: /usr/local/src/mailsystem/conf/install_amavis.conf
# ---
# vars used by roles/common/tasks/config_files_mailsystem_scripts.yml
# ---
host_vars/file-kb.anw-kb.netz/file-kb-common.yml
+2 -3
View File
@@ -87,7 +87,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- anw-km.netz
@@ -97,7 +97,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 172.16.122.254
- 172.16.122.254
# ---
@@ -112,7 +112,6 @@ cron_user_special_time_entries:
insertafter: PATH
# ---
# vars used by roles/common/tasks/users.yml
# ---
host_vars/file-km-alt.anw-km.netz/file-km-alt-common.yml
+8 -11
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True
network_manage_devices: true
# Should the interfaces be reloaded after config change?
network_interface_reload: False
network_interface_reload: false
network_interface_path: /etc/network/interfaces.d
network_interface_required_packages:
@@ -62,7 +62,7 @@ network_interfaces:
# inline hook scripts
pre-up:
- !!str "ip link set dev enp97s0 up" # pre-up script lines
up: [] #up script lines
up: [] # up script lines
post-up: [] # post-up script lines (alias for up)
pre-down: [] # pre-down script lines (alias for down)
down: [] # down script lines
@@ -151,7 +151,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- anw-km.netz
@@ -161,7 +161,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 172.16.122.254
- 172.16.122.254
# ---
@@ -214,7 +214,6 @@ cron_user_entries:
job: /root/bin/monitoring/check_ntpsec_service.sh
# ---
# vars used by roles/common/tasks/users.yml
# ---
@@ -273,7 +272,7 @@ samba_groups:
group_id: 1120
- name: wildvang
group_id: 1130
- name: eibelshaeuser
- name: eibelshaeuser
group_id: 1140
- name: stahmann
group_id: 1150
@@ -287,7 +286,6 @@ samba_groups:
group_id: 1190
samba_user:
- name: advoware
@@ -591,7 +589,6 @@ samba_user:
password: 'uJ5gF/m53p.P'
- name: aphex2
groups:
- alle
@@ -767,8 +764,8 @@ remove_samba_users:
- name: gerhard
- name: laura
#remove_samba_users: []
#remove_samba_users:
# remove_samba_users: []
# remove_samba_users:
# - name: evren
samba_shares:
host_vars/file-km.anw-km.netz/file-km-common.yml
+6 -7
View File
@@ -4,10 +4,10 @@
# ---
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True
network_manage_devices: true
# Should the interfaces be reloaded after config change?
network_interface_reload: False
network_interface_reload: false
network_interface_path: /etc/network/interfaces.d
network_interface_required_packages:
@@ -58,7 +58,7 @@ network_interfaces:
# inline hook scripts
pre-up:
- !!str "ip link set dev eno1np0 up" # pre-up script lines
up: [] #up script lines
up: [] # up script lines
post-up: [] # post-up script lines (alias for up)
pre-down: [] # pre-down script lines (alias for down)
down: [] # down script lines
@@ -148,7 +148,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- anw-km.netz
@@ -630,7 +630,6 @@ samba_user:
password: "uJ5gF/m53p.P"
- name: aphex2
groups:
- alle
@@ -806,8 +805,8 @@ remove_samba_users:
- name: gerhard
- name: laura
#remove_samba_users: []
#remove_samba_users:
# remove_samba_users: []
# remove_samba_users:
# - name: evren
samba_shares:
host_vars/formbricks-nd.oopen.de/formbricks-nd-common.yml
+12 -14
View File
@@ -46,8 +46,8 @@ systemd_resolved: true
# IPv6: 2606:4700:4700::1111
# sekundäre DNS-Adresse
# IPv4: 1.0.0.1
# IPv6: 2606:4700:4700::1001
#
# IPv6: 2606:4700:4700::1001
#
# Google (USA) Public DNS - Großartige Kombination aus Geschwindigkeit und Sicherheit
# primäre DNS-Adresse
# IPv4: 8.8.8.8
@@ -58,20 +58,20 @@ systemd_resolved: true
#
# Quad9 (CH) - Blockiert mühelos schädliche Seiten und verhindert Phishing-Betrug
# primäre DNS-Adresse
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# sekundäre DNS-Adresse
# IPv4: 149.112.112.112
# IPv6: 2620:fe::9
#
# OpenNIC - https://www.opennic.org/
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 194.36.144.87 - ns29.de
# IPv6: 2a00:f826:8:2::195 - ns31.de
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
# IPv4: 5.1.66.255
# IPv6: 2001:678:e68:f000::
# Servername für DNS-over-TLS: dot.ffmuc.net
@@ -87,10 +87,10 @@ resolved_nameserver:
# search domains
#
# If there are more than one search domains, then specify them here in the order in which
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- oopen.de
@@ -100,7 +100,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -132,7 +132,6 @@ cron_user_entries:
job: /root/bin/monitoring/check_ssh.sh
# ---
# vars used by roles/common/tasks/users.yml
# ---
@@ -197,4 +196,3 @@ git_firewall_repository:
root_user:
name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/g.mx.oopen.de/g.mx-common.yml
+18 -54
View File
@@ -43,8 +43,8 @@ systemd_resolved: true
# IPv6: 2606:4700:4700::1111
# sekundäre DNS-Adresse
# IPv4: 1.0.0.1
# IPv6: 2606:4700:4700::1001
#
# IPv6: 2606:4700:4700::1001
#
# Google (USA) Public DNS - Großartige Kombination aus Geschwindigkeit und Sicherheit
# primäre DNS-Adresse
# IPv4: 8.8.8.8
@@ -55,20 +55,20 @@ systemd_resolved: true
#
# Quad9 (CH) - Blockiert mühelos schädliche Seiten und verhindert Phishing-Betrug
# primäre DNS-Adresse
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# sekundäre DNS-Adresse
# IPv4: 149.112.112.112
# IPv6: 2620:fe::9
#
# OpenNIC - https://www.opennic.org/
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 194.36.144.87 - ns29.de
# IPv6: 2a00:f826:8:2::195 - ns31.de
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
# IPv4: 5.1.66.255
# IPv6: 2001:678:e68:f000::
# Servername für DNS-over-TLS: dot.ffmuc.net
@@ -81,10 +81,10 @@ resolved_nameserver:
# search domains
#
# If there are more than one search domains, then specify them here in the order in which
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- oopen.de
@@ -94,25 +94,25 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
# vars used by roles/common/tasks/users.yml
# ---
#insert_root_ssh_keypair: true
# insert_root_ssh_keypair: true
#
#root_ssh_keypair:
# root_ssh_keypair:
# - name: id-rsa-dehydrated
# priv_key_src: b.mx/root/.ssh/b.mx-id_rsa-dehydrated
# priv_key_src: g.mx.oopen.de/root/.ssh/b.mx-id_rsa-dehydrated
# priv_key_dest: /root/.ssh/id_rsa-dehydrated
# pub_key_src: b.mx/root/.ssh/b.mx-id_rsa-dehydrated.pub
# pub_key_src: g.mx.oopen.de/root/.ssh/b.mx-id_rsa-dehydrated.pub
# pub_key_dest: /root/.ssh/id_rsa-dehydrated.pub
# - name: id-rsa-opendkim
# priv_key_src: b.mx/root/.ssh/b.mx-id_rsa-opendkim
# priv_key_src: g.mx.oopen.de/root/.ssh/b.mx-id_rsa-opendkim
# priv_key_dest: /root/.ssh/id_rsa-opendkim
# pub_key_src: b.mx/root/.ssh/b.mx-id_rsa-opendkim.pub
# pub_key_src: g.mx.oopen.de/root/.ssh/b.mx-id_rsa-opendkim.pub
# pub_key_dest: /root/.ssh/id_rsa-opendkim.pub
@@ -149,42 +149,6 @@ resolved_fallback_nameserver:
# vars used by roles/common/tasks/copy_files.yml
# ---
copy_plain_files:
# /root/bin/postfix
#
- name: postfix_create_opendkim_key.conf
src_path: g.mx/root/bin/postfix/conf/create_opendkim_key.conf
dest_path: /root/bin/postfix/conf/create_opendkim_key.conf
- name: postfix_whitelist_mb_sigs.conf
src_path: g.mx/root/bin/postfix/conf/whitelist_mb_sigs.conf
dest_path: /root/bin/postfix/conf/whitelist_mb_sigs.conf
copy_plain_files_postfix_host_specific:
- name: relay_domains
src_path: g.mx/etc/postfix/relay_domains
dest_path: /etc/postfix/relay_domains
copy_plain_files_postfwd_host_specific:
# Postfix Firewall postfwd
#
- name: postfwd.wl-nets
src_path: g.mx/etc/postfix/postfwd.wl-nets
dest_path: /etc/postfix/postfwd.wl-nets
copy_template_files: []
#
# - name: mailsystem_install_amavis.conf
# src_path: usr/local/src/mailsystem/conf/install_amavis.conf.j2
# dest_path: /usr/local/src/mailsystem/conf/install_amavis.conf
# ---
# vars used by roles/common/tasks/config_files_mailsystem_scripts.yml
host_vars/ga-al-gw.oopen.de/ga-al-gw-common.yml
+18 -20
View File
@@ -5,10 +5,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True
network_manage_devices: true
# Should the interfaces be reloaded after config change?
network_interface_reload: False
network_interface_reload: false
network_interface_path: /etc/network/interfaces.d
network_interface_required_packages:
@@ -28,10 +28,10 @@ network_interfaces:
address: 172.16.10.1
netmask: 24
gateway: 172.16.10.254
#nameservers:
# nameservers:
# - 192.168.10.1
# - 192.168.10.3
#search: ga.netz
# search: ga.netz
- device: eth2
@@ -90,7 +90,7 @@ network_interfaces:
family: inet
method: static
#hwaddress: 0c:c4:7a:7d:51:46
# hwaddress: 0c:c4:7a:7d:51:46
description:
address: 10.221.15.254
netmask: 20
@@ -185,8 +185,8 @@ network_interfaces:
- /sbin/ip route add 192.168.11.0/24 via 172.16.111.254
- /sbin/ip route add 192.168.78.0/24 via 172.16.111.254
# User Networks Campus
#- /sbin/ip route add 192.168.72.0/24 via 172.16.111.254
#- /sbin/ip route add 192.168.73.0/24 via 172.16.111.254
# - /sbin/ip route add 192.168.72.0/24 via 172.16.111.254
# - /sbin/ip route add 192.168.73.0/24 via 172.16.111.254
# User Network Novalishaus
- /sbin/ip route add 192.168.81.0/24 via 172.16.111.254
# User Network Georgshaus
@@ -202,7 +202,7 @@ network_interfaces:
# WLAN privat Novalishaus
- /sbin/ip route add 10.31.0.0/20 via 172.16.111.254
# Management Netork Campus
#- /sbin/ip route add 10.72.1.0/24 via 172.16.111.254
# - /sbin/ip route add 10.72.1.0/24 via 172.16.111.254
# WLan Router Stockhausen
- /sbin/ip route add 10.112.1.0/24 via 172.16.111.254
# WLan Netz
@@ -329,7 +329,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- ga.netz
@@ -340,7 +340,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 192.168.11.1
- 192.168.11.1
# ---
@@ -482,30 +482,29 @@ bind9_gateway_acl:
- 192.168.10.2
bind9_gateway_listen_on_v6:
- none
- none
bind9_gateway_listen_on:
- any
#bind9_gateway_allow_transfer: {}
# bind9_gateway_allow_transfer: {}
bind9_gateway_allow_transfer:
- none
- none
bind9_transfer_source: !!str "192.168.10.1"
bind9_transfer_source: !!str "192.168.10.1"
bind9_notify_source: !!str "192.168.10.1"
#bind9_gateway_allow_query: {}
# bind9_gateway_allow_query: {}
bind9_gateway_allow_query:
- local-net
#bind9_gateway_allow_query_cache: {}
# bind9_gateway_allow_query_cache: {}
bind9_gateway_allow_query_cache:
- local-net
bind9_gateway_recursion: !!str "yes"
#bind9_gateway_allow_recursion: {}
bind9_gateway_recursion: !!str "yes"
# bind9_gateway_allow_recursion: {}
bind9_gateway_allow_recursion:
- local-net
@@ -529,4 +528,3 @@ git_firewall_repository:
root_user:
name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/ga-al-kvm2.ga.netz/ga-al-kvm2-common.yml
-1
View File
@@ -123,7 +123,6 @@ sshd_permit_root_login: !!str "prohibit-password"
# ---
# ==============================
host_vars/ga-al-kvm3.ga.netz/ga-al-kvm3-common.yml
-1
View File
@@ -123,7 +123,6 @@ sshd_permit_root_login: !!str "prohibit-password"
# ---
# ==============================
host_vars/ga-al-relay.ga.netz/ga-al-relay-common.yml
+11 -14
View File
@@ -133,7 +133,7 @@ systemd_resolved: true
# Servername für DNS-over-TLS: dot.ffmuc.net
# für iOS 14+: DoT-Server-Konfiguration (unsigniert, vom PrHdb)
resolved_nameserver:
- 192.168.10.1
- 192.168.10.1
- 192.168.10.3
# search domains
@@ -141,7 +141,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- ga.netz
@@ -233,30 +233,29 @@ bind9_gateway_acl:
- 192.168.10.2
bind9_gateway_listen_on_v6:
- none
- none
bind9_gateway_listen_on:
- any
#bind9_gateway_allow_transfer: {}
# bind9_gateway_allow_transfer: {}
bind9_gateway_allow_transfer:
- none
- none
bind9_transfer_source: !!str "192.168.10.2"
bind9_transfer_source: !!str "192.168.10.2"
bind9_notify_source: !!str "192.168.10.2"
#bind9_gateway_allow_query: {}
# bind9_gateway_allow_query: {}
bind9_gateway_allow_query:
- local-net
#bind9_gateway_allow_query_cache: {}
# bind9_gateway_allow_query_cache: {}
bind9_gateway_allow_query_cache:
- local-net
bind9_gateway_recursion: !!str "yes"
#bind9_gateway_allow_recursion: {}
bind9_gateway_recursion: !!str "yes"
# bind9_gateway_allow_recursion: {}
bind9_gateway_allow_recursion:
- local-net
@@ -287,21 +286,19 @@ copy_template_files: []
# dest_path: /usr/local/src/mailsystem/conf/install_amavis.conf
# ---
# vars used by roles/common/tasks/config_files_mailsystem_scripts.yml
# ---
hostname: ga-al-relay.ga.netz
ipv4_address: 192.168.10.2
#ipv6_address:
# ipv6_address:
admin_email: it@gemeinschaft-altenschlirf.org
is_relay_host: !!str "false"
sasl_auth_enable: !!str "yes"
template_files_mailsystem_script:
- name: mailsystem_install_postfix_advanced.conf
host_vars/ga-campus-gw-temp.ga.netz/ga-campus-gw-temp-common.yml
+15 -18
View File
@@ -5,10 +5,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True
network_manage_devices: true
# Should the interfaces be reloaded after config change?
network_interface_reload: False
network_interface_reload: false
network_interface_path: /etc/network/interfaces.d
network_interface_required_packages:
@@ -28,10 +28,10 @@ network_interfaces:
address: 172.16.72.1
netmask: 24
gateway: 172.16.72.254
#nameservers:
# nameservers:
# - 192.168.81.1
# - 172.16.81.254
#search: ga.netz ga.intra
# search: ga.netz ga.intra
- device: eno2
headline: eno2 - Uplink Lehrer-und Schülerdatenbank (LUSD)
@@ -45,7 +45,6 @@ network_interfaces:
- /sbin/ip route add 10.9.131.0/24 via 192.168.100.253
- device: eno3
family: inet
method: manual
@@ -76,7 +75,7 @@ network_interfaces:
family: inet
method: manual
post-up:
# VLAN 20 - LAN 2 Campus including UniFi Accesspoints
# VLAN 20 - LAN 2 Campus including UniFi Accesspoints
- /sbin/ip link add link eno4 name eno4.20 type vlan id 20
- device: eno4.20
@@ -109,7 +108,6 @@ network_interfaces:
netmask: 24
# ---
# vars used by roles/ansible_dependencies
# ---
@@ -197,7 +195,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- campus.netz
@@ -208,7 +206,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -346,28 +344,28 @@ bind9_gateway_acl:
- 192.168.10.2
bind9_gateway_listen_on_v6:
- none
- none
bind9_gateway_listen_on:
- any
#bind9_gateway_allow_transfer: {}
# bind9_gateway_allow_transfer: {}
bind9_gateway_allow_transfer:
- none
- none
bind9_transfer_source: !!str "192.168.81.1"
bind9_transfer_source: !!str "192.168.81.1"
bind9_notify_source: !!str "192.168.81.1"
#bind9_gateway_allow_query: {}
# bind9_gateway_allow_query: {}
bind9_gateway_allow_query:
- local-net
#bind9_gateway_allow_query_cache: {}
# bind9_gateway_allow_query_cache: {}
bind9_gateway_allow_query_cache:
- local-net
bind9_gateway_recursion: !!str "yes"
#bind9_gateway_allow_recursion: {}
bind9_gateway_recursion: !!str "yes"
# bind9_gateway_allow_recursion: {}
bind9_gateway_allow_recursion:
- local-net
@@ -391,4 +389,3 @@ git_firewall_repository:
root_user:
name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/ga-gh-gw.oopen.de/ga-gh-gw-common.yml
+14 -15
View File
@@ -5,10 +5,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True
network_manage_devices: true
# Should the interfaces be reloaded after config change?
network_interface_reload: False
network_interface_reload: false
network_interface_path: /etc/network/interfaces.d
network_interface_required_packages:
@@ -31,7 +31,7 @@ network_interfaces:
- device: eno2
headline: eno2 - LAN
headline: eno2 - LAN
auto: true
family: inet
method: static
@@ -132,7 +132,7 @@ cron_user_entries:
job: /root/bin/admin-stuff/speedtest.sh
#cron_user_special_time_entries: []
# cron_user_special_time_entries: []
cron_user_special_time_entries:
- name: "Restart NTP service 'ntpsec'"
@@ -208,7 +208,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- ga.netz
@@ -219,7 +219,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -359,28 +359,28 @@ bind9_gateway_acl:
- 192.168.10.2
bind9_gateway_listen_on_v6:
- none
- none
bind9_gateway_listen_on:
- any
#bind9_gateway_allow_transfer: {}
# bind9_gateway_allow_transfer: {}
bind9_gateway_allow_transfer:
- none
- none
bind9_transfer_source: !!str "192.168.85.1"
bind9_transfer_source: !!str "192.168.85.1"
bind9_notify_source: !!str "192.168.85.1"
#bind9_gateway_allow_query: {}
# bind9_gateway_allow_query: {}
bind9_gateway_allow_query:
- local-net
#bind9_gateway_allow_query_cache: {}
# bind9_gateway_allow_query_cache: {}
bind9_gateway_allow_query_cache:
- local-net
bind9_gateway_recursion: !!str "yes"
#bind9_gateway_allow_recursion: {}
bind9_gateway_recursion: !!str "yes"
# bind9_gateway_allow_recursion: {}
bind9_gateway_allow_recursion:
- local-net
@@ -404,4 +404,3 @@ git_firewall_repository:
root_user:
name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/ga-nh-gw.oopen.de/ga-nh-gw-common.yml
+16 -17
View File
@@ -5,10 +5,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True
network_manage_devices: true
# Should the interfaces be reloaded after config change?
network_interface_reload: False
network_interface_reload: false
network_interface_path: /etc/network/interfaces.d
network_interface_required_packages:
@@ -28,10 +28,10 @@ network_interfaces:
address: 172.16.80.1
netmask: 24
gateway: 172.16.80.254
#nameservers:
# nameservers:
# - 192.168.81.1
# - 172.16.81.254
#search: ga.netz ga.intra
# search: ga.netz ga.intra
- device: eno2
@@ -45,7 +45,7 @@ network_interfaces:
- device: eno5
headline: eno5 - LAN
headline: eno5 - LAN
auto: true
family: inet
method: static
@@ -136,7 +136,7 @@ cron_user_entries:
job: /root/bin/manage-gw-config/copy_gateway-config.sh GA-NH
#cron_user_special_time_entries: []
# cron_user_special_time_entries: []
cron_user_special_time_entries:
- name: "Restart NTP service 'ntpsec'"
@@ -212,7 +212,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- ga.netz
@@ -223,7 +223,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -363,28 +363,28 @@ bind9_gateway_acl:
- 192.168.10.2
bind9_gateway_listen_on_v6:
- none
- none
bind9_gateway_listen_on:
- any
#bind9_gateway_allow_transfer: {}
# bind9_gateway_allow_transfer: {}
bind9_gateway_allow_transfer:
- none
- none
bind9_transfer_source: !!str "192.168.81.1"
bind9_transfer_source: !!str "192.168.81.1"
bind9_notify_source: !!str "192.168.81.1"
#bind9_gateway_allow_query: {}
# bind9_gateway_allow_query: {}
bind9_gateway_allow_query:
- local-net
#bind9_gateway_allow_query_cache: {}
# bind9_gateway_allow_query_cache: {}
bind9_gateway_allow_query_cache:
- local-net
bind9_gateway_recursion: !!str "yes"
#bind9_gateway_allow_recursion: {}
bind9_gateway_recursion: !!str "yes"
# bind9_gateway_allow_recursion: {}
bind9_gateway_allow_recursion:
- local-net
@@ -408,4 +408,3 @@ git_firewall_repository:
root_user:
name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/ga-st-gw-ersatz.ga.netz/ga-st-gw-ersatz-common.yml
+13 -15
View File
@@ -79,8 +79,8 @@ systemd_resolved: true
# Servername für DNS-over-TLS: dot.ffmuc.net
# für iOS 14+: DoT-Server-Konfiguration (unsigniert, vom PrHdb)
resolved_nameserver:
- 192.168.11.1
- 192.168.10.1
- 192.168.11.1
- 192.168.10.1
- 192.168.11.3
# search domains
@@ -88,7 +88,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- ga.netz
@@ -99,8 +99,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 127.0.0.1
- 127.0.0.1
# ---
@@ -240,28 +239,28 @@ bind9_gateway_acl:
- 192.168.10.2
bind9_gateway_listen_on_v6:
- none
- none
bind9_gateway_listen_on:
- any
#bind9_gateway_allow_transfer: {}
# bind9_gateway_allow_transfer: {}
bind9_gateway_allow_transfer:
- internaldns
- internaldns
#bind9_transfer_source: !!str "192.168.11.1"
#bind9_notify_source: !!str "192.168.11.1"
# bind9_transfer_source: !!str "192.168.11.1"
# bind9_notify_source: !!str "192.168.11.1"
#bind9_gateway_allow_query: {}
# bind9_gateway_allow_query: {}
bind9_gateway_allow_query:
- local-net
#bind9_gateway_allow_query_cache: {}
# bind9_gateway_allow_query_cache: {}
bind9_gateway_allow_query_cache:
- local-net
bind9_gateway_recursion: !!str "yes"
#bind9_gateway_allow_recursion: {}
bind9_gateway_recursion: !!str "yes"
# bind9_gateway_allow_recursion: {}
bind9_gateway_allow_recursion:
- local-net
@@ -285,4 +284,3 @@ git_firewall_repository:
root_user:
name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/ga-st-gw.ga.netz/ga-st-gw-common.yml
+17 -19
View File
@@ -5,10 +5,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True
network_manage_devices: true
# Should the interfaces be reloaded after config change?
network_interface_reload: False
network_interface_reload: false
network_interface_path: /etc/network/interfaces.d
network_interface_required_packages:
@@ -26,7 +26,7 @@ network_interfaces:
family: inet
method: static
address: 192.168.11.18
#gateway: 192.168.11.254
# gateway: 192.168.11.254
netmask: 24
- device: lan4
@@ -81,7 +81,7 @@ network_interfaces:
netmask: 24
- device: lan6
- device: lan6
headline: lan6 - holds VLAN 211 device for Network Telefons Stockhausen
auto: false
family: inet
@@ -136,7 +136,7 @@ network_interfaces:
# ----------
# Note: Install the 'ifenslave' package, necessary to enable bonding:
#
#
# apt-get install ifenslave
# ----------
- device: bond0
@@ -186,7 +186,7 @@ network_interfaces:
# ----------
# Note: Install the 'ifenslave' package, necessary to enable bonding:
#
#
# apt-get install ifenslave
# ----------
- device: sfp0
@@ -200,7 +200,7 @@ network_interfaces:
- 192.168.11.1
- 192.168.10.3
search: ga.netz ga.intra
#bond:
# bond:
# slaves: lan3 lan11
# # Mode 4 (802.3ad)
# #
@@ -382,7 +382,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- ga.netz
@@ -393,7 +393,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 192.168.10.1
- 192.168.10.1
# ---
@@ -451,7 +451,6 @@ cron_user_special_time_entries:
insertafter: PATH
# ---
# vars used by roles/common/tasks/users.yml
# ---
@@ -587,28 +586,28 @@ bind9_gateway_acl:
- 192.168.10.2
bind9_gateway_listen_on_v6:
- none
- none
bind9_gateway_listen_on:
- any
#bind9_gateway_allow_transfer: {}
# bind9_gateway_allow_transfer: {}
bind9_gateway_allow_transfer:
- internaldns
- internaldns
bind9_transfer_source: !!str "192.168.11.1"
bind9_transfer_source: !!str "192.168.11.1"
bind9_notify_source: !!str "192.168.11.1"
#bind9_gateway_allow_query: {}
# bind9_gateway_allow_query: {}
bind9_gateway_allow_query:
- local-net
#bind9_gateway_allow_query_cache: {}
# bind9_gateway_allow_query_cache: {}
bind9_gateway_allow_query_cache:
- local-net
bind9_gateway_recursion: !!str "yes"
#bind9_gateway_allow_recursion: {}
bind9_gateway_recursion: !!str "yes"
# bind9_gateway_allow_recursion: {}
bind9_gateway_allow_recursion:
- local-net
@@ -632,4 +631,3 @@ git_firewall_repository:
root_user:
name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/ga-st-kvm1.ga.netz/ga-st-kvm1-common.yml
-1
View File
@@ -123,7 +123,6 @@ sshd_permit_root_login: !!str "prohibit-password"
# ---
# ==============================
host_vars/ga-st-kvm5.ga.netz/ga-st-kvm5-common.yml
+2 -3
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True
network_manage_devices: true
# Should the interfaces be reloaded after config change?
network_interface_reload: False
network_interface_reload: false
network_interface_path: /etc/network/interfaces.d
network_interface_required_packages:
@@ -195,7 +195,6 @@ sshd_permit_root_login: !!str "prohibit-password"
# ---
# ==============================
host_vars/ga-st-lxc1.ga.netz/ga-st-lxc1-common.yml
+10 -11
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True
network_manage_devices: true
# Should the interfaces be reloaded after config change?
network_interface_reload: False
network_interface_reload: false
network_interface_path: /etc/network/interfaces.d
network_interface_required_packages:
@@ -38,7 +38,7 @@ network_interfaces:
# - "91.239.100.100" # anycast.censurfridns.dk
# optional additional subnets/ips subnets: []
# subnets:
# subnets:
# - '192.168.123.0/24'
# - '192.168.124.11/32'
@@ -66,7 +66,7 @@ network_interfaces:
- device: eno2
# use only once per device (for the first device entry)
headline: eno2 - LAN Interface VLAN definition
headline: eno2 - LAN Interface VLAN definition
auto: true
family: inet
method: manual
@@ -95,10 +95,10 @@ network_interfaces:
# nameservers:
# - "194.150.168.168" # dns.as250.net
# - "91.239.100.100" # anycast.censurfridns.dk
#nameservers:
# nameservers:
# - 192.168.11.1
# - 192.168.10.3
#search: ga.netz ga.intra
# search: ga.netz ga.intra
# ---
@@ -176,8 +176,8 @@ systemd_resolved: true
# Servername für DNS-over-TLS: dot.ffmuc.net
# für iOS 14+: DoT-Server-Konfiguration (unsigniert, vom PrHdb)
resolved_nameserver:
- 192.168.11.1
- 192.168.10.1
- 192.168.11.1
- 192.168.10.1
- 192.168.11.3
# search domains
@@ -185,7 +185,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- ga.netz
@@ -196,7 +196,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -311,4 +311,3 @@ sudo_users:
# ---
root_user: {}
host_vars/ga-st-mail.ga.netz/ga-st-mail-common.yml
+8 -9
View File
@@ -86,7 +86,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- ga.netz
@@ -97,7 +97,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 192.168.11.1
- 192.168.11.1
# ---
@@ -242,21 +242,20 @@ copy_plain_files_postfwd_host_specific:
dest_path: /etc/postfix/postfwd.cf
#copy_template_files: []
# copy_template_files: []
#
# - name: mailsystem_install_amavis.conf
# src_path: usr/local/src/mailsystem/conf/install_amavis.conf.j2
# dest_path: /usr/local/src/mailsystem/conf/install_amavis.conf
# ---
# vars used by roles/common/tasks/config_files_mailsystem_scripts.yml
# ---
hostname: mx.gemeinschaft-altenschlirf.de
ipv4_address: 192.168.11.2
#ipv6_address:
# ipv6_address:
admin_email: it@gemeinschaft-altenschlirf.org
is_relay_host: !!str "false"
@@ -270,7 +269,7 @@ db_in_use: !!str "true"
postfix_db_type: PostgreSQL
postfix_db_name: postfix
postfix_db_user: postfix
#postfix_db_host:
# postfix_db_host:
postfix_db_pass: R_wuKauoTE7+AJg9
# install_amavis.conf
@@ -279,7 +278,7 @@ mp_receipt_number: 106015125438
si_authorisation_signature: abb4ec6b194639f3d123154f1b971843a3b8751d8c1bcdc7d07ed6db26621b11bca0e23d2a42b60aef3f7b7803a1466a964d90c7b1e82d67c7680c8f46b59a4e
# install_postfixadmin.conf
#
#
website_name_postfixadmin: adm.gemeinschaft-altenschlirf.de
email_welcome_message: "\n
@@ -317,10 +316,10 @@ autoreply_hostname: autoreply.gemeinschaft-altenschlirf.de
roundcube_db_type: pgsql
roundcube_db_name: roundcubemail
roundcube_db_user: roundcube
#roundcube_db_host:
# roundcube_db_host:
roundcube_db_pass: 'K3TbMmTfnCXdj4vz'
#roundcube_acl_plugin: true
# roundcube_acl_plugin: true
roundcube_product_name: Gemeinschaft Altenschlirf - Webmailer
roundcube_support_url: https://www.gemeinschaft-altenschlirf.de
host_vars/ga-st-mm.ga.netz/ga-st-mm-common.yml
+2 -3
View File
@@ -88,7 +88,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- ga.netz
@@ -99,7 +99,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 192.168.11.3
- 192.168.11.3
# ---
@@ -209,7 +209,6 @@ sudo_users:
# ---
# ---
# vars used by roles/common/tasks/config_files_mailsystem_scripts.yml
# ---
host_vars/ga-st-services.ga.netz/ga-st-services-common.yml
+4 -5
View File
@@ -86,7 +86,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- ga.netz
@@ -97,7 +97,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 192.168.10.1
- 192.168.10.1
- 192.168.10.3
@@ -195,19 +195,18 @@ sudo_users:
# Postfix Firewall postfwd
#
#- name: postfwd.wl-user
# - name: postfwd.wl-user
# src_path: ga-st-mail/etc/postfix/postfwd.wl-user
# dest_path: /etc/postfix/postfwd.wl-user
#copy_template_files: []
# copy_template_files: []
#
# - name: mailsystem_install_amavis.conf
# src_path: usr/local/src/mailsystem/conf/install_amavis.conf.j2
# dest_path: /usr/local/src/mailsystem/conf/install_amavis.conf
# ---
# vars used by roles/common/tasks/config_files_mailsystem_scripts.yml
# ---
host_vars/git.oopen.de/git-common.yml
+12 -13
View File
@@ -41,8 +41,8 @@ systemd_resolved: true
# IPv6: 2606:4700:4700::1111
# sekundäre DNS-Adresse
# IPv4: 1.0.0.1
# IPv6: 2606:4700:4700::1001
#
# IPv6: 2606:4700:4700::1001
#
# Google (USA) Public DNS - Großartige Kombination aus Geschwindigkeit und Sicherheit
# primäre DNS-Adresse
# IPv4: 8.8.8.8
@@ -53,20 +53,20 @@ systemd_resolved: true
#
# Quad9 (CH) - Blockiert mühelos schädliche Seiten und verhindert Phishing-Betrug
# primäre DNS-Adresse
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# sekundäre DNS-Adresse
# IPv4: 149.112.112.112
# IPv6: 2620:fe::9
#
# OpenNIC - https://www.opennic.org/
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 194.36.144.87 - ns29.de
# IPv6: 2a00:f826:8:2::195 - ns31.de
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
# IPv4: 5.1.66.255
# IPv6: 2001:678:e68:f000::
# Servername für DNS-over-TLS: dot.ffmuc.net
@@ -80,10 +80,10 @@ resolved_nameserver:
# search domains
#
# If there are more than one search domains, then specify them here in the order in which
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- oopen.de
@@ -93,7 +93,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -145,4 +145,3 @@ git_firewall_repository:
root_user:
name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/git.warenform.de/git-common.yml
-2
View File
@@ -83,7 +83,6 @@ resolved_nameserver:
- 2a01:4f8:0:1::add:9999
# ---
# vars used by roles/common/tasks/users.yml
# ---
@@ -133,4 +132,3 @@ git_firewall_repository:
root_user:
name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/gitea.so36.net/gitea-common.yml
+10 -10
View File
@@ -1,4 +1,5 @@
---
# yamllint disable rule:line-length
# ---
# vars used by role firewall
@@ -30,8 +31,8 @@ sshd_ports:
- 1036
sshd_listen_address:
- '::'
- '0.0.0.0'
- '::'
- '0.0.0.0'
sshd_host_keys:
- /etc/ssh/ssh_host_rsa_key
@@ -68,7 +69,7 @@ sshd_allowed_users:
# - diffie-hellman-group-exchange-sha256
# - diffie-hellman-group14-sha1
#
#sshd_kexalgorithms: {}
# sshd_kexalgorithms: {}
sshd_kexalgorithms:
- curve25519-sha256
- curve25519-sha256@libssh.org
@@ -83,7 +84,7 @@ sshd_kexalgorithms:
# - chacha20-poly1305@openssh.com
# - aes256-gcm@openssh.com
# - aes256-ctr
#sshd_ciphers: {}
# sshd_ciphers: {}
sshd_ciphers:
- chacha20-poly1305@openssh.com
- aes256-gcm@openssh.com
@@ -92,13 +93,13 @@ sshd_ciphers:
- aes192-ctr
- aes128-ctr
#sshd_macs: {}
# sshd_macs: {}
sshd_macs:
- hmac-sha2-256-etm@openssh.com
- hmac-sha2-512-etm@openssh.com
- umac-128-etm@openssh.com
#sshd_hostkeyalgorithms: {}
# sshd_hostkeyalgorithms: {}
sshd_hostkeyalgorithms:
- ssh-ed25519
- ssh-ed25519-cert-v01@openssh.com
@@ -107,12 +108,12 @@ sshd_hostkeyalgorithms:
- rsa-sha2-256-cert-v01@openssh.com
- rsa-sha2-512-cert-v01@openssh.com
#sshd_kexalgorithms:
# sshd_kexalgorithms:
# - curve25519-sha256@libssh.org
# - diffie-hellman-group-exchange-sha256
# - diffie-hellman-group14-sha1
#sshd_ciphers:
# sshd_ciphers:
# - chacha20-poly1305@openssh.com
# - aes256-gcm@openssh.com
# - aes256-ctr
@@ -220,7 +221,7 @@ default_user:
password: $6$GntX81EP$O1GEmQF.BbOQfTMMw/m/BDKSXmANVpqmz0nyzw4O4R2/iK9huGOAjT/2eq8FVdMghvNOvdwrWtwohO.Mg4V9n.
shell: /bin/bash
ssh_keys:
- 'ssh-rsa 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 chris@luna'
- 'ssh-rsa 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 chris@luna'
sudo_users:
- alex
@@ -272,4 +273,3 @@ git_firewall_repository:
root_user:
name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/gw-123.oopen.de/gw-123-common.yml
+2 -3
View File
@@ -98,7 +98,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- 123.netz
@@ -108,7 +108,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -219,4 +219,3 @@ git_firewall_repository:
root_user:
name: root
password: $y$j9T$IVBTpn.OrI6YiQ9q3fA8b1$Y1bmID5yXJbKfoLFt1VmQs6LezeTj5/1M9ppZBD2Pn4
host_vars/gw-ah.oopen.de/gw-ah-common.yml
+10 -11
View File
@@ -93,7 +93,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- kanzlei-kiel.netz
@@ -103,7 +103,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -227,28 +227,28 @@ bind9_gateway_acl:
- 192.168.100.30
bind9_gateway_listen_on_v6:
- none
- none
bind9_gateway_listen_on:
- any
#bind9_gateway_allow_transfer: {}
# bind9_gateway_allow_transfer: {}
bind9_gateway_allow_transfer:
- internaldns
- internaldns
bind9_transfer_source: !!str "192.168.100.1"
bind9_transfer_source: !!str "192.168.100.1"
bind9_notify_source: !!str "192.168.100.1"
#bind9_gateway_allow_query: {}
# bind9_gateway_allow_query: {}
bind9_gateway_allow_query:
- local-net
#bind9_gateway_allow_query_cache: {}
# bind9_gateway_allow_query_cache: {}
bind9_gateway_allow_query_cache:
- local-net
bind9_gateway_recursion: !!str "yes"
#bind9_gateway_allow_recursion: {}
bind9_gateway_recursion: !!str "yes"
# bind9_gateway_allow_recursion: {}
bind9_gateway_allow_recursion:
- local-net
@@ -271,4 +271,3 @@ git_firewall_repository:
root_user:
name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/gw-ak.oopen.de/gw-ak-common.yml
+7 -8
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True
network_manage_devices: true
# Should the interfaces be reloaded after config change?
network_interface_reload: False
network_interface_reload: false
network_interface_path: /etc/network/interfaces.d
network_interface_required_packages:
@@ -29,14 +29,14 @@ network_interfaces:
address: 172.16.0.1
netmask: 24
gateway: 172.16.0.254
#nameservers:
# nameservers:
# - 127.0.0.1
# - 192.168.0.1
#search: ebs.netz kanzlei-kiel.netz elster.netz
# search: ebs.netz kanzlei-kiel.netz elster.netz
- device: eno2
headline: eno2 - WLAN
headline: eno2 - WLAN
auto: true
family: inet
method: static
@@ -143,7 +143,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- ak.netz
@@ -153,7 +153,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -244,4 +244,3 @@ bind9_gateway_listen_on:
root_user:
name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/gw-akb.oopen.de/gw-akb-common.yml
+3 -4
View File
@@ -26,7 +26,7 @@ copy_additional_plain_files_sysctl:
# vars used by roles/common/tasks/sshd.yml
# ---
#sshd_hostkeyalgorithms:
# sshd_hostkeyalgorithms:
# - ssh-ed25519
# - ssh-ed25519-cert-v01@openssh.com
# - rsa-sha2-256
@@ -98,7 +98,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- akb.netz
@@ -108,7 +108,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -214,4 +214,3 @@ bind9_gateway_listen_on:
root_user:
name: root
password: $y$j9T$IVBTpn.OrI6YiQ9q3fA8b1$Y1bmID5yXJbKfoLFt1VmQs6LezeTj5/1M9ppZBD2Pn4
host_vars/gw-b3.oopen.de/gw-b3-common.yml
+2 -5
View File
@@ -98,7 +98,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- b3-bornim.netz
@@ -108,7 +108,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -166,8 +166,6 @@ cron_user_special_time_entries:
insertafter: PATH
# ---
# vars used by roles/common/tasks/users.yml
# ---
@@ -204,4 +202,3 @@ git_firewall_repository:
root_user:
name: root
password: $y$j9T$IVBTpn.OrI6YiQ9q3fA8b1$Y1bmID5yXJbKfoLFt1VmQs6LezeTj5/1M9ppZBD2Pn4
host_vars/gw-blkr.oopen.de/gw-blkr-common.yml
+9 -10
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True
network_manage_devices: true
# Should the interfaces be reloaded after config change?
network_interface_reload: False
network_interface_reload: false
network_interface_path: /etc/network/interfaces.d
network_interface_required_packages:
@@ -29,14 +29,14 @@ network_interfaces:
address: 172.16.162.1
netmask: 24
gateway: 172.16.162.254
#nameservers:
# nameservers:
# - 127.0.0.1
# - 192.168.162.1
#search: blkr.netz
# search: blkr.netz
- device: eno2
headline: eno2 - LAN
headline: eno2 - LAN
auto: true
family: inet
method: static
@@ -54,7 +54,7 @@ network_interfaces:
- device: eno3
headline: eno3 - WLAN
headline: eno3 - WLAN
auto: true
family: inet
method: static
@@ -123,7 +123,7 @@ cron_user_entries:
hour: 0-8
job: /root/bin/admin-stuff/speedtest.sh
#cron_user_special_time_entries: []
# cron_user_special_time_entries: []
cron_user_special_time_entries:
- name: "Restart NTP service 'ntpsec'"
@@ -208,7 +208,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- blkr.netz
@@ -218,7 +218,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -287,4 +287,3 @@ git_firewall_repository:
root_user:
name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/gw-campus.oopen.de/gw-campus-common.yml
+16 -19
View File
@@ -5,10 +5,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True
network_manage_devices: true
# Should the interfaces be reloaded after config change?
network_interface_reload: False
network_interface_reload: false
network_interface_path: /etc/network/interfaces.d
network_interface_required_packages:
@@ -28,10 +28,10 @@ network_interfaces:
address: 172.16.72.1
netmask: 24
gateway: 172.16.72.254
#nameservers:
# nameservers:
# - 192.168.81.1
# - 172.16.81.254
#search: ga.netz ga.intra
# search: ga.netz ga.intra
- device: eno2
headline: eno2 - Uplink Lehrer-und Schülerdatenbank (LUSD)
@@ -45,7 +45,6 @@ network_interfaces:
- /sbin/ip route add 10.9.131.0/24 via 192.168.100.253
- device: eno3
family: inet
method: manual
@@ -76,7 +75,7 @@ network_interfaces:
family: inet
method: manual
post-up:
# VLAN 20 - LAN 2 Campus including UniFi Accesspoints
# VLAN 20 - LAN 2 Campus including UniFi Accesspoints
- /sbin/ip link add link eno4 name eno4.20 type vlan id 20
- device: eno4.20
@@ -105,11 +104,10 @@ network_interfaces:
family: inet
method: static
address: 192.168.11.72
#gateway: 192.168.11.254
# gateway: 192.168.11.254
netmask: 24
# ---
# vars used by roles/ansible_dependencies
# ---
@@ -247,7 +245,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- campus.netz
@@ -258,7 +256,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -396,28 +394,28 @@ bind9_gateway_acl:
- 192.168.10.2
bind9_gateway_listen_on_v6:
- none
- none
bind9_gateway_listen_on:
- any
#bind9_gateway_allow_transfer: {}
# bind9_gateway_allow_transfer: {}
bind9_gateway_allow_transfer:
- none
- none
bind9_transfer_source: !!str "192.168.81.1"
bind9_transfer_source: !!str "192.168.81.1"
bind9_notify_source: !!str "192.168.81.1"
#bind9_gateway_allow_query: {}
# bind9_gateway_allow_query: {}
bind9_gateway_allow_query:
- local-net
#bind9_gateway_allow_query_cache: {}
# bind9_gateway_allow_query_cache: {}
bind9_gateway_allow_query_cache:
- local-net
bind9_gateway_recursion: !!str "yes"
#bind9_gateway_allow_recursion: {}
bind9_gateway_recursion: !!str "yes"
# bind9_gateway_allow_recursion: {}
bind9_gateway_allow_recursion:
- local-net
@@ -441,4 +439,3 @@ git_firewall_repository:
root_user:
name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/gw-ckubu.local.netz/gw-ckubu-common.yml
+2 -4
View File
@@ -89,7 +89,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- local.netz
@@ -99,7 +99,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -149,7 +149,6 @@ cron_user_entries:
job: /root/bin/admin-stuff/speedtest.sh
cron_user_special_time_entries:
- name: "Restart NTP service 'ntpsec'"
@@ -214,4 +213,3 @@ git_firewall_repository:
root_user:
name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/gw-d11.oopen.de/gw-d11-common.yml
+2 -3
View File
@@ -98,7 +98,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- wf.netz
@@ -108,7 +108,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -215,4 +215,3 @@ bind9_gateway_listen_on:
root_user:
name: root
password: $y$j9T$IVBTpn.OrI6YiQ9q3fA8b1$Y1bmID5yXJbKfoLFt1VmQs6LezeTj5/1M9ppZBD2Pn4
host_vars/gw-dissens.oopen.de/gw-dissens-common.yml
+12 -13
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True
network_manage_devices: true
# Should the interfaces be reloaded after config change?
network_interface_reload: False
network_interface_reload: false
network_interface_path: /etc/network/interfaces.d
network_interface_required_packages:
@@ -32,7 +32,7 @@ network_interfaces:
- device: eno2
headline: eno2 - LAN
headline: eno2 - LAN
auto: true
family: inet
method: static
@@ -186,7 +186,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- dissens.netz
@@ -196,7 +196,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -314,26 +314,26 @@ bind9_gateway_acl:
- ::1/128
bind9_gateway_listen_on_v6:
- none
- none
bind9_gateway_listen_on:
- any
#bind9_gateway_allow_transfer: {}
# bind9_gateway_allow_transfer: {}
bind9_transfer_source: !!str "192.168.132.1"
bind9_transfer_source: !!str "192.168.132.1"
bind9_notify_source: !!str "192.168.132.1"
#bind9_gateway_allow_query: {}
# bind9_gateway_allow_query: {}
bind9_gateway_allow_query:
- local-net
#bind9_gateway_allow_query_cache: {}
# bind9_gateway_allow_query_cache: {}
bind9_gateway_allow_query_cache:
- local-net
bind9_gateway_recursion: !!str "yes"
#bind9_gateway_allow_recursion: {}
bind9_gateway_recursion: !!str "yes"
# bind9_gateway_allow_recursion: {}
bind9_gateway_allow_recursion:
- local-net
@@ -356,4 +356,3 @@ git_firewall_repository:
root_user:
name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/gw-ebs.oopen.de/gw-ebs-common.yml
+13 -14
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True
network_manage_devices: true
# Should the interfaces be reloaded after config change?
network_interface_reload: False
network_interface_reload: false
network_interface_path: /etc/network/interfaces.d
network_interface_required_packages:
@@ -32,7 +32,7 @@ network_interfaces:
- device: eno2
headline: eno2 - LAN
headline: eno2 - LAN
auto: true
family: inet
method: static
@@ -139,7 +139,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- ebs.netz
@@ -149,7 +149,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -275,28 +275,28 @@ bind9_gateway_acl:
- 192.168.182.30
bind9_gateway_listen_on_v6:
- none
- none
bind9_gateway_listen_on:
- any
#bind9_gateway_allow_transfer: {}
# bind9_gateway_allow_transfer: {}
bind9_gateway_allow_transfer:
- internaldns
- internaldns
bind9_transfer_source: !!str "192.168.182.1"
bind9_transfer_source: !!str "192.168.182.1"
bind9_notify_source: !!str "192.168.182.1"
#bind9_gateway_allow_query: {}
# bind9_gateway_allow_query: {}
bind9_gateway_allow_query:
- local-net
#bind9_gateway_allow_query_cache: {}
# bind9_gateway_allow_query_cache: {}
bind9_gateway_allow_query_cache:
- local-net
bind9_gateway_recursion: !!str "yes"
#bind9_gateway_allow_recursion: {}
bind9_gateway_recursion: !!str "yes"
# bind9_gateway_allow_recursion: {}
bind9_gateway_allow_recursion:
- local-net
@@ -319,4 +319,3 @@ git_firewall_repository:
root_user:
name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/gw-elster.oopen.de/gw-elster-common.yml
+17 -19
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True
network_manage_devices: true
# Should the interfaces be reloaded after config change?
network_interface_reload: False
network_interface_reload: false
network_interface_path: /etc/network/interfaces.d
network_interface_required_packages:
@@ -29,14 +29,14 @@ network_interfaces:
address: 172.16.202.1
netmask: 24
gateway: 172.16.202.254
#nameservers:
# nameservers:
# - 127.0.0.1
# - 192.168.202.1
#search: elster.netz ebs.netz
# search: elster.netz ebs.netz
- device: eno2
headline: eno2 - LAN
headline: eno2 - LAN
auto: true
family: inet
method: static
@@ -54,7 +54,7 @@ network_interfaces:
- device: eno3
headline: eno3 - WLAN
headline: eno3 - WLAN
auto: true
family: inet
method: static
@@ -124,7 +124,7 @@ cron_user_entries:
job: /root/bin/admin-stuff/speedtest.sh
#cron_user_special_time_entries: []
# cron_user_special_time_entries: []
cron_user_special_time_entries:
- name: "Restart NTP service 'ntpsec'"
@@ -209,7 +209,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- elster.netz
@@ -219,8 +219,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -286,28 +285,28 @@ bind9_gateway_acl:
- 192.168.182.1
bind9_gateway_listen_on_v6:
- none
- none
bind9_gateway_listen_on:
- any
#bind9_gateway_allow_transfer: {}
# bind9_gateway_allow_transfer: {}
bind9_gateway_allow_transfer:
- internaldns
- internaldns
bind9_transfer_source: !!str "192.168.202.1"
bind9_transfer_source: !!str "192.168.202.1"
bind9_notify_source: !!str "192.168.202.1"
#bind9_gateway_allow_query: {}
# bind9_gateway_allow_query: {}
bind9_gateway_allow_query:
- local-net
#bind9_gateway_allow_query_cache: {}
# bind9_gateway_allow_query_cache: {}
bind9_gateway_allow_query_cache:
- local-net
bind9_gateway_recursion: !!str "yes"
#bind9_gateway_allow_recursion: {}
bind9_gateway_recursion: !!str "yes"
# bind9_gateway_allow_recursion: {}
bind9_gateway_allow_recursion:
- local-net
@@ -331,4 +330,3 @@ git_firewall_repository:
root_user:
name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/gw-fhxb.oopen.de/gw-fhxb-common.yml
+7 -8
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True
network_manage_devices: true
# Should the interfaces be reloaded after config change?
network_interface_reload: False
network_interface_reload: false
network_interface_path: /etc/network/interfaces.d
network_interface_required_packages:
@@ -29,14 +29,14 @@ network_interfaces:
address: 172.16.192.1
netmask: 24
gateway: 172.16.192.254
#nameservers:
# nameservers:
# - 127.0.0.1
# - 192.168.192.1
#search: ebs.netz kanzlei-kiel.netz elster.netz
# search: ebs.netz kanzlei-kiel.netz elster.netz
- device: eno2
headline: eno2 - LAN
headline: eno2 - LAN
auto: true
family: inet
method: static
@@ -143,7 +143,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- fhxb.netz
@@ -153,7 +153,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -274,4 +274,3 @@ git_firewall_repository:
root_user:
name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/gw-flr.oopen.de/gw-flr-common.yml
+9 -10
View File
@@ -5,10 +5,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True
network_manage_devices: true
# Should the interfaces be reloaded after config change?
network_interface_reload: False
network_interface_reload: false
network_interface_path: /etc/network/interfaces.d
network_interface_required_packages:
@@ -28,14 +28,14 @@ network_interfaces:
address: 172.16.102.1
netmask: 24
gateway: 172.16.102.254
#nameservers:
# nameservers:
# - 127.0.0.1
# - 172.16.102.254
#search: flr.netz
# search: flr.netz
- device: eno2
headline: eno2 - LAN
headline: eno2 - LAN
auto: true
family: inet
method: static
@@ -53,7 +53,7 @@ network_interfaces:
- device: eno3
headline: eno3 - WLAN
headline: eno3 - WLAN
auto: true
family: inet
method: static
@@ -122,7 +122,7 @@ cron_user_entries:
job: /root/bin/admin-stuff/speedtest.sh
#cron_user_special_time_entries: []
# cron_user_special_time_entries: []
cron_user_special_time_entries:
- name: "Restart NTP service 'ntpsec'"
@@ -207,7 +207,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- flr.netz
@@ -217,7 +217,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -286,4 +286,3 @@ git_firewall_repository:
root_user:
name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/gw-fm.oopen.de/gw-fm-common.yml
+5 -6
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True
network_manage_devices: true
# Should the interfaces be reloaded after config change?
network_interface_reload: False
network_interface_reload: false
network_interface_path: /etc/network/interfaces.d
network_interface_required_packages:
@@ -32,7 +32,7 @@ network_interfaces:
- device: eno2
headline: eno2 - LAN
headline: eno2 - LAN
auto: true
family: inet
method: static
@@ -160,7 +160,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- fm.netz
@@ -170,7 +170,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 172.16.222.254
- 172.16.222.254
- 194.150.168.168
@@ -295,4 +295,3 @@ git_firewall_repository:
root_user:
name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/gw-irights.oopen.de/gw-irights-common.yml
+7 -8
View File
@@ -5,10 +5,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True
network_manage_devices: true
# Should the interfaces be reloaded after config change?
network_interface_reload: False
network_interface_reload: false
network_interface_path: /etc/network/interfaces.d
network_interface_required_packages:
@@ -31,7 +31,7 @@ network_interfaces:
- device: eno3
headline: eno3 - LAN
headline: eno3 - LAN
auto: true
family: inet
method: static
@@ -49,7 +49,7 @@ network_interfaces:
- device: eno4
headline: eno4 - Uplink DSL via mobile data (Fritzbox 6850 5G)
headline: eno4 - Uplink DSL via mobile data (Fritzbox 6850 5G)
auto: true
family: inet
method: static
@@ -119,7 +119,7 @@ cron_user_entries:
job: /root/bin/admin-stuff/speedtest.sh
#cron_user_special_time_entries: []
# cron_user_special_time_entries: []
cron_user_special_time_entries:
- name: "Restart NTP service 'ntpsec'"
@@ -204,7 +204,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- oopen.de
@@ -214,7 +214,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -282,4 +282,3 @@ git_firewall_repository:
root_user:
name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/gw-kb.oopen.de/gw-kb-common.yml
+6 -7
View File
@@ -5,10 +5,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True
network_manage_devices: true
# Should the interfaces be reloaded after config change?
network_interface_reload: False
network_interface_reload: false
network_interface_path: /etc/network/interfaces.d
network_interface_required_packages:
@@ -31,7 +31,7 @@ network_interfaces:
- device: eno2
headline: eno2 - LAN
headline: eno2 - LAN
auto: true
family: inet
method: static
@@ -100,7 +100,7 @@ cron_user_entries:
job: /root/bin/manage-gw-config/copy_gateway-config.sh ANW-KB
#cron_user_special_time_entries: []
# cron_user_special_time_entries: []
cron_user_special_time_entries:
- name: "Check if Postfix Service is running at boot time"
@@ -195,7 +195,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- anw-kb.netz
@@ -205,7 +205,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -274,4 +274,3 @@ git_firewall_repository:
root_user:
name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/gw-km.oopen.de/gw-km-common.yml
+6 -7
View File
@@ -5,10 +5,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True
network_manage_devices: true
# Should the interfaces be reloaded after config change?
network_interface_reload: False
network_interface_reload: false
network_interface_path: /etc/network/interfaces.d
network_interface_required_packages:
@@ -31,7 +31,7 @@ network_interfaces:
- device: eno5
headline: eno5 - LAN
headline: eno5 - LAN
auto: true
family: inet
method: static
@@ -109,7 +109,7 @@ cron_user_entries:
hour: 0-8
job: /root/bin/admin-stuff/speedtest.sh
#cron_user_special_time_entries: []
# cron_user_special_time_entries: []
cron_user_special_time_entries:
- name: "Restart NTP service 'ntpsec'"
@@ -194,7 +194,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- anw-km.netz
@@ -204,7 +204,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -273,4 +273,3 @@ git_firewall_repository:
root_user:
name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/gw-mbr.oopen.de/gw-mbr-common.yml
+13 -14
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True
network_manage_devices: true
# Should the interfaces be reloaded after config change?
network_interface_reload: False
network_interface_reload: false
network_interface_path: /etc/network/interfaces.d
network_interface_required_packages:
@@ -30,7 +30,7 @@ network_interfaces:
# gateway: 172.16.112.254
- device: enp0s20f0
headline: enp0s20f0 - Uplink
headline: enp0s20f0 - Uplink
auto: true
family: inet
method: static
@@ -39,7 +39,7 @@ network_interfaces:
- device: enp0s20f1
headline: enp0s20f1 - LAN
headline: enp0s20f1 - LAN
auto: true
family: inet
method: static
@@ -207,7 +207,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- mbr-bln.netz
@@ -217,7 +217,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -335,26 +335,26 @@ bind9_gateway_acl:
- ::1/128
bind9_gateway_listen_on_v6:
- none
- none
bind9_gateway_listen_on:
- any
#bind9_gateway_allow_transfer: {}
# bind9_gateway_allow_transfer: {}
bind9_transfer_source: !!str "192.168.112.1"
bind9_transfer_source: !!str "192.168.112.1"
bind9_notify_source: !!str "192.168.112.1"
#bind9_gateway_allow_query: {}
# bind9_gateway_allow_query: {}
bind9_gateway_allow_query:
- local-net
#bind9_gateway_allow_query_cache: {}
# bind9_gateway_allow_query_cache: {}
bind9_gateway_allow_query_cache:
- local-net
bind9_gateway_recursion: !!str "yes"
#bind9_gateway_allow_recursion: {}
bind9_gateway_recursion: !!str "yes"
# bind9_gateway_allow_recursion: {}
bind9_gateway_allow_recursion:
- local-net
@@ -377,4 +377,3 @@ git_firewall_repository:
root_user:
name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/gw-opp-neu.opp.netz/gw-opp-neu-common.yml
+7 -8
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True
network_manage_devices: true
# Should the interfaces be reloaded after config change?
network_interface_reload: False
network_interface_reload: false
network_interface_path: /etc/network/interfaces.d
network_interface_required_packages:
@@ -29,14 +29,14 @@ network_interfaces:
address: 172.16.62.2
netmask: 24
gateway: 172.16.62.254
#nameservers:
# nameservers:
# - 127.0.0.1
# - 192.168.62.1
#search: ebs.netz kanzlei-kiel.netz elster.netz
# search: ebs.netz kanzlei-kiel.netz elster.netz
- device: eno2
headline: eno2 - LAN
headline: eno2 - LAN
auto: true
family: inet
method: static
@@ -143,7 +143,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- opp.netz
@@ -153,7 +153,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -233,4 +233,3 @@ git_firewall_repository:
root_user:
name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/gw-opp.oopen.de/gw-opp-common.yml
+7 -8
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True
network_manage_devices: true
# Should the interfaces be reloaded after config change?
network_interface_reload: False
network_interface_reload: false
network_interface_path: /etc/network/interfaces.d
network_interface_required_packages:
@@ -29,14 +29,14 @@ network_interfaces:
address: 172.16.62.1
netmask: 24
gateway: 172.16.62.254
#nameservers:
# nameservers:
# - 127.0.0.1
# - 192.168.62.1
#search: ebs.netz kanzlei-kiel.netz elster.netz
# search: ebs.netz kanzlei-kiel.netz elster.netz
- device: eno3
headline: eno2 - LAN
headline: eno2 - LAN
auto: true
family: inet
method: static
@@ -143,7 +143,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- opp.netz
@@ -153,7 +153,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -276,4 +276,3 @@ git_firewall_repository:
root_user:
name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/gw-replacement4.local.netz/gw-replacement4-common.yml
+2 -3
View File
@@ -98,7 +98,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- wf.netz
@@ -108,7 +108,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -172,4 +172,3 @@ bind9_gateway_listen_on:
root_user:
name: root
password: $y$j9T$IVBTpn.OrI6YiQ9q3fA8b1$Y1bmID5yXJbKfoLFt1VmQs6LezeTj5/1M9ppZBD2Pn4
host_vars/gw-replacment.oopen.de/gw-replacment-common.yml
+3 -4
View File
@@ -98,17 +98,17 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
-local.netz
- local.netz
resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -154,4 +154,3 @@ install_bind_packages: true
root_user:
name: root
password: $y$j9T$IVBTpn.OrI6YiQ9q3fA8b1$Y1bmID5yXJbKfoLFt1VmQs6LezeTj5/1M9ppZBD2Pn4
host_vars/gw-replacment2.oopen.de/gw-replacment2-common.yml
+3 -4
View File
@@ -98,17 +98,17 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
-local.netz
- local.netz
resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -154,4 +154,3 @@ install_bind_packages: true
root_user:
name: root
password: $y$j9T$IVBTpn.OrI6YiQ9q3fA8b1$Y1bmID5yXJbKfoLFt1VmQs6LezeTj5/1M9ppZBD2Pn4
host_vars/gw-replacment3.oopen.de/gw-replacment3-common.yml
+3 -4
View File
@@ -98,17 +98,17 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
-local.netz
- local.netz
resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -154,4 +154,3 @@ install_bind_packages: true
root_user:
name: root
password: $y$j9T$IVBTpn.OrI6YiQ9q3fA8b1$Y1bmID5yXJbKfoLFt1VmQs6LezeTj5/1M9ppZBD2Pn4
host_vars/gw-spr.oopen.de/gw-spr-common.yml
+2 -3
View File
@@ -98,7 +98,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- sprachenatelier.netz
@@ -108,7 +108,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -214,4 +214,3 @@ bind9_gateway_listen_on:
root_user:
name: root
password: $y$j9T$IVBTpn.OrI6YiQ9q3fA8b1$Y1bmID5yXJbKfoLFt1VmQs6LezeTj5/1M9ppZBD2Pn4
host_vars/iam-nd.oopen.de/iam-nd-common.yml
+12 -14
View File
@@ -46,8 +46,8 @@ systemd_resolved: true
# IPv6: 2606:4700:4700::1111
# sekundäre DNS-Adresse
# IPv4: 1.0.0.1
# IPv6: 2606:4700:4700::1001
#
# IPv6: 2606:4700:4700::1001
#
# Google (USA) Public DNS - Großartige Kombination aus Geschwindigkeit und Sicherheit
# primäre DNS-Adresse
# IPv4: 8.8.8.8
@@ -58,20 +58,20 @@ systemd_resolved: true
#
# Quad9 (CH) - Blockiert mühelos schädliche Seiten und verhindert Phishing-Betrug
# primäre DNS-Adresse
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# sekundäre DNS-Adresse
# IPv4: 149.112.112.112
# IPv6: 2620:fe::9
#
# OpenNIC - https://www.opennic.org/
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 194.36.144.87 - ns29.de
# IPv6: 2a00:f826:8:2::195 - ns31.de
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
# IPv4: 5.1.66.255
# IPv6: 2001:678:e68:f000::
# Servername für DNS-over-TLS: dot.ffmuc.net
@@ -87,10 +87,10 @@ resolved_nameserver:
# search domains
#
# If there are more than one search domains, then specify them here in the order in which
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- oopen.de
@@ -100,7 +100,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -157,7 +157,6 @@ cron_user_entries:
job: /var/lib/dehydrated/tools/update_ssl_directives.sh
# ---
# vars used by roles/common/tasks/users.yml
# ---
@@ -222,4 +221,3 @@ git_firewall_repository:
root_user:
name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/initiativenserver.oopen.de/initiativenserver-common.yml
+2 -4
View File
@@ -83,7 +83,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- oopen.de
@@ -93,8 +93,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -143,4 +142,3 @@ git_firewall_repository:
root_user:
name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/keycloak-nd.oopen.de/keycloak-nd-common.yml
+12 -14
View File
@@ -46,8 +46,8 @@ systemd_resolved: true
# IPv6: 2606:4700:4700::1111
# sekundäre DNS-Adresse
# IPv4: 1.0.0.1
# IPv6: 2606:4700:4700::1001
#
# IPv6: 2606:4700:4700::1001
#
# Google (USA) Public DNS - Großartige Kombination aus Geschwindigkeit und Sicherheit
# primäre DNS-Adresse
# IPv4: 8.8.8.8
@@ -58,20 +58,20 @@ systemd_resolved: true
#
# Quad9 (CH) - Blockiert mühelos schädliche Seiten und verhindert Phishing-Betrug
# primäre DNS-Adresse
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# sekundäre DNS-Adresse
# IPv4: 149.112.112.112
# IPv6: 2620:fe::9
#
# OpenNIC - https://www.opennic.org/
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 194.36.144.87 - ns29.de
# IPv6: 2a00:f826:8:2::195 - ns31.de
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
# IPv4: 5.1.66.255
# IPv6: 2001:678:e68:f000::
# Servername für DNS-over-TLS: dot.ffmuc.net
@@ -87,10 +87,10 @@ resolved_nameserver:
# search domains
#
# If there are more than one search domains, then specify them here in the order in which
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
# resolved_domains: []
resolved_domains:
- ~.
- oopen.de
@@ -100,7 +100,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
- 194.150.168.168
# ---
@@ -157,7 +157,6 @@ cron_user_entries:
job: /var/lib/dehydrated/tools/update_ssl_directives.sh
# ---
# vars used by roles/common/tasks/users.yml
# ---
@@ -222,4 +221,3 @@ git_firewall_repository:
root_user:
name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.

Some files were not shown because too many files have changed in this diff Show More