ansible/oopen-server
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

chore(ansible): clean up host_vars YAML and normalize mail text blocks

Browse Source
This commit is contained in:
Christoph
2026-07-28 21:24:03 +02:00
parent ae60fa01a5
commit 4d92340f9b
306 changed files with 2049 additions and 2484 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.vscode/settings.json
Vendored
+4 -1
View File
@@ -14,5 +14,8 @@
"ansible.ansible.path": "/home/chris/devel/git/git.oopen.de/ansible/oopen-server/.venv/bin/ansible", "ansible.ansible.path": "/home/chris/devel/git/git.oopen.de/ansible/oopen-server/.venv/bin/ansible",
"ansible.python.interpreterPath": "${workspaceFolder}/.venv/bin/python3", "ansible.python.interpreterPath": "${workspaceFolder}/.venv/bin/python3",
"ansible.validation.lint.path": "/home/chris/devel/git/git.oopen.de/ansible/oopen-server/.venv/bin/ansible-lint", "ansible.validation.lint.path": "/home/chris/devel/git/git.oopen.de/ansible/oopen-server/.venv/bin/ansible-lint",
"ansible.ansibleNavigator.path": "/home/chris/devel/git/git.oopen.de/ansible/oopen-server/.venv/bin/ansible-navigator" "ansible.ansibleNavigator.path": "/home/chris/devel/git/git.oopen.de/ansible/oopen-server/.venv/bin/ansible-navigator",
"yaml.customTags": [
"!vault scalar"
]
} }
host_vars/a.mx.oopen.de/a.mx-common.yml
+23 -69
View File
@@ -86,7 +86,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- oopen.de - oopen.de
@@ -107,14 +107,14 @@ insert_root_ssh_keypair: true
root_ssh_keypair: root_ssh_keypair:
- name: id-rsa-dehydrated - name: id-rsa-dehydrated
priv_key_src: a.mx/root/.ssh/a.mx-id_rsa-dehydrated priv_key_src: a.mx.oopen.de/root/.ssh/a.mx-id_rsa-dehydrated
priv_key_dest: /root/.ssh/id_rsa-dehydrated priv_key_dest: /root/.ssh/id_rsa-dehydrated
pub_key_src: a.mx/root/.ssh/a.mx-id_rsa-dehydrated.pub pub_key_src: a.mx.oopen.de/root/.ssh/a.mx-id_rsa-dehydrated.pub
pub_key_dest: /root/.ssh/id_rsa-dehydrated.pub pub_key_dest: /root/.ssh/id_rsa-dehydrated.pub
- name: id-rsa-opendkim - name: id-rsa-opendkim
priv_key_src: a.mx/root/.ssh/a.mx-id_rsa-opendkim priv_key_src: a.mx.oopen.de/root/.ssh/a.mx-id_rsa-opendkim
priv_key_dest: /root/.ssh/id_rsa-opendkim priv_key_dest: /root/.ssh/id_rsa-opendkim
pub_key_src: a.mx/root/.ssh/a.mx-id_rsa-opendkim.pub pub_key_src: a.mx.oopen.de/root/.ssh/a.mx-id_rsa-opendkim.pub
pub_key_dest: /root/.ssh/id_rsa-opendkim.pub pub_key_dest: /root/.ssh/id_rsa-opendkim.pub
@@ -151,53 +151,6 @@ root_ssh_keypair:
# vars used by roles/common/tasks/copy_files.yml # vars used by roles/common/tasks/copy_files.yml
# --- # ---
copy_plain_files:
# /root/bin/monitoring
#
- name: monitoring_check_cert_for_dovecot.conf
src_path: a.mx/root/bin/monitoring/conf/check_cert_for_dovecot.conf
dest_path: /root/bin/monitoring/conf/check_cert_for_dovecot.conf
# /root/bin/postfix
#
- name: postfix_create_opendkim_key.conf
src_path: a.mx/root/bin/postfix/conf/create_opendkim_key.conf
dest_path: /root/bin/postfix/conf/create_opendkim_key.conf
- name: postfix_postfix_add_mailboxes.conf
src_path: a.mx/root/bin/postfix/conf/postfix_add_mailboxes.conf
dest_path: /root/bin/postfix/conf/postfix_add_mailboxes.conf
- name: postfix_sent_userinfo_postfix.conf
src_path: a.mx/root/bin/postfix/conf/sent_userinfo_postfix.conf
dest_path: /root/bin/postfix/conf/sent_userinfo_postfix.conf
- name: postfix_whitelist_mb_sigs.conf
src_path: a.mx/root/bin/postfix/conf/whitelist_mb_sigs.conf
dest_path: /root/bin/postfix/conf/whitelist_mb_sigs.conf
copy_plain_files_postfwd_host_specific:
# Postfix Firewall postfwd
#
- name: postfwd.wl-user
src_path: a.mx/etc/postfix/postfwd.wl-user
dest_path: /etc/postfix/postfwd.wl-user
- name: postfwd.bl-recipient-exeeds-msg-size-20mb
src_path: a.mx/etc/postfix/postfwd.bl-recipient-exeeds-msg-size-20mb
dest_path: /etc/postfix/postfwd.bl-recipient-exeeds-msg-size-20mb
#copy_template_files: []
#
# - name: mailsystem_install_amavis.conf
# src_path: usr/local/src/mailsystem/conf/install_amavis.conf.j2
# dest_path: /usr/local/src/mailsystem/conf/install_amavis.conf
# --- # ---
# vars used by roles/common/tasks/config_files_mailsystem_scripts.yml # vars used by roles/common/tasks/config_files_mailsystem_scripts.yml
@@ -219,7 +172,7 @@ db_in_use: !!str "true"
postfix_db_type: PostgreSQL postfix_db_type: PostgreSQL
postfix_db_name: postfix postfix_db_name: postfix
postfix_db_user: postfix postfix_db_user: postfix
#postfix_db_host: /run/postgresql # postfix_db_host: /run/postgresql
postfix_db_pass: FKt4z55FxMZp postfix_db_pass: FKt4z55FxMZp
# install_amavis.conf # install_amavis.conf
@@ -231,30 +184,31 @@ si_authorisation_signature: abb4ec6b194639f3d123154f1b971843a3b8751d8c1bcdc7d07e
# #
website_name_postfixadmin: adm.oopen.de website_name_postfixadmin: adm.oopen.de
email_welcome_message: "\n email_welcome_message: |
Hallo,\n
Ihre/Deine neue E-Mail Adresse ist eingerichtet.\n Hallo,
O.OPEN\n Ihre/Deine neue E-Mail Adresse ist eingerichtet.
--\n O.OPEN
O.OPEN | Phone: +49 30 / 290 484 91\n
Erkelenzdamm 21 | Fax: +49 30 / 290 484 99\n --
D-10999 Berlin | E-MAIL: oo@oopen.de\n O.OPEN | Phone: +49 30 / 290 484 91
" Erkelenzdamm 21 | Fax: +49 30 / 290 484 99
D-10999 Berlin | E-MAIL: oo@oopen.de
# install_update_dovecot.conf # install_update_dovecot.conf
# #
dovecot_from_address: "o.open <oo@oopen.de>" dovecot_from_address: "o.open <oo@oopen.de>"
dovecot_reply_to: "oo@oopen.de" dovecot_reply_to: "oo@oopen.de"
webmailer_address: "https://webmail.oopen.de" webmailer_address: "https://webmail.oopen.de"
salutation: "O.OPEN\n salutation: |
O.OPEN
--\n --
O.OPEN | Phone: +49 30 / 290 484 91\n O.OPEN | Phone: +49 30 / 290 484 91
Erkelenzdamm 21 | Fax: +49 30 / 290 484 99\n Erkelenzdamm 21 | Fax: +49 30 / 290 484 99
D-10999 Berlin | http://oopen.de\n" D-10999 Berlin | http://oopen.de
# install_upgrade_roundcube-webmail.conf # install_upgrade_roundcube-webmail.conf
# #
@@ -265,7 +219,7 @@ autoreply_hostname: autoreply.oopen.de
roundcube_db_type: pgsql roundcube_db_type: pgsql
roundcube_db_name: roundcubemail roundcube_db_name: roundcubemail
roundcube_db_user: roundcube roundcube_db_user: roundcube
#roundcube_db_host: localhost # roundcube_db_host: localhost
roundcube_db_pass: '3Dsz3j5R' roundcube_db_pass: '3Dsz3j5R'
roundcube_acl_plugin: true roundcube_acl_plugin: true
@@ -281,7 +235,7 @@ autoreply_2_hostname: autoreply.oopen.de
roundcube_2_db_type: pgsql roundcube_2_db_type: pgsql
roundcube_2_db_name: roundcubemail2 roundcube_2_db_name: roundcubemail2
roundcube_2_db_user: roundcube roundcube_2_db_user: roundcube
#roundcube_2_db_host: localhost # roundcube_2_db_host: localhost
roundcube_2_db_pass: '3Dsz3j5R' roundcube_2_db_pass: '3Dsz3j5R'
roundcube2_acl_plugin: true roundcube2_acl_plugin: true
host_vars/a.mx.oopen.de/a.mx-ipt-server.yml
+1 -1
View File
@@ -42,4 +42,4 @@ fw_jitsi_dovecot_auth: true
fw_rsync_out_ips: $ext_1_ip fw_rsync_out_ips: $ext_1_ip
# --- Protection / limits # --- Protection / limits
fw_per_IP_connection_limit: 250 fw_per_IP_connection_limit: 250 # noqa: var-naming[pattern]
host_vars/a.ns.oopen.de/a.ns-common.yml
+2 -5
View File
@@ -1,4 +1,5 @@
--- ---
# yamllint disable rule:line-length
# --- # ---
# vars used by roles/ansible_dependencies # vars used by roles/ansible_dependencies
@@ -132,7 +133,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- oopen.de - oopen.de
@@ -244,13 +245,9 @@ symlink_files:
# --- # ---
# ============================== # ==============================
# --- # ---
# vars used by scripts/reset_root_passwd.yml # vars used by scripts/reset_root_passwd.yml
# --- # ---
host_vars/ak-plan.oopen.de/ak-plan-common.yml
+1 -2
View File
@@ -86,7 +86,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- oopen.de - oopen.de
@@ -139,4 +139,3 @@ resolved_fallback_nameserver:
# --- # ---
# vars used by scripts/reset_root_passwd.yml # vars used by scripts/reset_root_passwd.yml
# --- # ---
host_vars/anita.wf.netz/anita-common.yml
+2 -2
View File
@@ -1,4 +1,5 @@
--- ---
# yamllint disable rule:line-length
# --- # ---
# vars used by roles/ansible_dependencies # vars used by roles/ansible_dependencies
@@ -121,7 +122,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- wf.netz - wf.netz
@@ -290,4 +291,3 @@ samba_shares:
# --- # ---
# vars used by scripts/reset_root_passwd.yml # vars used by scripts/reset_root_passwd.yml
# --- # ---
host_vars/at-10-neu.ak.netz/at-10-neu-common.yml
+4 -5
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True network_manage_devices: true
# Should the interfaces be reloaded after config change? # Should the interfaces be reloaded after config change?
network_interface_reload: False network_interface_reload: false
network_interface_path: /etc/network/interfaces.d network_interface_path: /etc/network/interfaces.d
network_interface_required_packages: network_interface_required_packages:
@@ -120,7 +120,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- ak.local - ak.local
@@ -145,7 +145,6 @@ cron_user_special_time_entries:
insertafter: PATH insertafter: PATH
# --- # ---
# vars used by roles/common/tasks/users.yml # vars used by roles/common/tasks/users.yml
# --- # ---
@@ -279,7 +278,7 @@ samba_homes_virusfilter: true
# - name: name2 # - name: name2
# #
remove_samba_users: [] remove_samba_users: []
#remove_samba_users: # remove_samba_users:
# - name: evren # - name: evren
samba_shares: samba_shares:
host_vars/b.mx.oopen.de/b.mx-common.yml
+1 -2
View File
@@ -84,7 +84,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- oopen.de - oopen.de
@@ -189,7 +189,6 @@ copy_template_files: []
# dest_path: /usr/local/src/mailsystem/conf/install_amavis.conf # dest_path: /usr/local/src/mailsystem/conf/install_amavis.conf
# --- # ---
# vars used by roles/common/tasks/config_files_mailsystem_scripts.yml # vars used by roles/common/tasks/config_files_mailsystem_scripts.yml
# --- # ---
host_vars/b.ns.oopen.de/b.ns-common.yml
+2 -2
View File
@@ -1,4 +1,5 @@
--- ---
# yamllint disable rule:line-length
# --- # ---
# vars used by roles/ansible_dependencies # vars used by roles/ansible_dependencies
@@ -126,7 +127,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- oopen.de - oopen.de
@@ -240,4 +241,3 @@ symlink_files:
# --- # ---
# vars used by scripts/reset_root_passwd.yml # vars used by scripts/reset_root_passwd.yml
# --- # ---
host_vars/backup.oopen.de/backup-common.yml
+1 -2
View File
@@ -112,7 +112,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- oopen.de - oopen.de
@@ -410,4 +410,3 @@ git_firewall_repository:
root_user: root_user:
name: root name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq. password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/backup.warenform.de/backup-common.yml
-3
View File
@@ -188,8 +188,6 @@ cron_user_entries:
insert_ssh_keypair_backup_server: false insert_ssh_keypair_backup_server: false
default_user: default_user:
- name: chris - name: chris
@@ -308,4 +306,3 @@ git_firewall_repository:
root_user: root_user:
name: root name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq. password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/bbb-server.b3-bornim.netz/bbb-server-common.yml
+5 -6
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True network_manage_devices: true
# Should the interfaces be reloaded after config change? # Should the interfaces be reloaded after config change?
network_interface_reload: False network_interface_reload: false
network_interface_path: /etc/network/interfaces.d network_interface_path: /etc/network/interfaces.d
network_interface_required_packages: network_interface_required_packages:
@@ -44,9 +44,9 @@ network_interfaces:
# - 91.239.100.100 # anycast.censurfridns.dk # - 91.239.100.100 # anycast.censurfridns.dk
# search: warenform.de # search: warenform.de
# #
#nameservers: # nameservers:
# - 192.168.42.1 # - 192.168.42.1
#search: b3-bornim.netz # search: b3-bornim.netz
# --- # ---
@@ -131,7 +131,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- b3-bornim.netz - b3-bornim.netz
@@ -156,7 +156,6 @@ cron_user_special_time_entries:
insertafter: PATH insertafter: PATH
# --- # ---
# vars used by roles/common/tasks/users.yml # vars used by roles/common/tasks/users.yml
# --- # ---
host_vars/c.mx.oopen.de/c.mx-common.yml
+23 -67
View File
@@ -86,7 +86,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- oopen.de - oopen.de
@@ -107,19 +107,19 @@ insert_root_ssh_keypair: true
root_ssh_keypair: root_ssh_keypair:
- name: id-rsa-dehydrated - name: id-rsa-dehydrated
priv_key_src: c.mx/root/.ssh/c.mx-id_rsa-dehydrated priv_key_src: c.mx.oopen.de/root/.ssh/c.mx-id_rsa-dehydrated
priv_key_dest: /root/.ssh/id_rsa-dehydrated priv_key_dest: /root/.ssh/id_rsa-dehydrated
pub_key_src: c.mx/root/.ssh/c.mx-id_rsa-dehydrated.pub pub_key_src: c.mx.oopen.de/root/.ssh/c.mx-id_rsa-dehydrated.pub
pub_key_dest: /root/.ssh/id_rsa-dehydrated.pub pub_key_dest: /root/.ssh/id_rsa-dehydrated.pub
- name: id-rsa-opendkim - name: id-rsa-opendkim
priv_key_src: c.mx/root/.ssh/c.mx-id_rsa-opendkim priv_key_src: c.mx.oopen.de/root/.ssh/c.mx-id_rsa-opendkim
priv_key_dest: /root/.ssh/id_rsa-opendkim priv_key_dest: /root/.ssh/id_rsa-opendkim
pub_key_src: c.mx/root/.ssh/c.mx-id_rsa-opendkim.pub pub_key_src: c.mx.oopen.de/root/.ssh/c.mx-id_rsa-opendkim.pub
pub_key_dest: /root/.ssh/id_rsa-opendkim.pub pub_key_dest: /root/.ssh/id_rsa-opendkim.pub
- name: id-rsa - name: id-rsa
priv_key_src: c.mx/root/.ssh/c.mx-id_rsa priv_key_src: c.mx.oopen.de/root/.ssh/c.mx-id_rsa
priv_key_dest: /root/.ssh/id_rsa priv_key_dest: /root/.ssh/id_rsa
pub_key_src: c.mx/root/.ssh/c.mx-id_rsa.pub pub_key_src: c.mx.oopen.de/root/.ssh/c.mx-id_rsa.pub
pub_key_dest: /root/.ssh/id_rsa.pub pub_key_dest: /root/.ssh/id_rsa.pub
@@ -156,49 +156,6 @@ root_ssh_keypair:
# vars used by roles/common/tasks/copy_files.yml # vars used by roles/common/tasks/copy_files.yml
# --- # ---
copy_plain_files:
# /root/bin/monitoring
#
- name: monitoring_check_cert_for_dovecot.conf
src_path: c.mx/root/bin/monitoring/conf/check_cert_for_dovecot.conf
dest_path: /root/bin/monitoring/conf/check_cert_for_dovecot.conf
# /root/bin/postfix
#
- name: postfix_create_opendkim_key.conf
src_path: c.mx/root/bin/postfix/conf/create_opendkim_key.conf
dest_path: /root/bin/postfix/conf/create_opendkim_key.conf
- name: postfix_postfix_add_mailboxes.conf
src_path: c.mx/root/bin/postfix/conf/postfix_add_mailboxes.conf
dest_path: /root/bin/postfix/conf/postfix_add_mailboxes.conf
- name: postfix_sent_userinfo_postfix.conf
src_path: c.mx/root/bin/postfix/conf/sent_userinfo_postfix.conf
dest_path: /root/bin/postfix/conf/sent_userinfo_postfix.conf
- name: postfix_whitelist_mb_sigs.conf
src_path: c.mx/root/bin/postfix/conf/whitelist_mb_sigs.conf
dest_path: /root/bin/postfix/conf/whitelist_mb_sigs.conf
copy_plain_files_postfwd_host_specific: []
# Postfix Firewall postfwd
#
#- name: postfwd.wl-user
# src_path: c.mx/etc/postfix/postfwd.wl-user
# dest_path: /etc/postfix/postfwd.wl-user
#copy_template_files: []
#
# - name: mailsystem_install_amavis.conf
# src_path: usr/local/src/mailsystem/conf/install_amavis.conf.j2
# dest_path: /usr/local/src/mailsystem/conf/install_amavis.conf
# --- # ---
# vars used by roles/common/tasks/config_files_mailsystem_scripts.yml # vars used by roles/common/tasks/config_files_mailsystem_scripts.yml
@@ -218,7 +175,7 @@ db_in_use: !!str "true"
postfix_db_type: MySQL postfix_db_type: MySQL
postfix_db_name: postfix postfix_db_name: postfix
postfix_db_user: postfix postfix_db_user: postfix
#postfix_db_host: # postfix_db_host:
postfix_db_pass: AeB4kohyie5rahJ7 postfix_db_pass: AeB4kohyie5rahJ7
# install_amavis.conf # install_amavis.conf
@@ -230,30 +187,30 @@ si_authorisation_signature: abb4ec6b194639f3d123154f1b971843a3b8751d8c1bcdc7d07e
# #
website_name_postfixadmin: adm.initiativenserver.de website_name_postfixadmin: adm.initiativenserver.de
email_welcome_message: "\n email_welcome_message: |
Hallo,\n Hallo,
Ihre/Deine neue E-Mail Adresse ist eingerichtet.\n Ihre/Deine neue E-Mail Adresse ist eingerichtet.
Aktionsbündnis gegen Gewalt, Rechtsextremismus und Fremdenfeindlichkeit Aktionsbündnis gegen Gewalt, Rechtsextremismus und Fremdenfeindlichkeit
--\n --
Initiativenserver | phone: 0331 505824-28\n Initiativenserver | phone: 0331 505824-28
Mittelstraße 38/39 | fax: 0331 505824-29\n Mittelstraße 38/39 | fax: 0331 505824-29
14467 Potsdam | email: kontakt@initiativenserver.de\n 14467 Potsdam | email: kontakt@initiativenserver.de
"
# install_update_dovecot.conf # install_update_dovecot.conf
# #
dovecot_from_address: "Admin Initiativenserver <admin@initiativenserver.de>" dovecot_from_address: "Admin Initiativenserver <admin@initiativenserver.de>"
dovecot_reply_to: "admin@initiativenserver.de" dovecot_reply_to: "admin@initiativenserver.de"
webmailer_address: "https://webmail.initiativenserver.de" webmailer_address: "https://webmail.initiativenserver.de"
salutation: "Aktionsbündnis gegen Gewalt, Rechtsextremismus und FremdenfeindlichkeitN\n salutation: |
Aktionsbündnis gegen Gewalt, Rechtsextremismus und Fremdenfeindlichkeit
--\n --
Initiativenserver | phone: 0331 505824-28\n Initiativenserver | phone: 0331 505824-28
Mittelstraße 38/39 | fax: 0331 505824-29\n Mittelstraße 38/39 | fax: 0331 505824-29
14467 Potsdam | email: kontakt@initiativenserver.de\n" 14467 Potsdam | email: kontakt@initiativenserver.de
# install_upgrade_roundcube-webmail.conf # install_upgrade_roundcube-webmail.conf
# #
@@ -264,7 +221,7 @@ autoreply_hostname: autoreply.initiativenserver.de
roundcube_db_type: mysql roundcube_db_type: mysql
roundcube_db_name: roundcubemail roundcube_db_name: roundcubemail
roundcube_db_user: roundcube roundcube_db_user: roundcube
#roundcube_db_host: # roundcube_db_host:
roundcube_db_pass: 're6Xe8Fereejai3D' roundcube_db_pass: 're6Xe8Fereejai3D'
roundcube_acl_plugin: false roundcube_acl_plugin: false
@@ -295,4 +252,3 @@ template_files_mailsystem_script:
- name: mailsystem_install_upgrade_roundcube-webmail.conf - name: mailsystem_install_upgrade_roundcube-webmail.conf
src_path: usr/local/src/mailsystem/conf/install_upgrade_roundcube-webmail.conf.j2 src_path: usr/local/src/mailsystem/conf/install_upgrade_roundcube-webmail.conf.j2
dest_path: /usr/local/src/mailsystem/conf/install_upgrade_roundcube-webmail.conf dest_path: /usr/local/src/mailsystem/conf/install_upgrade_roundcube-webmail.conf
host_vars/cl-01.oopen.de/cl-01-common.yml
+1 -2
View File
@@ -88,7 +88,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- oopen.de - oopen.de
@@ -163,4 +163,3 @@ sudoers_file_user_privileges:
# --- # ---
# vars used by scripts/reset_root_passwd.yml # vars used by scripts/reset_root_passwd.yml
# --- # ---
host_vars/cl-02.oopen.de/cl-02-common.yml
+1 -2
View File
@@ -88,7 +88,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- oopen.de - oopen.de
@@ -150,4 +150,3 @@ sudoers_file_user_privileges:
# --- # ---
# vars used by scripts/reset_root_passwd.yml # vars used by scripts/reset_root_passwd.yml
# --- # ---
host_vars/cl-dissens.oopen.de/cl-dissens-common.yml
+1 -2
View File
@@ -86,7 +86,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- oopen.de - oopen.de
@@ -148,4 +148,3 @@ sudoers_file_user_privileges:
# --- # ---
# vars used by scripts/reset_root_passwd.yml # vars used by scripts/reset_root_passwd.yml
# --- # ---
host_vars/cl-flr.oopen.de/cl-flr-common.yml
+1 -2
View File
@@ -86,7 +86,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- oopen.de - oopen.de
@@ -148,4 +148,3 @@ sudoers_file_user_privileges:
# --- # ---
# vars used by scripts/reset_root_passwd.yml # vars used by scripts/reset_root_passwd.yml
# --- # ---
host_vars/cl-fm.oopen.de/cl-fm-common.yml
+1 -2
View File
@@ -86,7 +86,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- oopen.de - oopen.de
@@ -232,4 +232,3 @@ sudoers_file_user_privileges:
# --- # ---
# vars used by scripts/reset_root_passwd.yml # vars used by scripts/reset_root_passwd.yml
# --- # ---
host_vars/cl-irights.oopen.de/cl-irights-common.yml
+1 -2
View File
@@ -86,7 +86,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- oopen.de - oopen.de
@@ -232,4 +232,3 @@ sudoers_file_user_privileges:
# --- # ---
# vars used by scripts/reset_root_passwd.yml # vars used by scripts/reset_root_passwd.yml
# --- # ---
host_vars/cl-lubax.oopen.de/cl-lubax-common.yml
+2 -3
View File
@@ -19,7 +19,7 @@
# vars used by roles/common/tasks/sshd.yml # vars used by roles/common/tasks/sshd.yml
# --- # ---
#sshd_permit_root_login: !!str "prohibit-password" # sshd_permit_root_login: !!str "prohibit-password"
sshd_permit_root_login: !!str "no" sshd_permit_root_login: !!str "no"
# --- # ---
@@ -87,7 +87,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- oopen.de - oopen.de
@@ -149,4 +149,3 @@ sudoers_file_user_privileges:
# --- # ---
# vars used by scripts/reset_root_passwd.yml # vars used by scripts/reset_root_passwd.yml
# --- # ---
host_vars/cl-lubax.oopen.de/cl-lubax-ipt-server.yml
+1 -1
View File
@@ -24,4 +24,4 @@ fw_http_server_ips: $ext_1_ip
fw_mail_client_ips: $ext_1_ip fw_mail_client_ips: $ext_1_ip
# --- Block # --- Block
#fw_blocked_ips: 222.184.0.0/13 61.160.0.0/16 116.8.0.0/14 # fw_blocked_ips: 222.184.0.0/13 61.160.0.0/16 116.8.0.0/14
host_vars/cl-nd.oopen.de/cl-nd-common.yml
+1 -2
View File
@@ -86,7 +86,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- oopen.de - oopen.de
@@ -232,4 +232,3 @@ sudoers_file_user_privileges:
# --- # ---
# vars used by scripts/reset_root_passwd.yml # vars used by scripts/reset_root_passwd.yml
# --- # ---
host_vars/cl-ndm.oopen.de/cl-ndm-common.yml
+1 -2
View File
@@ -86,7 +86,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- oopen.de - oopen.de
@@ -232,4 +232,3 @@ sudoers_file_user_privileges:
# --- # ---
# vars used by scripts/reset_root_passwd.yml # vars used by scripts/reset_root_passwd.yml
# --- # ---
host_vars/cl-opp.oopen.de/cl-opp-common.yml
+1 -2
View File
@@ -86,7 +86,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- oopen.de - oopen.de
@@ -143,4 +143,3 @@ sudoers_file_user_privileges:
# --- # ---
# vars used by scripts/reset_root_passwd.yml # vars used by scripts/reset_root_passwd.yml
# --- # ---
host_vars/cl-test.oopen.de/cl-test-common.yml
+1 -2
View File
@@ -84,7 +84,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- oopen.de - oopen.de
@@ -140,4 +140,3 @@ sudoers_file_user_privileges:
# --- # ---
# vars used by scripts/reset_root_passwd.yml # vars used by scripts/reset_root_passwd.yml
# --- # ---
host_vars/cl-vbrg.oopen.de/cl-vbrg-common.yml
-1
View File
@@ -70,4 +70,3 @@ sudoers_file_user_privileges:
# --- # ---
# vars used by scripts/reset_root_passwd.yml # vars used by scripts/reset_root_passwd.yml
# --- # ---
host_vars/cloud-giz.warenform.de/cloud-giz-common.yml
-1
View File
@@ -70,4 +70,3 @@ sudoers_file_user_privileges:
# --- # ---
# vars used by scripts/reset_root_passwd.yml # vars used by scripts/reset_root_passwd.yml
# --- # ---
host_vars/cloud.akweb.de/cloud-common.yml
+1 -2
View File
@@ -87,7 +87,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- oopen.de - oopen.de
@@ -144,4 +144,3 @@ sudoers_file_user_privileges:
# --- # ---
# vars used by scripts/reset_root_passwd.yml # vars used by scripts/reset_root_passwd.yml
# --- # ---
host_vars/cp-01.oopen.de/cp-01-common.yml
+1 -2
View File
@@ -88,7 +88,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- oopen.de - oopen.de
@@ -158,4 +158,3 @@ sudoers_file_user_privileges:
# --- # ---
# vars used by scripts/reset_root_passwd.yml # vars used by scripts/reset_root_passwd.yml
# --- # ---
host_vars/cp-flr.oopen.de/cp-flr-common.yml
+1 -2
View File
@@ -86,7 +86,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- oopen.de - oopen.de
@@ -156,4 +156,3 @@ sudoers_file_user_privileges:
# --- # ---
# vars used by scripts/reset_root_passwd.yml # vars used by scripts/reset_root_passwd.yml
# --- # ---
host_vars/d.mx.oopen.de/d.mx-common.yml
+1 -2
View File
@@ -86,7 +86,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- oopen.de - oopen.de
@@ -173,7 +173,6 @@ copy_template_files: []
# dest_path: /usr/local/src/mailsystem/conf/install_amavis.conf # dest_path: /usr/local/src/mailsystem/conf/install_amavis.conf
# --- # ---
# vars used by roles/common/tasks/config_files_mailsystem_scripts.yml # vars used by roles/common/tasks/config_files_mailsystem_scripts.yml
# --- # ---
host_vars/dc-opp.oopen.de/dc-opp-common.yml
+1 -2
View File
@@ -86,7 +86,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- oopen.de - oopen.de
@@ -139,4 +139,3 @@ resolved_fallback_nameserver:
# --- # ---
# vars used by scripts/reset_root_passwd.yml # vars used by scripts/reset_root_passwd.yml
# --- # ---
host_vars/devel-cloud.wf.netz/devel-cloud-common.yml
+2 -2
View File
@@ -1,4 +1,5 @@
--- ---
# yamllint disable rule:line-length
# --- # ---
# vars used by roles/ansible_dependencies # vars used by roles/ansible_dependencies
@@ -81,7 +82,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- wf.netz - wf.netz
@@ -150,4 +151,3 @@ sudo_users:
root_user: root_user:
name: root name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq. password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/devel-db.wf.netz/devel-db-common.yml
+1 -4
View File
@@ -87,7 +87,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- wf.netz - wf.netz
@@ -142,15 +142,12 @@ resolved_fallback_nameserver:
# --- # ---
# --- # ---
# vars used by roles/common/tasks/samba-config-server.yml # vars used by roles/common/tasks/samba-config-server.yml
# vars used by roles/common/tasks/samba-user.yml # vars used by roles/common/tasks/samba-user.yml
# --- # ---
# ============================== # ==============================
host_vars/devel-php.wf.netz/devel-php-common.yml
+1 -4
View File
@@ -94,7 +94,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- wf.netz - wf.netz
@@ -149,15 +149,12 @@ resolved_fallback_nameserver:
# --- # ---
# --- # ---
# vars used by roles/common/tasks/samba-config-server.yml # vars used by roles/common/tasks/samba-config-server.yml
# vars used by roles/common/tasks/samba-user.yml # vars used by roles/common/tasks/samba-user.yml
# --- # ---
# ============================== # ==============================
host_vars/devel-repos.wf.netz/devel-repos-common.yml
+1 -4
View File
@@ -87,7 +87,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- wf.netz - wf.netz
@@ -142,15 +142,12 @@ resolved_fallback_nameserver:
# --- # ---
# --- # ---
# vars used by roles/common/tasks/samba-config-server.yml # vars used by roles/common/tasks/samba-config-server.yml
# vars used by roles/common/tasks/samba-user.yml # vars used by roles/common/tasks/samba-user.yml
# --- # ---
# ============================== # ==============================
host_vars/devel-root.wf.netz/devel-root-common.yml
+1 -4
View File
@@ -87,7 +87,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- wf.netz - wf.netz
@@ -142,15 +142,12 @@ resolved_fallback_nameserver:
# --- # ---
# --- # ---
# vars used by roles/common/tasks/samba-config-server.yml # vars used by roles/common/tasks/samba-config-server.yml
# vars used by roles/common/tasks/samba-user.yml # vars used by roles/common/tasks/samba-user.yml
# --- # ---
# ============================== # ==============================
host_vars/devel-wiki.wf.netz/devel-wiki-common.yml
+1 -4
View File
@@ -87,7 +87,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- wf.netz - wf.netz
@@ -142,15 +142,12 @@ resolved_fallback_nameserver:
# --- # ---
# --- # ---
# vars used by roles/common/tasks/samba-config-server.yml # vars used by roles/common/tasks/samba-config-server.yml
# vars used by roles/common/tasks/samba-user.yml # vars used by roles/common/tasks/samba-user.yml
# --- # ---
# ============================== # ==============================
host_vars/dns0.warenform.de/dns0-common.yml
-1
View File
@@ -121,4 +121,3 @@ git_firewall_repository: {}
# --- # ---
# vars used by scripts/reset_root_passwd.yml # vars used by scripts/reset_root_passwd.yml
# --- # ---
host_vars/dns1.warenform.de/dns1-common.yml
+1 -2
View File
@@ -84,7 +84,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- warenform.de - warenform.de
@@ -138,4 +138,3 @@ git_firewall_repository: {}
# --- # ---
# vars used by scripts/reset_root_passwd.yml # vars used by scripts/reset_root_passwd.yml
# --- # ---
host_vars/e.mx.oopen.de/e.mx-common.yml
+21 -50
View File
@@ -86,7 +86,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- oopen.de - oopen.de
@@ -105,16 +105,16 @@ resolved_fallback_nameserver:
insert_root_ssh_keypair: true insert_root_ssh_keypair: true
#root_ssh_keypair: # root_ssh_keypair:
# - name: id-rsa-dehydrated # - name: id-rsa-dehydrated
# priv_key_src: e.mx/root/.ssh/e.mx-id_rsa-dehydrated # priv_key_src: e.mx.oopen.de/root/.ssh/e.mx-id_rsa-dehydrated
# priv_key_dest: /root/.ssh/id_rsa-dehydrated # priv_key_dest: /root/.ssh/id_rsa-dehydrated
# pub_key_src: e.mx/root/.ssh/e.mx-id_rsa-dehydrated.pub # pub_key_src: e.mx.oopen.de/root/.ssh/e.mx-id_rsa-dehydrated.pub
# pub_key_dest: /root/.ssh/id_rsa-dehydrated.pub # pub_key_dest: /root/.ssh/id_rsa-dehydrated.pub
# - name: id-rsa-opendkim # - name: id-rsa-opendkim
# priv_key_src: e.mx/root/.ssh/e.mx-id_rsa-opendkim # priv_key_src: e.mx.oopen.de/root/.ssh/e.mx-id_rsa-opendkim
# priv_key_dest: /root/.ssh/id_rsa-opendkim # priv_key_dest: /root/.ssh/id_rsa-opendkim
# pub_key_src: e.mx/root/.ssh/e.mx-id_rsa-opendkim.pub # pub_key_src: e.mx.oopen.de/root/.ssh/e.mx-id_rsa-opendkim.pub
# pub_key_dest: /root/.ssh/id_rsa-opendkim.pub # pub_key_dest: /root/.ssh/id_rsa-opendkim.pub
@@ -151,36 +151,6 @@ insert_root_ssh_keypair: true
# vars used by roles/common/tasks/copy_files.yml # vars used by roles/common/tasks/copy_files.yml
# --- # ---
#copy_plain_files:
#
# - name: monitoring_check_cert_for_dovecot.conf
# src_path: e.mx/root/bin/monitoring/conf/check_cert_for_dovecot.conf
# dest_path: /root/bin/monitoring/conf/check_cert_for_dovecot.conf
#
# - name: postfix_create_opendkim_key.conf
# src_path: e.mx/root/bin/postfix/conf/create_opendkim_key.conf
# dest_path: /root/bin/postfix/conf/create_opendkim_key.conf
#
# - name: postfix_postfix_add_mailboxes.conf
# src_path: e.mx/root/bin/postfix/conf/postfix_add_mailboxes.conf
# dest_path: /root/bin/postfix/conf/postfix_add_mailboxes.conf
#
# - name: postfix_sent_userinfo_postfix.conf
# src_path: e.mx/root/bin/postfix/conf/sent_userinfo_postfix.conf
# dest_path: /root/bin/postfix/conf/sent_userinfo_postfix.conf
#
# - name: postfix_whitelist_mb_sigs.conf
# src_path: e.mx/root/bin/postfix/conf/whitelist_mb_sigs.conf
# dest_path: /root/bin/postfix/conf/whitelist_mb_sigs.conf
#
#
#copy_template_files: []
#
# - name: mailsystem_install_amavis.conf
# src_path: usr/local/src/mailsystem/conf/install_amavis.conf.j2
# dest_path: /usr/local/src/mailsystem/conf/install_amavis.conf
# --- # ---
# vars used by roles/common/tasks/config_files_mailsystem_scripts.yml # vars used by roles/common/tasks/config_files_mailsystem_scripts.yml
@@ -211,30 +181,31 @@ si_authorisation_signature: abb4ec6b194639f3d123154f1b971843a3b8751d8c1bcdc7d07e
# #
website_name_postfixadmin: adm-e.oopen.de website_name_postfixadmin: adm-e.oopen.de
email_welcome_message: "\n email_welcome_message: |
Hallo,\n
Ihre/Deine neue E-Mail Adresse ist eingerichtet.\n Hallo,
O.OPEN\n Ihre/Deine neue E-Mail Adresse ist eingerichtet.
--\n O.OPEN
O.OPEN | Phone: +49 30 / 290 484 91\n
Erkelenzdamm 21 | Fax: +49 30 / 290 484 99\n --
D-10999 Berlin | E-MAIL: oo@oopen.de\n O.OPEN | Phone: +49 30 / 290 484 91
" Erkelenzdamm 21 | Fax: +49 30 / 290 484 99
D-10999 Berlin | E-MAIL: oo@oopen.de
# install_update_dovecot.conf # install_update_dovecot.conf
# #
dovecot_from_address: "o.open <oo@oopen.de>" dovecot_from_address: "o.open <oo@oopen.de>"
dovecot_reply_to: "oo@oopen.de" dovecot_reply_to: "oo@oopen.de"
webmailer_address: "https://webmail-e.oopen.de" webmailer_address: "https://webmail-e.oopen.de"
salutation: "O.OPEN\n salutation: |
O.OPEN
--\n --
O.OPEN | Phone: +49 30 / 290 484 91\n O.OPEN | Phone: +49 30 / 290 484 91
Erkelenzdamm 21 | Fax: +49 30 / 290 484 99\n Erkelenzdamm 21 | Fax: +49 30 / 290 484 99
D-10999 Berlin | http://oopen.de" D-10999 Berlin | http://oopen.de
# install_upgrade_roundcube-webmail.conf # install_upgrade_roundcube-webmail.conf
# #
host_vars/file-ah.kanzlei-kiel.netz/file-ah-common.yml
+7 -9
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True network_manage_devices: true
# Should the interfaces be reloaded after config change? # Should the interfaces be reloaded after config change?
network_interface_reload: False network_interface_reload: false
network_interface_path: /etc/network/interfaces.d network_interface_path: /etc/network/interfaces.d
network_interface_required_packages: network_interface_required_packages:
@@ -45,9 +45,9 @@ network_interfaces:
# - 91.239.100.100 # anycast.censurfridns.dk # - 91.239.100.100 # anycast.censurfridns.dk
# search: warenform.de # search: warenform.de
# #
#nameservers: # nameservers:
# - 192.168.100.1 # - 192.168.100.1
#search: kanzlei-kiel.netz # search: kanzlei-kiel.netz
# optional bridge parameters bridge: {} # optional bridge parameters bridge: {}
# bridge: # bridge:
@@ -66,7 +66,7 @@ network_interfaces:
# inline hook scripts # inline hook scripts
pre-up: pre-up:
- !!str "ip link set dev eno1np0 up" # pre-up script lines - !!str "ip link set dev eno1np0 up" # pre-up script lines
up: [] #up script lines up: [] # up script lines
post-up: [] # post-up script lines (alias for up) post-up: [] # post-up script lines (alias for up)
pre-down: [] # pre-down script lines (alias for down) pre-down: [] # pre-down script lines (alias for down)
down: [] # down script lines down: [] # down script lines
@@ -155,7 +155,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- kanzlei-kiel.netz - kanzlei-kiel.netz
@@ -233,7 +233,6 @@ default_user:
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIItQLQ7lhBY2USF4Jcp4teF+1NydI73VeHYbQW8q4Mcw root@gw-ah' - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIItQLQ7lhBY2USF4Jcp4teF+1NydI73VeHYbQW8q4Mcw root@gw-ah'
# --- # ---
# vars used by roles/common/tasks/cron.yml # vars used by roles/common/tasks/cron.yml
# --- # ---
@@ -273,7 +272,7 @@ cron_user_special_time_entries:
job: "sleep 10 ; /bin/systemctl restart systemd-resolved" job: "sleep 10 ; /bin/systemctl restart systemd-resolved"
insertafter: PATH insertafter: PATH
#cron_user_special_time_entries: # cron_user_special_time_entries:
# #
# - name: "Restart DNS Cache service 'systemd-resolved'" # - name: "Restart DNS Cache service 'systemd-resolved'"
# special_time: reboot # special_time: reboot
@@ -281,7 +280,6 @@ cron_user_special_time_entries:
# insertafter: PATH # insertafter: PATH
# --- # ---
# vars used by roles/common/tasks/users.yml # vars used by roles/common/tasks/users.yml
# --- # ---
host_vars/file-blkr-alt.blkr.netz/file-blkr-alt-common.yml
+5 -6
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True network_manage_devices: true
# Should the interfaces be reloaded after config change? # Should the interfaces be reloaded after config change?
network_interface_reload: False network_interface_reload: false
network_interface_path: /etc/network/interfaces.d network_interface_path: /etc/network/interfaces.d
network_interface_required_packages: network_interface_required_packages:
@@ -44,9 +44,9 @@ network_interfaces:
# - 91.239.100.100 # anycast.censurfridns.dk # - 91.239.100.100 # anycast.censurfridns.dk
# search: warenform.de # search: warenform.de
# #
#nameservers: # nameservers:
# - 192.168.162.1 # - 192.168.162.1
#search: blkr.netz # search: blkr.netz
# --- # ---
@@ -152,7 +152,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- blkr.netz - blkr.netz
@@ -177,7 +177,6 @@ cron_user_special_time_entries:
insertafter: PATH insertafter: PATH
# --- # ---
# vars used by roles/common/tasks/users.yml # vars used by roles/common/tasks/users.yml
# --- # ---
host_vars/file-blkr.blkr.netz/file-blkr-common.yml
+5 -6
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True network_manage_devices: true
# Should the interfaces be reloaded after config change? # Should the interfaces be reloaded after config change?
network_interface_reload: False network_interface_reload: false
network_interface_path: /etc/network/interfaces.d network_interface_path: /etc/network/interfaces.d
network_interface_required_packages: network_interface_required_packages:
@@ -44,9 +44,9 @@ network_interfaces:
# - 91.239.100.100 # anycast.censurfridns.dk # - 91.239.100.100 # anycast.censurfridns.dk
# search: warenform.de # search: warenform.de
# #
#nameservers: # nameservers:
# - 192.168.162.1 # - 192.168.162.1
#search: blkr.netz # search: blkr.netz
# --- # ---
@@ -152,7 +152,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- blkr.netz - blkr.netz
@@ -177,7 +177,6 @@ cron_user_special_time_entries:
insertafter: PATH insertafter: PATH
# --- # ---
# vars used by roles/common/tasks/users.yml # vars used by roles/common/tasks/users.yml
# --- # ---
host_vars/file-dissens.dissens.netz/file-dissens-common.yml
+7 -7
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True network_manage_devices: true
# Should the interfaces be reloaded after config change? # Should the interfaces be reloaded after config change?
network_interface_reload: False network_interface_reload: false
network_interface_path: /etc/network/interfaces.d network_interface_path: /etc/network/interfaces.d
network_interface_required_packages: network_interface_required_packages:
@@ -44,9 +44,9 @@ network_interfaces:
# - 91.239.100.100 # anycast.censurfridns.dk # - 91.239.100.100 # anycast.censurfridns.dk
# search: warenform.de # search: warenform.de
# #
#nameservers: # nameservers:
# - 192.168.132.1 # - 192.168.132.1
#search: blkr.netz # search: blkr.netz
# --- # ---
@@ -130,7 +130,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- dissens.netz - dissens.netz
@@ -189,7 +189,7 @@ default_user:
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINj0nCdFOZm51AVCfPbZ22QROIEiboXZ7RamHvM2E9IM root@backup.warenform.de' - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINj0nCdFOZm51AVCfPbZ22QROIEiboXZ7RamHvM2E9IM root@backup.warenform.de'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBZQMCGCyIvs5hoNDoTIkKvKmEbxLf+uCYI1vx//ZQYY root@o26-backup' - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBZQMCGCyIvs5hoNDoTIkKvKmEbxLf+uCYI1vx//ZQYY root@o26-backup'
#extra_user: # extra_user:
# #
# - name: borg # - name: borg
# user_id: 1065 # user_id: 1065
@@ -534,7 +534,7 @@ base_home: /data/home
samba_homes_virusfilter: true samba_homes_virusfilter: true
remove_samba_users: [] remove_samba_users: []
#remove_samba_users: # remove_samba_users:
# - name: sebastian.scheele # - name: sebastian.scheele
# - name: rositsa.mahdi # - name: rositsa.mahdi
# - name: laura.sasse # - name: laura.sasse
host_vars/file-ebs.ebs.netz/file-ebs-common.yml
+7 -10
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True network_manage_devices: true
# Should the interfaces be reloaded after config change? # Should the interfaces be reloaded after config change?
network_interface_reload: False network_interface_reload: false
network_interface_path: /etc/network/interfaces.d network_interface_path: /etc/network/interfaces.d
network_interface_required_packages: network_interface_required_packages:
@@ -44,9 +44,9 @@ network_interfaces:
# - 91.239.100.100 # anycast.censurfridns.dk # - 91.239.100.100 # anycast.censurfridns.dk
# search: warenform.de # search: warenform.de
# #
#nameservers: # nameservers:
# - 192.168.182.1 # - 192.168.182.1
#search: ebs.netz # search: ebs.netz
# optional bridge parameters bridge: {} # optional bridge parameters bridge: {}
# bridge: # bridge:
@@ -65,7 +65,7 @@ network_interfaces:
# inline hook scripts # inline hook scripts
pre-up: pre-up:
- !!str "ip link set dev eno1 up" # pre-up script lines - !!str "ip link set dev eno1 up" # pre-up script lines
up: [] #up script lines up: [] # up script lines
post-up: [] # post-up script lines (alias for up) post-up: [] # post-up script lines (alias for up)
pre-down: [] # pre-down script lines (alias for down) pre-down: [] # pre-down script lines (alias for down)
down: [] # down script lines down: [] # down script lines
@@ -161,7 +161,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- ebs.netz - ebs.netz
@@ -247,7 +247,6 @@ cron_user_special_time_entries:
insertafter: PATH insertafter: PATH
# --- # ---
# vars used by roles/common/tasks/users.yml # vars used by roles/common/tasks/users.yml
# --- # ---
@@ -305,7 +304,6 @@ nfs_exports:
use_fsid_option: true use_fsid_option: true
# --- # ---
# vars used by roles/common/tasks/samba-config-server.yml # vars used by roles/common/tasks/samba-config-server.yml
# vars used by roles/common/tasks/samba-user.yml # vars used by roles/common/tasks/samba-user.yml
@@ -318,7 +316,7 @@ samba_workgroup: EBS
samba_netbios_name: FILE-EBS samba_netbios_name: FILE-EBS
#samba_server_min_protocol: !!str NT1 # samba_server_min_protocol: !!str NT1
samba_groups: samba_groups:
@@ -557,7 +555,6 @@ samba_shares:
vfs_object_recycle: false vfs_object_recycle: false
# ============================== # ==============================
host_vars/file-fhxb.fhxb.netz/file-fhxb-common.yml
+27 -30
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True network_manage_devices: true
# Should the interfaces be reloaded after config change? # Should the interfaces be reloaded after config change?
network_interface_reload: False network_interface_reload: false
network_interface_path: /etc/network/interfaces.d network_interface_path: /etc/network/interfaces.d
network_interface_required_packages: network_interface_required_packages:
@@ -44,9 +44,9 @@ network_interfaces:
# - 91.239.100.100 # anycast.censurfridns.dk # - 91.239.100.100 # anycast.censurfridns.dk
# search: warenform.de # search: warenform.de
# #
#nameservers: # nameservers:
# - 192.168.192.1 # - 192.168.192.1
#search: fhxb.netz # search: fhxb.netz
# --- # ---
@@ -131,7 +131,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- fhxb.netz - fhxb.netz
@@ -156,7 +156,6 @@ cron_user_special_time_entries:
insertafter: PATH insertafter: PATH
# --- # ---
# vars used by roles/common/tasks/users.yml # vars used by roles/common/tasks/users.yml
# --- # ---
@@ -225,7 +224,6 @@ nfs_exports:
use_fsid_option: true use_fsid_option: true
# --- # ---
# vars used by roles/common/tasks/samba-config-server.yml # vars used by roles/common/tasks/samba-config-server.yml
# vars used by roles/common/tasks/samba-user.yml # vars used by roles/common/tasks/samba-user.yml
@@ -358,7 +356,7 @@ samba_user:
password: '5hE-7n.JRQ9Y' password: '5hE-7n.JRQ9Y'
# Archiv01 # Archiv01
- name : a.rchiv01 - name: a.rchiv01
groups: groups:
- archiv - archiv
- ausstellungen - ausstellungen
@@ -371,7 +369,7 @@ samba_user:
password: '45pS2X-rim.e' password: '45pS2X-rim.e'
# Archiv02 # Archiv02
- name : a.rchiv02 - name: a.rchiv02
groups: groups:
- archiv - archiv
- ausstellungen - ausstellungen
@@ -384,7 +382,7 @@ samba_user:
password: '7gqKY/7-nh3Q' password: '7gqKY/7-nh3Q'
# Astrid Schiemann # Astrid Schiemann
- name : a.schiemann - name: a.schiemann
groups: groups:
- archiv - archiv
- ausstellungen - ausstellungen
@@ -408,7 +406,7 @@ samba_user:
password: 'G.u3r.tJ6Qkh' password: 'G.u3r.tJ6Qkh'
# Babara Schaller # Babara Schaller
- name : b.schaller - name: b.schaller
groups: groups:
- archiv - archiv
- ausstellungen - ausstellungen
@@ -421,7 +419,7 @@ samba_user:
password: 'ufPmZ.L/63yJ' password: 'ufPmZ.L/63yJ'
# Ellen Thieleman # Ellen Thieleman
- name : e.thieleman - name: e.thieleman
groups: groups:
- ausstellungen - ausstellungen
- buero - buero
@@ -430,14 +428,14 @@ samba_user:
password: 'MFS79-tzWA/c' password: 'MFS79-tzWA/c'
# Erika Hausotter # Erika Hausotter
- name : e.hausotter - name: e.hausotter
groups: groups:
- archiv - archiv
- team - team
password: 'A/pY4-9VvUdo' password: 'A/pY4-9VvUdo'
# Fabian Bovens # Fabian Bovens
- name : f.bovens - name: f.bovens
groups: groups:
- archiv - archiv
- ausstellungen - ausstellungen
@@ -449,7 +447,7 @@ samba_user:
password: 'z/Cw3.IzP2xn' password: 'z/Cw3.IzP2xn'
# Florian Helm # Florian Helm
- name : f.helm - name: f.helm
groups: groups:
- altlasten - altlasten
- archiv - archiv
@@ -475,7 +473,7 @@ samba_user:
password: 'z2FE..fUh4fx' password: 'z2FE..fUh4fx'
# Frauke Erdmann # Frauke Erdmann
- name : f.erdmann - name: f.erdmann
groups: groups:
- archiv - archiv
- ausstellungen - ausstellungen
@@ -488,7 +486,7 @@ samba_user:
password: 'P/yV5N9rxA-Y' password: 'P/yV5N9rxA-Y'
# Gerhard Grosche # Gerhard Grosche
- name : g.grosche - name: g.grosche
groups: groups:
- archiv - archiv
- ausstellungen - ausstellungen
@@ -500,7 +498,7 @@ samba_user:
password: '6/H-EgRqP9-T' password: '6/H-EgRqP9-T'
# Heike Müller # Heike Müller
- name : h.mueller - name: h.mueller
groups: groups:
- administration - administration
- buero - buero
@@ -508,7 +506,7 @@ samba_user:
password: 'VT7/n5hHy-Av' password: 'VT7/n5hHy-Av'
# Jana König # Jana König
- name : j.koenig - name: j.koenig
groups: groups:
- administration - administration
- archiv - archiv
@@ -532,7 +530,7 @@ samba_user:
password: 'fE6.2K/HpnuS' password: 'fE6.2K/HpnuS'
# Jorinde Splettstößer # Jorinde Splettstößer
- name : j.splettstoesser - name: j.splettstoesser
groups: groups:
- administration - administration
- archiv - archiv
@@ -557,7 +555,7 @@ samba_user:
password: '2/octHEm/g5H' password: '2/octHEm/g5H'
# Natalie Bayer # Natalie Bayer
- name : n.bayer - name: n.bayer
groups: groups:
- administration - administration
- altlasten - altlasten
@@ -584,7 +582,7 @@ samba_user:
password: 'AI/.44Jt6rhY' password: 'AI/.44Jt6rhY'
# Natalie Maier # Natalie Maier
- name : n.maier - name: n.maier
groups: groups:
- administration - administration
- altlasten - altlasten
@@ -611,7 +609,7 @@ samba_user:
password: 'kI25L.pfQI/q' password: 'kI25L.pfQI/q'
# Norbert Schropp # Norbert Schropp
- name : n.schropp - name: n.schropp
groups: groups:
- archiv - archiv
- ausstellungen - ausstellungen
@@ -623,7 +621,7 @@ samba_user:
password: 'rK/puJ2.7sb4' password: 'rK/puJ2.7sb4'
# Praktikum 01 # Praktikum 01
- name : p.raktikum01 - name: p.raktikum01
groups: groups:
- ausstellungen - ausstellungen
- buero - buero
@@ -634,7 +632,7 @@ samba_user:
password: '2IN.R5HIq-ig' password: '2IN.R5HIq-ig'
# Praktikum 02 # Praktikum 02
- name : p.raktikum02 - name: p.raktikum02
groups: groups:
- ausstellungen - ausstellungen
- buero - buero
@@ -645,7 +643,7 @@ samba_user:
password: 'NnRYo5-d6i/n' password: 'NnRYo5-d6i/n'
# Volo 01 # Volo 01
- name : v.olo01 - name: v.olo01
groups: groups:
- archiv - archiv
- ausstellungen - ausstellungen
@@ -665,7 +663,7 @@ samba_user:
password: 'A/pY4-9VvUdo' password: 'A/pY4-9VvUdo'
# Volo 02 # Volo 02
- name : v.olo02 - name: v.olo02
groups: groups:
- archiv - archiv
- ausstellungen - ausstellungen
@@ -686,7 +684,7 @@ samba_user:
password: 'sp29q-Yn-6PY' password: 'sp29q-Yn-6PY'
# Volo 03 # Volo 03
- name : v.olo03 - name: v.olo03
groups: groups:
- archiv - archiv
- ausstellungen - ausstellungen
@@ -716,7 +714,7 @@ samba_homes_virusfilter: true
# - name: name1 # - name: name1
# - name: name2 # - name: name2
# #
#remove_samba_users: [] # remove_samba_users: []
remove_samba_users: remove_samba_users:
- name: evren - name: evren
@@ -963,7 +961,6 @@ samba_shares:
recycle_path: '@Recycle' recycle_path: '@Recycle'
# ============================== # ==============================
host_vars/file-fm.fm.netz/file-fm-common.yml
+7 -7
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True network_manage_devices: true
# Should the interfaces be reloaded after config change? # Should the interfaces be reloaded after config change?
network_interface_reload: False network_interface_reload: false
network_interface_path: /etc/network/interfaces.d network_interface_path: /etc/network/interfaces.d
network_interface_required_packages: network_interface_required_packages:
@@ -44,9 +44,9 @@ network_interfaces:
# - 91.239.100.100 # anycast.censurfridns.dk # - 91.239.100.100 # anycast.censurfridns.dk
# search: warenform.de # search: warenform.de
# #
#nameservers: # nameservers:
# - 192.168.222.1 # - 192.168.222.1
#search: blkr.netz # search: blkr.netz
# --- # ---
@@ -130,7 +130,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- fm.netz - fm.netz
@@ -203,7 +203,7 @@ default_user:
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHUvk8+UduCcBbQO1YxXSU8SaGIl8x+TBmIFmPb9JQu8 root@gw-fm' - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHUvk8+UduCcBbQO1YxXSU8SaGIl8x+TBmIFmPb9JQu8 root@gw-fm'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN0ibOee8TvYlrEzKno5J6h3ZQs79i0wPElqYvQxAymK root@file-fm' - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN0ibOee8TvYlrEzKno5J6h3ZQs79i0wPElqYvQxAymK root@file-fm'
#extra_user: # extra_user:
# #
# - name: borg # - name: borg
# user_id: 1065 # user_id: 1065
@@ -480,7 +480,7 @@ samba_homes_virusfilter: true
# - name: name2 # - name: name2
# #
remove_samba_users: [] remove_samba_users: []
#remove_samba_users: # remove_samba_users:
# - name: elenor.faellgrem # - name: elenor.faellgrem
# - name: maiken.schiele # - name: maiken.schiele
host_vars/file-ipa.local.netz/file-ipa-common.yml
+1 -2
View File
@@ -66,14 +66,13 @@ install_compiler_pkgs: true
# --- # ---
#copy_template_files: [] # copy_template_files: []
# #
# - name: mailsystem_install_amavis.conf # - name: mailsystem_install_amavis.conf
# src_path: usr/local/src/mailsystem/conf/install_amavis.conf.j2 # src_path: usr/local/src/mailsystem/conf/install_amavis.conf.j2
# dest_path: /usr/local/src/mailsystem/conf/install_amavis.conf # dest_path: /usr/local/src/mailsystem/conf/install_amavis.conf
# --- # ---
# vars used by roles/common/tasks/config_files_mailsystem_scripts.yml # vars used by roles/common/tasks/config_files_mailsystem_scripts.yml
# --- # ---
host_vars/file-kb.anw-kb.netz/file-kb-common.yml
+1 -2
View File
@@ -87,7 +87,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- anw-km.netz - anw-km.netz
@@ -112,7 +112,6 @@ cron_user_special_time_entries:
insertafter: PATH insertafter: PATH
# --- # ---
# vars used by roles/common/tasks/users.yml # vars used by roles/common/tasks/users.yml
# --- # ---
host_vars/file-km-alt.anw-km.netz/file-km-alt-common.yml
+6 -9
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True network_manage_devices: true
# Should the interfaces be reloaded after config change? # Should the interfaces be reloaded after config change?
network_interface_reload: False network_interface_reload: false
network_interface_path: /etc/network/interfaces.d network_interface_path: /etc/network/interfaces.d
network_interface_required_packages: network_interface_required_packages:
@@ -62,7 +62,7 @@ network_interfaces:
# inline hook scripts # inline hook scripts
pre-up: pre-up:
- !!str "ip link set dev enp97s0 up" # pre-up script lines - !!str "ip link set dev enp97s0 up" # pre-up script lines
up: [] #up script lines up: [] # up script lines
post-up: [] # post-up script lines (alias for up) post-up: [] # post-up script lines (alias for up)
pre-down: [] # pre-down script lines (alias for down) pre-down: [] # pre-down script lines (alias for down)
down: [] # down script lines down: [] # down script lines
@@ -151,7 +151,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- anw-km.netz - anw-km.netz
@@ -214,7 +214,6 @@ cron_user_entries:
job: /root/bin/monitoring/check_ntpsec_service.sh job: /root/bin/monitoring/check_ntpsec_service.sh
# --- # ---
# vars used by roles/common/tasks/users.yml # vars used by roles/common/tasks/users.yml
# --- # ---
@@ -287,7 +286,6 @@ samba_groups:
group_id: 1190 group_id: 1190
samba_user: samba_user:
- name: advoware - name: advoware
@@ -591,7 +589,6 @@ samba_user:
password: 'uJ5gF/m53p.P' password: 'uJ5gF/m53p.P'
- name: aphex2 - name: aphex2
groups: groups:
- alle - alle
@@ -767,8 +764,8 @@ remove_samba_users:
- name: gerhard - name: gerhard
- name: laura - name: laura
#remove_samba_users: [] # remove_samba_users: []
#remove_samba_users: # remove_samba_users:
# - name: evren # - name: evren
samba_shares: samba_shares:
host_vars/file-km.anw-km.netz/file-km-common.yml
+6 -7
View File
@@ -4,10 +4,10 @@
# --- # ---
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True network_manage_devices: true
# Should the interfaces be reloaded after config change? # Should the interfaces be reloaded after config change?
network_interface_reload: False network_interface_reload: false
network_interface_path: /etc/network/interfaces.d network_interface_path: /etc/network/interfaces.d
network_interface_required_packages: network_interface_required_packages:
@@ -58,7 +58,7 @@ network_interfaces:
# inline hook scripts # inline hook scripts
pre-up: pre-up:
- !!str "ip link set dev eno1np0 up" # pre-up script lines - !!str "ip link set dev eno1np0 up" # pre-up script lines
up: [] #up script lines up: [] # up script lines
post-up: [] # post-up script lines (alias for up) post-up: [] # post-up script lines (alias for up)
pre-down: [] # pre-down script lines (alias for down) pre-down: [] # pre-down script lines (alias for down)
down: [] # down script lines down: [] # down script lines
@@ -148,7 +148,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- anw-km.netz - anw-km.netz
@@ -630,7 +630,6 @@ samba_user:
password: "uJ5gF/m53p.P" password: "uJ5gF/m53p.P"
- name: aphex2 - name: aphex2
groups: groups:
- alle - alle
@@ -806,8 +805,8 @@ remove_samba_users:
- name: gerhard - name: gerhard
- name: laura - name: laura
#remove_samba_users: [] # remove_samba_users: []
#remove_samba_users: # remove_samba_users:
# - name: evren # - name: evren
samba_shares: samba_shares:
host_vars/formbricks-nd.oopen.de/formbricks-nd-common.yml
+1 -3
View File
@@ -90,7 +90,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- oopen.de - oopen.de
@@ -132,7 +132,6 @@ cron_user_entries:
job: /root/bin/monitoring/check_ssh.sh job: /root/bin/monitoring/check_ssh.sh
# --- # ---
# vars used by roles/common/tasks/users.yml # vars used by roles/common/tasks/users.yml
# --- # ---
@@ -197,4 +196,3 @@ git_firewall_repository:
root_user: root_user:
name: root name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq. password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/g.mx.oopen.de/g.mx-common.yml
+7 -43
View File
@@ -84,7 +84,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- oopen.de - oopen.de
@@ -101,18 +101,18 @@ resolved_fallback_nameserver:
# vars used by roles/common/tasks/users.yml # vars used by roles/common/tasks/users.yml
# --- # ---
#insert_root_ssh_keypair: true # insert_root_ssh_keypair: true
# #
#root_ssh_keypair: # root_ssh_keypair:
# - name: id-rsa-dehydrated # - name: id-rsa-dehydrated
# priv_key_src: b.mx/root/.ssh/b.mx-id_rsa-dehydrated # priv_key_src: g.mx.oopen.de/root/.ssh/b.mx-id_rsa-dehydrated
# priv_key_dest: /root/.ssh/id_rsa-dehydrated # priv_key_dest: /root/.ssh/id_rsa-dehydrated
# pub_key_src: b.mx/root/.ssh/b.mx-id_rsa-dehydrated.pub # pub_key_src: g.mx.oopen.de/root/.ssh/b.mx-id_rsa-dehydrated.pub
# pub_key_dest: /root/.ssh/id_rsa-dehydrated.pub # pub_key_dest: /root/.ssh/id_rsa-dehydrated.pub
# - name: id-rsa-opendkim # - name: id-rsa-opendkim
# priv_key_src: b.mx/root/.ssh/b.mx-id_rsa-opendkim # priv_key_src: g.mx.oopen.de/root/.ssh/b.mx-id_rsa-opendkim
# priv_key_dest: /root/.ssh/id_rsa-opendkim # priv_key_dest: /root/.ssh/id_rsa-opendkim
# pub_key_src: b.mx/root/.ssh/b.mx-id_rsa-opendkim.pub # pub_key_src: g.mx.oopen.de/root/.ssh/b.mx-id_rsa-opendkim.pub
# pub_key_dest: /root/.ssh/id_rsa-opendkim.pub # pub_key_dest: /root/.ssh/id_rsa-opendkim.pub
@@ -149,42 +149,6 @@ resolved_fallback_nameserver:
# vars used by roles/common/tasks/copy_files.yml # vars used by roles/common/tasks/copy_files.yml
# --- # ---
copy_plain_files:
# /root/bin/postfix
#
- name: postfix_create_opendkim_key.conf
src_path: g.mx/root/bin/postfix/conf/create_opendkim_key.conf
dest_path: /root/bin/postfix/conf/create_opendkim_key.conf
- name: postfix_whitelist_mb_sigs.conf
src_path: g.mx/root/bin/postfix/conf/whitelist_mb_sigs.conf
dest_path: /root/bin/postfix/conf/whitelist_mb_sigs.conf
copy_plain_files_postfix_host_specific:
- name: relay_domains
src_path: g.mx/etc/postfix/relay_domains
dest_path: /etc/postfix/relay_domains
copy_plain_files_postfwd_host_specific:
# Postfix Firewall postfwd
#
- name: postfwd.wl-nets
src_path: g.mx/etc/postfix/postfwd.wl-nets
dest_path: /etc/postfix/postfwd.wl-nets
copy_template_files: []
#
# - name: mailsystem_install_amavis.conf
# src_path: usr/local/src/mailsystem/conf/install_amavis.conf.j2
# dest_path: /usr/local/src/mailsystem/conf/install_amavis.conf
# --- # ---
# vars used by roles/common/tasks/config_files_mailsystem_scripts.yml # vars used by roles/common/tasks/config_files_mailsystem_scripts.yml
host_vars/ga-al-gw.oopen.de/ga-al-gw-common.yml
+13 -15
View File
@@ -5,10 +5,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True network_manage_devices: true
# Should the interfaces be reloaded after config change? # Should the interfaces be reloaded after config change?
network_interface_reload: False network_interface_reload: false
network_interface_path: /etc/network/interfaces.d network_interface_path: /etc/network/interfaces.d
network_interface_required_packages: network_interface_required_packages:
@@ -28,10 +28,10 @@ network_interfaces:
address: 172.16.10.1 address: 172.16.10.1
netmask: 24 netmask: 24
gateway: 172.16.10.254 gateway: 172.16.10.254
#nameservers: # nameservers:
# - 192.168.10.1 # - 192.168.10.1
# - 192.168.10.3 # - 192.168.10.3
#search: ga.netz # search: ga.netz
- device: eth2 - device: eth2
@@ -90,7 +90,7 @@ network_interfaces:
family: inet family: inet
method: static method: static
#hwaddress: 0c:c4:7a:7d:51:46 # hwaddress: 0c:c4:7a:7d:51:46
description: description:
address: 10.221.15.254 address: 10.221.15.254
netmask: 20 netmask: 20
@@ -185,8 +185,8 @@ network_interfaces:
- /sbin/ip route add 192.168.11.0/24 via 172.16.111.254 - /sbin/ip route add 192.168.11.0/24 via 172.16.111.254
- /sbin/ip route add 192.168.78.0/24 via 172.16.111.254 - /sbin/ip route add 192.168.78.0/24 via 172.16.111.254
# User Networks Campus # User Networks Campus
#- /sbin/ip route add 192.168.72.0/24 via 172.16.111.254 # - /sbin/ip route add 192.168.72.0/24 via 172.16.111.254
#- /sbin/ip route add 192.168.73.0/24 via 172.16.111.254 # - /sbin/ip route add 192.168.73.0/24 via 172.16.111.254
# User Network Novalishaus # User Network Novalishaus
- /sbin/ip route add 192.168.81.0/24 via 172.16.111.254 - /sbin/ip route add 192.168.81.0/24 via 172.16.111.254
# User Network Georgshaus # User Network Georgshaus
@@ -202,7 +202,7 @@ network_interfaces:
# WLAN privat Novalishaus # WLAN privat Novalishaus
- /sbin/ip route add 10.31.0.0/20 via 172.16.111.254 - /sbin/ip route add 10.31.0.0/20 via 172.16.111.254
# Management Netork Campus # Management Netork Campus
#- /sbin/ip route add 10.72.1.0/24 via 172.16.111.254 # - /sbin/ip route add 10.72.1.0/24 via 172.16.111.254
# WLan Router Stockhausen # WLan Router Stockhausen
- /sbin/ip route add 10.112.1.0/24 via 172.16.111.254 - /sbin/ip route add 10.112.1.0/24 via 172.16.111.254
# WLan Netz # WLan Netz
@@ -329,7 +329,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- ga.netz - ga.netz
@@ -482,30 +482,29 @@ bind9_gateway_acl:
- 192.168.10.2 - 192.168.10.2
bind9_gateway_listen_on_v6: bind9_gateway_listen_on_v6:
- none - none
bind9_gateway_listen_on: bind9_gateway_listen_on:
- any - any
#bind9_gateway_allow_transfer: {} # bind9_gateway_allow_transfer: {}
bind9_gateway_allow_transfer: bind9_gateway_allow_transfer:
- none - none
bind9_transfer_source: !!str "192.168.10.1" bind9_transfer_source: !!str "192.168.10.1"
bind9_notify_source: !!str "192.168.10.1" bind9_notify_source: !!str "192.168.10.1"
#bind9_gateway_allow_query: {} # bind9_gateway_allow_query: {}
bind9_gateway_allow_query: bind9_gateway_allow_query:
- local-net - local-net
#bind9_gateway_allow_query_cache: {} # bind9_gateway_allow_query_cache: {}
bind9_gateway_allow_query_cache: bind9_gateway_allow_query_cache:
- local-net - local-net
bind9_gateway_recursion: !!str "yes" bind9_gateway_recursion: !!str "yes"
#bind9_gateway_allow_recursion: {} # bind9_gateway_allow_recursion: {}
bind9_gateway_allow_recursion: bind9_gateway_allow_recursion:
- local-net - local-net
@@ -529,4 +528,3 @@ git_firewall_repository:
root_user: root_user:
name: root name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq. password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/ga-al-kvm2.ga.netz/ga-al-kvm2-common.yml
-1
View File
@@ -123,7 +123,6 @@ sshd_permit_root_login: !!str "prohibit-password"
# --- # ---
# ============================== # ==============================
host_vars/ga-al-kvm3.ga.netz/ga-al-kvm3-common.yml
-1
View File
@@ -123,7 +123,6 @@ sshd_permit_root_login: !!str "prohibit-password"
# --- # ---
# ============================== # ==============================
host_vars/ga-al-relay.ga.netz/ga-al-relay-common.yml
+6 -9
View File
@@ -141,7 +141,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- ga.netz - ga.netz
@@ -233,30 +233,29 @@ bind9_gateway_acl:
- 192.168.10.2 - 192.168.10.2
bind9_gateway_listen_on_v6: bind9_gateway_listen_on_v6:
- none - none
bind9_gateway_listen_on: bind9_gateway_listen_on:
- any - any
#bind9_gateway_allow_transfer: {} # bind9_gateway_allow_transfer: {}
bind9_gateway_allow_transfer: bind9_gateway_allow_transfer:
- none - none
bind9_transfer_source: !!str "192.168.10.2" bind9_transfer_source: !!str "192.168.10.2"
bind9_notify_source: !!str "192.168.10.2" bind9_notify_source: !!str "192.168.10.2"
#bind9_gateway_allow_query: {} # bind9_gateway_allow_query: {}
bind9_gateway_allow_query: bind9_gateway_allow_query:
- local-net - local-net
#bind9_gateway_allow_query_cache: {} # bind9_gateway_allow_query_cache: {}
bind9_gateway_allow_query_cache: bind9_gateway_allow_query_cache:
- local-net - local-net
bind9_gateway_recursion: !!str "yes" bind9_gateway_recursion: !!str "yes"
#bind9_gateway_allow_recursion: {} # bind9_gateway_allow_recursion: {}
bind9_gateway_allow_recursion: bind9_gateway_allow_recursion:
- local-net - local-net
@@ -287,21 +286,19 @@ copy_template_files: []
# dest_path: /usr/local/src/mailsystem/conf/install_amavis.conf # dest_path: /usr/local/src/mailsystem/conf/install_amavis.conf
# --- # ---
# vars used by roles/common/tasks/config_files_mailsystem_scripts.yml # vars used by roles/common/tasks/config_files_mailsystem_scripts.yml
# --- # ---
hostname: ga-al-relay.ga.netz hostname: ga-al-relay.ga.netz
ipv4_address: 192.168.10.2 ipv4_address: 192.168.10.2
#ipv6_address: # ipv6_address:
admin_email: it@gemeinschaft-altenschlirf.org admin_email: it@gemeinschaft-altenschlirf.org
is_relay_host: !!str "false" is_relay_host: !!str "false"
sasl_auth_enable: !!str "yes" sasl_auth_enable: !!str "yes"
template_files_mailsystem_script: template_files_mailsystem_script:
- name: mailsystem_install_postfix_advanced.conf - name: mailsystem_install_postfix_advanced.conf
host_vars/ga-campus-gw-temp.ga.netz/ga-campus-gw-temp-common.yml
+9 -12
View File
@@ -5,10 +5,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True network_manage_devices: true
# Should the interfaces be reloaded after config change? # Should the interfaces be reloaded after config change?
network_interface_reload: False network_interface_reload: false
network_interface_path: /etc/network/interfaces.d network_interface_path: /etc/network/interfaces.d
network_interface_required_packages: network_interface_required_packages:
@@ -28,10 +28,10 @@ network_interfaces:
address: 172.16.72.1 address: 172.16.72.1
netmask: 24 netmask: 24
gateway: 172.16.72.254 gateway: 172.16.72.254
#nameservers: # nameservers:
# - 192.168.81.1 # - 192.168.81.1
# - 172.16.81.254 # - 172.16.81.254
#search: ga.netz ga.intra # search: ga.netz ga.intra
- device: eno2 - device: eno2
headline: eno2 - Uplink Lehrer-und Schülerdatenbank (LUSD) headline: eno2 - Uplink Lehrer-und Schülerdatenbank (LUSD)
@@ -45,7 +45,6 @@ network_interfaces:
- /sbin/ip route add 10.9.131.0/24 via 192.168.100.253 - /sbin/ip route add 10.9.131.0/24 via 192.168.100.253
- device: eno3 - device: eno3
family: inet family: inet
method: manual method: manual
@@ -109,7 +108,6 @@ network_interfaces:
netmask: 24 netmask: 24
# --- # ---
# vars used by roles/ansible_dependencies # vars used by roles/ansible_dependencies
# --- # ---
@@ -197,7 +195,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- campus.netz - campus.netz
@@ -351,23 +349,23 @@ bind9_gateway_listen_on_v6:
bind9_gateway_listen_on: bind9_gateway_listen_on:
- any - any
#bind9_gateway_allow_transfer: {} # bind9_gateway_allow_transfer: {}
bind9_gateway_allow_transfer: bind9_gateway_allow_transfer:
- none - none
bind9_transfer_source: !!str "192.168.81.1" bind9_transfer_source: !!str "192.168.81.1"
bind9_notify_source: !!str "192.168.81.1" bind9_notify_source: !!str "192.168.81.1"
#bind9_gateway_allow_query: {} # bind9_gateway_allow_query: {}
bind9_gateway_allow_query: bind9_gateway_allow_query:
- local-net - local-net
#bind9_gateway_allow_query_cache: {} # bind9_gateway_allow_query_cache: {}
bind9_gateway_allow_query_cache: bind9_gateway_allow_query_cache:
- local-net - local-net
bind9_gateway_recursion: !!str "yes" bind9_gateway_recursion: !!str "yes"
#bind9_gateway_allow_recursion: {} # bind9_gateway_allow_recursion: {}
bind9_gateway_allow_recursion: bind9_gateway_allow_recursion:
- local-net - local-net
@@ -391,4 +389,3 @@ git_firewall_repository:
root_user: root_user:
name: root name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq. password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/ga-gh-gw.oopen.de/ga-gh-gw-common.yml
+8 -9
View File
@@ -5,10 +5,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True network_manage_devices: true
# Should the interfaces be reloaded after config change? # Should the interfaces be reloaded after config change?
network_interface_reload: False network_interface_reload: false
network_interface_path: /etc/network/interfaces.d network_interface_path: /etc/network/interfaces.d
network_interface_required_packages: network_interface_required_packages:
@@ -132,7 +132,7 @@ cron_user_entries:
job: /root/bin/admin-stuff/speedtest.sh job: /root/bin/admin-stuff/speedtest.sh
#cron_user_special_time_entries: [] # cron_user_special_time_entries: []
cron_user_special_time_entries: cron_user_special_time_entries:
- name: "Restart NTP service 'ntpsec'" - name: "Restart NTP service 'ntpsec'"
@@ -208,7 +208,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- ga.netz - ga.netz
@@ -364,23 +364,23 @@ bind9_gateway_listen_on_v6:
bind9_gateway_listen_on: bind9_gateway_listen_on:
- any - any
#bind9_gateway_allow_transfer: {} # bind9_gateway_allow_transfer: {}
bind9_gateway_allow_transfer: bind9_gateway_allow_transfer:
- none - none
bind9_transfer_source: !!str "192.168.85.1" bind9_transfer_source: !!str "192.168.85.1"
bind9_notify_source: !!str "192.168.85.1" bind9_notify_source: !!str "192.168.85.1"
#bind9_gateway_allow_query: {} # bind9_gateway_allow_query: {}
bind9_gateway_allow_query: bind9_gateway_allow_query:
- local-net - local-net
#bind9_gateway_allow_query_cache: {} # bind9_gateway_allow_query_cache: {}
bind9_gateway_allow_query_cache: bind9_gateway_allow_query_cache:
- local-net - local-net
bind9_gateway_recursion: !!str "yes" bind9_gateway_recursion: !!str "yes"
#bind9_gateway_allow_recursion: {} # bind9_gateway_allow_recursion: {}
bind9_gateway_allow_recursion: bind9_gateway_allow_recursion:
- local-net - local-net
@@ -404,4 +404,3 @@ git_firewall_repository:
root_user: root_user:
name: root name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq. password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/ga-nh-gw.oopen.de/ga-nh-gw-common.yml
+10 -11
View File
@@ -5,10 +5,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True network_manage_devices: true
# Should the interfaces be reloaded after config change? # Should the interfaces be reloaded after config change?
network_interface_reload: False network_interface_reload: false
network_interface_path: /etc/network/interfaces.d network_interface_path: /etc/network/interfaces.d
network_interface_required_packages: network_interface_required_packages:
@@ -28,10 +28,10 @@ network_interfaces:
address: 172.16.80.1 address: 172.16.80.1
netmask: 24 netmask: 24
gateway: 172.16.80.254 gateway: 172.16.80.254
#nameservers: # nameservers:
# - 192.168.81.1 # - 192.168.81.1
# - 172.16.81.254 # - 172.16.81.254
#search: ga.netz ga.intra # search: ga.netz ga.intra
- device: eno2 - device: eno2
@@ -136,7 +136,7 @@ cron_user_entries:
job: /root/bin/manage-gw-config/copy_gateway-config.sh GA-NH job: /root/bin/manage-gw-config/copy_gateway-config.sh GA-NH
#cron_user_special_time_entries: [] # cron_user_special_time_entries: []
cron_user_special_time_entries: cron_user_special_time_entries:
- name: "Restart NTP service 'ntpsec'" - name: "Restart NTP service 'ntpsec'"
@@ -212,7 +212,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- ga.netz - ga.netz
@@ -368,23 +368,23 @@ bind9_gateway_listen_on_v6:
bind9_gateway_listen_on: bind9_gateway_listen_on:
- any - any
#bind9_gateway_allow_transfer: {} # bind9_gateway_allow_transfer: {}
bind9_gateway_allow_transfer: bind9_gateway_allow_transfer:
- none - none
bind9_transfer_source: !!str "192.168.81.1" bind9_transfer_source: !!str "192.168.81.1"
bind9_notify_source: !!str "192.168.81.1" bind9_notify_source: !!str "192.168.81.1"
#bind9_gateway_allow_query: {} # bind9_gateway_allow_query: {}
bind9_gateway_allow_query: bind9_gateway_allow_query:
- local-net - local-net
#bind9_gateway_allow_query_cache: {} # bind9_gateway_allow_query_cache: {}
bind9_gateway_allow_query_cache: bind9_gateway_allow_query_cache:
- local-net - local-net
bind9_gateway_recursion: !!str "yes" bind9_gateway_recursion: !!str "yes"
#bind9_gateway_allow_recursion: {} # bind9_gateway_allow_recursion: {}
bind9_gateway_allow_recursion: bind9_gateway_allow_recursion:
- local-net - local-net
@@ -408,4 +408,3 @@ git_firewall_repository:
root_user: root_user:
name: root name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq. password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/ga-st-gw-ersatz.ga.netz/ga-st-gw-ersatz-common.yml
+7 -9
View File
@@ -88,7 +88,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- ga.netz - ga.netz
@@ -102,7 +102,6 @@ resolved_fallback_nameserver:
- 127.0.0.1 - 127.0.0.1
# --- # ---
# vars used by roles/common/tasks/users.yml # vars used by roles/common/tasks/users.yml
# --- # ---
@@ -245,23 +244,23 @@ bind9_gateway_listen_on_v6:
bind9_gateway_listen_on: bind9_gateway_listen_on:
- any - any
#bind9_gateway_allow_transfer: {} # bind9_gateway_allow_transfer: {}
bind9_gateway_allow_transfer: bind9_gateway_allow_transfer:
- internaldns - internaldns
#bind9_transfer_source: !!str "192.168.11.1" # bind9_transfer_source: !!str "192.168.11.1"
#bind9_notify_source: !!str "192.168.11.1" # bind9_notify_source: !!str "192.168.11.1"
#bind9_gateway_allow_query: {} # bind9_gateway_allow_query: {}
bind9_gateway_allow_query: bind9_gateway_allow_query:
- local-net - local-net
#bind9_gateway_allow_query_cache: {} # bind9_gateway_allow_query_cache: {}
bind9_gateway_allow_query_cache: bind9_gateway_allow_query_cache:
- local-net - local-net
bind9_gateway_recursion: !!str "yes" bind9_gateway_recursion: !!str "yes"
#bind9_gateway_allow_recursion: {} # bind9_gateway_allow_recursion: {}
bind9_gateway_allow_recursion: bind9_gateway_allow_recursion:
- local-net - local-net
@@ -285,4 +284,3 @@ git_firewall_repository:
root_user: root_user:
name: root name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq. password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/ga-st-gw.ga.netz/ga-st-gw-common.yml
+9 -11
View File
@@ -5,10 +5,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True network_manage_devices: true
# Should the interfaces be reloaded after config change? # Should the interfaces be reloaded after config change?
network_interface_reload: False network_interface_reload: false
network_interface_path: /etc/network/interfaces.d network_interface_path: /etc/network/interfaces.d
network_interface_required_packages: network_interface_required_packages:
@@ -26,7 +26,7 @@ network_interfaces:
family: inet family: inet
method: static method: static
address: 192.168.11.18 address: 192.168.11.18
#gateway: 192.168.11.254 # gateway: 192.168.11.254
netmask: 24 netmask: 24
- device: lan4 - device: lan4
@@ -200,7 +200,7 @@ network_interfaces:
- 192.168.11.1 - 192.168.11.1
- 192.168.10.3 - 192.168.10.3
search: ga.netz ga.intra search: ga.netz ga.intra
#bond: # bond:
# slaves: lan3 lan11 # slaves: lan3 lan11
# # Mode 4 (802.3ad) # # Mode 4 (802.3ad)
# # # #
@@ -382,7 +382,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- ga.netz - ga.netz
@@ -451,7 +451,6 @@ cron_user_special_time_entries:
insertafter: PATH insertafter: PATH
# --- # ---
# vars used by roles/common/tasks/users.yml # vars used by roles/common/tasks/users.yml
# --- # ---
@@ -592,23 +591,23 @@ bind9_gateway_listen_on_v6:
bind9_gateway_listen_on: bind9_gateway_listen_on:
- any - any
#bind9_gateway_allow_transfer: {} # bind9_gateway_allow_transfer: {}
bind9_gateway_allow_transfer: bind9_gateway_allow_transfer:
- internaldns - internaldns
bind9_transfer_source: !!str "192.168.11.1" bind9_transfer_source: !!str "192.168.11.1"
bind9_notify_source: !!str "192.168.11.1" bind9_notify_source: !!str "192.168.11.1"
#bind9_gateway_allow_query: {} # bind9_gateway_allow_query: {}
bind9_gateway_allow_query: bind9_gateway_allow_query:
- local-net - local-net
#bind9_gateway_allow_query_cache: {} # bind9_gateway_allow_query_cache: {}
bind9_gateway_allow_query_cache: bind9_gateway_allow_query_cache:
- local-net - local-net
bind9_gateway_recursion: !!str "yes" bind9_gateway_recursion: !!str "yes"
#bind9_gateway_allow_recursion: {} # bind9_gateway_allow_recursion: {}
bind9_gateway_allow_recursion: bind9_gateway_allow_recursion:
- local-net - local-net
@@ -632,4 +631,3 @@ git_firewall_repository:
root_user: root_user:
name: root name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq. password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/ga-st-kvm1.ga.netz/ga-st-kvm1-common.yml
-1
View File
@@ -123,7 +123,6 @@ sshd_permit_root_login: !!str "prohibit-password"
# --- # ---
# ============================== # ==============================
host_vars/ga-st-kvm5.ga.netz/ga-st-kvm5-common.yml
+2 -3
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True network_manage_devices: true
# Should the interfaces be reloaded after config change? # Should the interfaces be reloaded after config change?
network_interface_reload: False network_interface_reload: false
network_interface_path: /etc/network/interfaces.d network_interface_path: /etc/network/interfaces.d
network_interface_required_packages: network_interface_required_packages:
@@ -195,7 +195,6 @@ sshd_permit_root_login: !!str "prohibit-password"
# --- # ---
# ============================== # ==============================
host_vars/ga-st-lxc1.ga.netz/ga-st-lxc1-common.yml
+5 -6
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True network_manage_devices: true
# Should the interfaces be reloaded after config change? # Should the interfaces be reloaded after config change?
network_interface_reload: False network_interface_reload: false
network_interface_path: /etc/network/interfaces.d network_interface_path: /etc/network/interfaces.d
network_interface_required_packages: network_interface_required_packages:
@@ -95,10 +95,10 @@ network_interfaces:
# nameservers: # nameservers:
# - "194.150.168.168" # dns.as250.net # - "194.150.168.168" # dns.as250.net
# - "91.239.100.100" # anycast.censurfridns.dk # - "91.239.100.100" # anycast.censurfridns.dk
#nameservers: # nameservers:
# - 192.168.11.1 # - 192.168.11.1
# - 192.168.10.3 # - 192.168.10.3
#search: ga.netz ga.intra # search: ga.netz ga.intra
# --- # ---
@@ -185,7 +185,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- ga.netz - ga.netz
@@ -311,4 +311,3 @@ sudo_users:
# --- # ---
root_user: {} root_user: {}
host_vars/ga-st-mail.ga.netz/ga-st-mail-common.yml
+6 -7
View File
@@ -86,7 +86,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- ga.netz - ga.netz
@@ -242,21 +242,20 @@ copy_plain_files_postfwd_host_specific:
dest_path: /etc/postfix/postfwd.cf dest_path: /etc/postfix/postfwd.cf
#copy_template_files: [] # copy_template_files: []
# #
# - name: mailsystem_install_amavis.conf # - name: mailsystem_install_amavis.conf
# src_path: usr/local/src/mailsystem/conf/install_amavis.conf.j2 # src_path: usr/local/src/mailsystem/conf/install_amavis.conf.j2
# dest_path: /usr/local/src/mailsystem/conf/install_amavis.conf # dest_path: /usr/local/src/mailsystem/conf/install_amavis.conf
# --- # ---
# vars used by roles/common/tasks/config_files_mailsystem_scripts.yml # vars used by roles/common/tasks/config_files_mailsystem_scripts.yml
# --- # ---
hostname: mx.gemeinschaft-altenschlirf.de hostname: mx.gemeinschaft-altenschlirf.de
ipv4_address: 192.168.11.2 ipv4_address: 192.168.11.2
#ipv6_address: # ipv6_address:
admin_email: it@gemeinschaft-altenschlirf.org admin_email: it@gemeinschaft-altenschlirf.org
is_relay_host: !!str "false" is_relay_host: !!str "false"
@@ -270,7 +269,7 @@ db_in_use: !!str "true"
postfix_db_type: PostgreSQL postfix_db_type: PostgreSQL
postfix_db_name: postfix postfix_db_name: postfix
postfix_db_user: postfix postfix_db_user: postfix
#postfix_db_host: # postfix_db_host:
postfix_db_pass: R_wuKauoTE7+AJg9 postfix_db_pass: R_wuKauoTE7+AJg9
# install_amavis.conf # install_amavis.conf
@@ -317,10 +316,10 @@ autoreply_hostname: autoreply.gemeinschaft-altenschlirf.de
roundcube_db_type: pgsql roundcube_db_type: pgsql
roundcube_db_name: roundcubemail roundcube_db_name: roundcubemail
roundcube_db_user: roundcube roundcube_db_user: roundcube
#roundcube_db_host: # roundcube_db_host:
roundcube_db_pass: 'K3TbMmTfnCXdj4vz' roundcube_db_pass: 'K3TbMmTfnCXdj4vz'
#roundcube_acl_plugin: true # roundcube_acl_plugin: true
roundcube_product_name: Gemeinschaft Altenschlirf - Webmailer roundcube_product_name: Gemeinschaft Altenschlirf - Webmailer
roundcube_support_url: https://www.gemeinschaft-altenschlirf.de roundcube_support_url: https://www.gemeinschaft-altenschlirf.de
host_vars/ga-st-mm.ga.netz/ga-st-mm-common.yml
+1 -2
View File
@@ -88,7 +88,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- ga.netz - ga.netz
@@ -209,7 +209,6 @@ sudo_users:
# --- # ---
# --- # ---
# vars used by roles/common/tasks/config_files_mailsystem_scripts.yml # vars used by roles/common/tasks/config_files_mailsystem_scripts.yml
# --- # ---
host_vars/ga-st-services.ga.netz/ga-st-services-common.yml
+3 -4
View File
@@ -86,7 +86,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- ga.netz - ga.netz
@@ -195,19 +195,18 @@ sudo_users:
# Postfix Firewall postfwd # Postfix Firewall postfwd
# #
#- name: postfwd.wl-user # - name: postfwd.wl-user
# src_path: ga-st-mail/etc/postfix/postfwd.wl-user # src_path: ga-st-mail/etc/postfix/postfwd.wl-user
# dest_path: /etc/postfix/postfwd.wl-user # dest_path: /etc/postfix/postfwd.wl-user
#copy_template_files: [] # copy_template_files: []
# #
# - name: mailsystem_install_amavis.conf # - name: mailsystem_install_amavis.conf
# src_path: usr/local/src/mailsystem/conf/install_amavis.conf.j2 # src_path: usr/local/src/mailsystem/conf/install_amavis.conf.j2
# dest_path: /usr/local/src/mailsystem/conf/install_amavis.conf # dest_path: /usr/local/src/mailsystem/conf/install_amavis.conf
# --- # ---
# vars used by roles/common/tasks/config_files_mailsystem_scripts.yml # vars used by roles/common/tasks/config_files_mailsystem_scripts.yml
# --- # ---
host_vars/git.oopen.de/git-common.yml
+1 -2
View File
@@ -83,7 +83,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- oopen.de - oopen.de
@@ -145,4 +145,3 @@ git_firewall_repository:
root_user: root_user:
name: root name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq. password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/git.warenform.de/git-common.yml
-2
View File
@@ -83,7 +83,6 @@ resolved_nameserver:
- 2a01:4f8:0:1::add:9999 - 2a01:4f8:0:1::add:9999
# --- # ---
# vars used by roles/common/tasks/users.yml # vars used by roles/common/tasks/users.yml
# --- # ---
@@ -133,4 +132,3 @@ git_firewall_repository:
root_user: root_user:
name: root name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq. password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/gitea.so36.net/gitea-common.yml
+7 -7
View File
@@ -1,4 +1,5 @@
--- ---
# yamllint disable rule:line-length
# --- # ---
# vars used by role firewall # vars used by role firewall
@@ -68,7 +69,7 @@ sshd_allowed_users:
# - diffie-hellman-group-exchange-sha256 # - diffie-hellman-group-exchange-sha256
# - diffie-hellman-group14-sha1 # - diffie-hellman-group14-sha1
# #
#sshd_kexalgorithms: {} # sshd_kexalgorithms: {}
sshd_kexalgorithms: sshd_kexalgorithms:
- curve25519-sha256 - curve25519-sha256
- curve25519-sha256@libssh.org - curve25519-sha256@libssh.org
@@ -83,7 +84,7 @@ sshd_kexalgorithms:
# - chacha20-poly1305@openssh.com # - chacha20-poly1305@openssh.com
# - aes256-gcm@openssh.com # - aes256-gcm@openssh.com
# - aes256-ctr # - aes256-ctr
#sshd_ciphers: {} # sshd_ciphers: {}
sshd_ciphers: sshd_ciphers:
- chacha20-poly1305@openssh.com - chacha20-poly1305@openssh.com
- aes256-gcm@openssh.com - aes256-gcm@openssh.com
@@ -92,13 +93,13 @@ sshd_ciphers:
- aes192-ctr - aes192-ctr
- aes128-ctr - aes128-ctr
#sshd_macs: {} # sshd_macs: {}
sshd_macs: sshd_macs:
- hmac-sha2-256-etm@openssh.com - hmac-sha2-256-etm@openssh.com
- hmac-sha2-512-etm@openssh.com - hmac-sha2-512-etm@openssh.com
- umac-128-etm@openssh.com - umac-128-etm@openssh.com
#sshd_hostkeyalgorithms: {} # sshd_hostkeyalgorithms: {}
sshd_hostkeyalgorithms: sshd_hostkeyalgorithms:
- ssh-ed25519 - ssh-ed25519
- ssh-ed25519-cert-v01@openssh.com - ssh-ed25519-cert-v01@openssh.com
@@ -107,12 +108,12 @@ sshd_hostkeyalgorithms:
- rsa-sha2-256-cert-v01@openssh.com - rsa-sha2-256-cert-v01@openssh.com
- rsa-sha2-512-cert-v01@openssh.com - rsa-sha2-512-cert-v01@openssh.com
#sshd_kexalgorithms: # sshd_kexalgorithms:
# - curve25519-sha256@libssh.org # - curve25519-sha256@libssh.org
# - diffie-hellman-group-exchange-sha256 # - diffie-hellman-group-exchange-sha256
# - diffie-hellman-group14-sha1 # - diffie-hellman-group14-sha1
#sshd_ciphers: # sshd_ciphers:
# - chacha20-poly1305@openssh.com # - chacha20-poly1305@openssh.com
# - aes256-gcm@openssh.com # - aes256-gcm@openssh.com
# - aes256-ctr # - aes256-ctr
@@ -272,4 +273,3 @@ git_firewall_repository:
root_user: root_user:
name: root name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq. password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/gw-123.oopen.de/gw-123-common.yml
+1 -2
View File
@@ -98,7 +98,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- 123.netz - 123.netz
@@ -219,4 +219,3 @@ git_firewall_repository:
root_user: root_user:
name: root name: root
password: $y$j9T$IVBTpn.OrI6YiQ9q3fA8b1$Y1bmID5yXJbKfoLFt1VmQs6LezeTj5/1M9ppZBD2Pn4 password: $y$j9T$IVBTpn.OrI6YiQ9q3fA8b1$Y1bmID5yXJbKfoLFt1VmQs6LezeTj5/1M9ppZBD2Pn4
host_vars/gw-ah.oopen.de/gw-ah-common.yml
+5 -6
View File
@@ -93,7 +93,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- kanzlei-kiel.netz - kanzlei-kiel.netz
@@ -232,23 +232,23 @@ bind9_gateway_listen_on_v6:
bind9_gateway_listen_on: bind9_gateway_listen_on:
- any - any
#bind9_gateway_allow_transfer: {} # bind9_gateway_allow_transfer: {}
bind9_gateway_allow_transfer: bind9_gateway_allow_transfer:
- internaldns - internaldns
bind9_transfer_source: !!str "192.168.100.1" bind9_transfer_source: !!str "192.168.100.1"
bind9_notify_source: !!str "192.168.100.1" bind9_notify_source: !!str "192.168.100.1"
#bind9_gateway_allow_query: {} # bind9_gateway_allow_query: {}
bind9_gateway_allow_query: bind9_gateway_allow_query:
- local-net - local-net
#bind9_gateway_allow_query_cache: {} # bind9_gateway_allow_query_cache: {}
bind9_gateway_allow_query_cache: bind9_gateway_allow_query_cache:
- local-net - local-net
bind9_gateway_recursion: !!str "yes" bind9_gateway_recursion: !!str "yes"
#bind9_gateway_allow_recursion: {} # bind9_gateway_allow_recursion: {}
bind9_gateway_allow_recursion: bind9_gateway_allow_recursion:
- local-net - local-net
@@ -271,4 +271,3 @@ git_firewall_repository:
root_user: root_user:
name: root name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq. password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/gw-ak.oopen.de/gw-ak-common.yml
+5 -6
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True network_manage_devices: true
# Should the interfaces be reloaded after config change? # Should the interfaces be reloaded after config change?
network_interface_reload: False network_interface_reload: false
network_interface_path: /etc/network/interfaces.d network_interface_path: /etc/network/interfaces.d
network_interface_required_packages: network_interface_required_packages:
@@ -29,10 +29,10 @@ network_interfaces:
address: 172.16.0.1 address: 172.16.0.1
netmask: 24 netmask: 24
gateway: 172.16.0.254 gateway: 172.16.0.254
#nameservers: # nameservers:
# - 127.0.0.1 # - 127.0.0.1
# - 192.168.0.1 # - 192.168.0.1
#search: ebs.netz kanzlei-kiel.netz elster.netz # search: ebs.netz kanzlei-kiel.netz elster.netz
- device: eno2 - device: eno2
@@ -143,7 +143,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- ak.netz - ak.netz
@@ -244,4 +244,3 @@ bind9_gateway_listen_on:
root_user: root_user:
name: root name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq. password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/gw-akb.oopen.de/gw-akb-common.yml
+2 -3
View File
@@ -26,7 +26,7 @@ copy_additional_plain_files_sysctl:
# vars used by roles/common/tasks/sshd.yml # vars used by roles/common/tasks/sshd.yml
# --- # ---
#sshd_hostkeyalgorithms: # sshd_hostkeyalgorithms:
# - ssh-ed25519 # - ssh-ed25519
# - ssh-ed25519-cert-v01@openssh.com # - ssh-ed25519-cert-v01@openssh.com
# - rsa-sha2-256 # - rsa-sha2-256
@@ -98,7 +98,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- akb.netz - akb.netz
@@ -214,4 +214,3 @@ bind9_gateway_listen_on:
root_user: root_user:
name: root name: root
password: $y$j9T$IVBTpn.OrI6YiQ9q3fA8b1$Y1bmID5yXJbKfoLFt1VmQs6LezeTj5/1M9ppZBD2Pn4 password: $y$j9T$IVBTpn.OrI6YiQ9q3fA8b1$Y1bmID5yXJbKfoLFt1VmQs6LezeTj5/1M9ppZBD2Pn4
host_vars/gw-b3.oopen.de/gw-b3-common.yml
+1 -4
View File
@@ -98,7 +98,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- b3-bornim.netz - b3-bornim.netz
@@ -166,8 +166,6 @@ cron_user_special_time_entries:
insertafter: PATH insertafter: PATH
# --- # ---
# vars used by roles/common/tasks/users.yml # vars used by roles/common/tasks/users.yml
# --- # ---
@@ -204,4 +202,3 @@ git_firewall_repository:
root_user: root_user:
name: root name: root
password: $y$j9T$IVBTpn.OrI6YiQ9q3fA8b1$Y1bmID5yXJbKfoLFt1VmQs6LezeTj5/1M9ppZBD2Pn4 password: $y$j9T$IVBTpn.OrI6YiQ9q3fA8b1$Y1bmID5yXJbKfoLFt1VmQs6LezeTj5/1M9ppZBD2Pn4
host_vars/gw-blkr.oopen.de/gw-blkr-common.yml
+6 -7
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True network_manage_devices: true
# Should the interfaces be reloaded after config change? # Should the interfaces be reloaded after config change?
network_interface_reload: False network_interface_reload: false
network_interface_path: /etc/network/interfaces.d network_interface_path: /etc/network/interfaces.d
network_interface_required_packages: network_interface_required_packages:
@@ -29,10 +29,10 @@ network_interfaces:
address: 172.16.162.1 address: 172.16.162.1
netmask: 24 netmask: 24
gateway: 172.16.162.254 gateway: 172.16.162.254
#nameservers: # nameservers:
# - 127.0.0.1 # - 127.0.0.1
# - 192.168.162.1 # - 192.168.162.1
#search: blkr.netz # search: blkr.netz
- device: eno2 - device: eno2
@@ -123,7 +123,7 @@ cron_user_entries:
hour: 0-8 hour: 0-8
job: /root/bin/admin-stuff/speedtest.sh job: /root/bin/admin-stuff/speedtest.sh
#cron_user_special_time_entries: [] # cron_user_special_time_entries: []
cron_user_special_time_entries: cron_user_special_time_entries:
- name: "Restart NTP service 'ntpsec'" - name: "Restart NTP service 'ntpsec'"
@@ -208,7 +208,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- blkr.netz - blkr.netz
@@ -287,4 +287,3 @@ git_firewall_repository:
root_user: root_user:
name: root name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq. password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/gw-campus.oopen.de/gw-campus-common.yml
+10 -13
View File
@@ -5,10 +5,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True network_manage_devices: true
# Should the interfaces be reloaded after config change? # Should the interfaces be reloaded after config change?
network_interface_reload: False network_interface_reload: false
network_interface_path: /etc/network/interfaces.d network_interface_path: /etc/network/interfaces.d
network_interface_required_packages: network_interface_required_packages:
@@ -28,10 +28,10 @@ network_interfaces:
address: 172.16.72.1 address: 172.16.72.1
netmask: 24 netmask: 24
gateway: 172.16.72.254 gateway: 172.16.72.254
#nameservers: # nameservers:
# - 192.168.81.1 # - 192.168.81.1
# - 172.16.81.254 # - 172.16.81.254
#search: ga.netz ga.intra # search: ga.netz ga.intra
- device: eno2 - device: eno2
headline: eno2 - Uplink Lehrer-und Schülerdatenbank (LUSD) headline: eno2 - Uplink Lehrer-und Schülerdatenbank (LUSD)
@@ -45,7 +45,6 @@ network_interfaces:
- /sbin/ip route add 10.9.131.0/24 via 192.168.100.253 - /sbin/ip route add 10.9.131.0/24 via 192.168.100.253
- device: eno3 - device: eno3
family: inet family: inet
method: manual method: manual
@@ -105,11 +104,10 @@ network_interfaces:
family: inet family: inet
method: static method: static
address: 192.168.11.72 address: 192.168.11.72
#gateway: 192.168.11.254 # gateway: 192.168.11.254
netmask: 24 netmask: 24
# --- # ---
# vars used by roles/ansible_dependencies # vars used by roles/ansible_dependencies
# --- # ---
@@ -247,7 +245,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- campus.netz - campus.netz
@@ -401,23 +399,23 @@ bind9_gateway_listen_on_v6:
bind9_gateway_listen_on: bind9_gateway_listen_on:
- any - any
#bind9_gateway_allow_transfer: {} # bind9_gateway_allow_transfer: {}
bind9_gateway_allow_transfer: bind9_gateway_allow_transfer:
- none - none
bind9_transfer_source: !!str "192.168.81.1" bind9_transfer_source: !!str "192.168.81.1"
bind9_notify_source: !!str "192.168.81.1" bind9_notify_source: !!str "192.168.81.1"
#bind9_gateway_allow_query: {} # bind9_gateway_allow_query: {}
bind9_gateway_allow_query: bind9_gateway_allow_query:
- local-net - local-net
#bind9_gateway_allow_query_cache: {} # bind9_gateway_allow_query_cache: {}
bind9_gateway_allow_query_cache: bind9_gateway_allow_query_cache:
- local-net - local-net
bind9_gateway_recursion: !!str "yes" bind9_gateway_recursion: !!str "yes"
#bind9_gateway_allow_recursion: {} # bind9_gateway_allow_recursion: {}
bind9_gateway_allow_recursion: bind9_gateway_allow_recursion:
- local-net - local-net
@@ -441,4 +439,3 @@ git_firewall_repository:
root_user: root_user:
name: root name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq. password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/gw-ckubu.local.netz/gw-ckubu-common.yml
+1 -3
View File
@@ -89,7 +89,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- local.netz - local.netz
@@ -149,7 +149,6 @@ cron_user_entries:
job: /root/bin/admin-stuff/speedtest.sh job: /root/bin/admin-stuff/speedtest.sh
cron_user_special_time_entries: cron_user_special_time_entries:
- name: "Restart NTP service 'ntpsec'" - name: "Restart NTP service 'ntpsec'"
@@ -214,4 +213,3 @@ git_firewall_repository:
root_user: root_user:
name: root name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq. password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/gw-d11.oopen.de/gw-d11-common.yml
+1 -2
View File
@@ -98,7 +98,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- wf.netz - wf.netz
@@ -215,4 +215,3 @@ bind9_gateway_listen_on:
root_user: root_user:
name: root name: root
password: $y$j9T$IVBTpn.OrI6YiQ9q3fA8b1$Y1bmID5yXJbKfoLFt1VmQs6LezeTj5/1M9ppZBD2Pn4 password: $y$j9T$IVBTpn.OrI6YiQ9q3fA8b1$Y1bmID5yXJbKfoLFt1VmQs6LezeTj5/1M9ppZBD2Pn4
host_vars/gw-dissens.oopen.de/gw-dissens-common.yml
+7 -8
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True network_manage_devices: true
# Should the interfaces be reloaded after config change? # Should the interfaces be reloaded after config change?
network_interface_reload: False network_interface_reload: false
network_interface_path: /etc/network/interfaces.d network_interface_path: /etc/network/interfaces.d
network_interface_required_packages: network_interface_required_packages:
@@ -186,7 +186,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- dissens.netz - dissens.netz
@@ -319,21 +319,21 @@ bind9_gateway_listen_on_v6:
bind9_gateway_listen_on: bind9_gateway_listen_on:
- any - any
#bind9_gateway_allow_transfer: {} # bind9_gateway_allow_transfer: {}
bind9_transfer_source: !!str "192.168.132.1" bind9_transfer_source: !!str "192.168.132.1"
bind9_notify_source: !!str "192.168.132.1" bind9_notify_source: !!str "192.168.132.1"
#bind9_gateway_allow_query: {} # bind9_gateway_allow_query: {}
bind9_gateway_allow_query: bind9_gateway_allow_query:
- local-net - local-net
#bind9_gateway_allow_query_cache: {} # bind9_gateway_allow_query_cache: {}
bind9_gateway_allow_query_cache: bind9_gateway_allow_query_cache:
- local-net - local-net
bind9_gateway_recursion: !!str "yes" bind9_gateway_recursion: !!str "yes"
#bind9_gateway_allow_recursion: {} # bind9_gateway_allow_recursion: {}
bind9_gateway_allow_recursion: bind9_gateway_allow_recursion:
- local-net - local-net
@@ -356,4 +356,3 @@ git_firewall_repository:
root_user: root_user:
name: root name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq. password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/gw-ebs.oopen.de/gw-ebs-common.yml
+7 -8
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True network_manage_devices: true
# Should the interfaces be reloaded after config change? # Should the interfaces be reloaded after config change?
network_interface_reload: False network_interface_reload: false
network_interface_path: /etc/network/interfaces.d network_interface_path: /etc/network/interfaces.d
network_interface_required_packages: network_interface_required_packages:
@@ -139,7 +139,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- ebs.netz - ebs.netz
@@ -280,23 +280,23 @@ bind9_gateway_listen_on_v6:
bind9_gateway_listen_on: bind9_gateway_listen_on:
- any - any
#bind9_gateway_allow_transfer: {} # bind9_gateway_allow_transfer: {}
bind9_gateway_allow_transfer: bind9_gateway_allow_transfer:
- internaldns - internaldns
bind9_transfer_source: !!str "192.168.182.1" bind9_transfer_source: !!str "192.168.182.1"
bind9_notify_source: !!str "192.168.182.1" bind9_notify_source: !!str "192.168.182.1"
#bind9_gateway_allow_query: {} # bind9_gateway_allow_query: {}
bind9_gateway_allow_query: bind9_gateway_allow_query:
- local-net - local-net
#bind9_gateway_allow_query_cache: {} # bind9_gateway_allow_query_cache: {}
bind9_gateway_allow_query_cache: bind9_gateway_allow_query_cache:
- local-net - local-net
bind9_gateway_recursion: !!str "yes" bind9_gateway_recursion: !!str "yes"
#bind9_gateway_allow_recursion: {} # bind9_gateway_allow_recursion: {}
bind9_gateway_allow_recursion: bind9_gateway_allow_recursion:
- local-net - local-net
@@ -319,4 +319,3 @@ git_firewall_repository:
root_user: root_user:
name: root name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq. password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/gw-elster.oopen.de/gw-elster-common.yml
+10 -12
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True network_manage_devices: true
# Should the interfaces be reloaded after config change? # Should the interfaces be reloaded after config change?
network_interface_reload: False network_interface_reload: false
network_interface_path: /etc/network/interfaces.d network_interface_path: /etc/network/interfaces.d
network_interface_required_packages: network_interface_required_packages:
@@ -29,10 +29,10 @@ network_interfaces:
address: 172.16.202.1 address: 172.16.202.1
netmask: 24 netmask: 24
gateway: 172.16.202.254 gateway: 172.16.202.254
#nameservers: # nameservers:
# - 127.0.0.1 # - 127.0.0.1
# - 192.168.202.1 # - 192.168.202.1
#search: elster.netz ebs.netz # search: elster.netz ebs.netz
- device: eno2 - device: eno2
@@ -124,7 +124,7 @@ cron_user_entries:
job: /root/bin/admin-stuff/speedtest.sh job: /root/bin/admin-stuff/speedtest.sh
#cron_user_special_time_entries: [] # cron_user_special_time_entries: []
cron_user_special_time_entries: cron_user_special_time_entries:
- name: "Restart NTP service 'ntpsec'" - name: "Restart NTP service 'ntpsec'"
@@ -209,7 +209,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- elster.netz - elster.netz
@@ -222,7 +222,6 @@ resolved_fallback_nameserver:
- 194.150.168.168 - 194.150.168.168
# --- # ---
# vars used by roles/common/tasks/users.yml # vars used by roles/common/tasks/users.yml
# --- # ---
@@ -291,23 +290,23 @@ bind9_gateway_listen_on_v6:
bind9_gateway_listen_on: bind9_gateway_listen_on:
- any - any
#bind9_gateway_allow_transfer: {} # bind9_gateway_allow_transfer: {}
bind9_gateway_allow_transfer: bind9_gateway_allow_transfer:
- internaldns - internaldns
bind9_transfer_source: !!str "192.168.202.1" bind9_transfer_source: !!str "192.168.202.1"
bind9_notify_source: !!str "192.168.202.1" bind9_notify_source: !!str "192.168.202.1"
#bind9_gateway_allow_query: {} # bind9_gateway_allow_query: {}
bind9_gateway_allow_query: bind9_gateway_allow_query:
- local-net - local-net
#bind9_gateway_allow_query_cache: {} # bind9_gateway_allow_query_cache: {}
bind9_gateway_allow_query_cache: bind9_gateway_allow_query_cache:
- local-net - local-net
bind9_gateway_recursion: !!str "yes" bind9_gateway_recursion: !!str "yes"
#bind9_gateway_allow_recursion: {} # bind9_gateway_allow_recursion: {}
bind9_gateway_allow_recursion: bind9_gateway_allow_recursion:
- local-net - local-net
@@ -331,4 +330,3 @@ git_firewall_repository:
root_user: root_user:
name: root name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq. password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/gw-fhxb.oopen.de/gw-fhxb-common.yml
+5 -6
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True network_manage_devices: true
# Should the interfaces be reloaded after config change? # Should the interfaces be reloaded after config change?
network_interface_reload: False network_interface_reload: false
network_interface_path: /etc/network/interfaces.d network_interface_path: /etc/network/interfaces.d
network_interface_required_packages: network_interface_required_packages:
@@ -29,10 +29,10 @@ network_interfaces:
address: 172.16.192.1 address: 172.16.192.1
netmask: 24 netmask: 24
gateway: 172.16.192.254 gateway: 172.16.192.254
#nameservers: # nameservers:
# - 127.0.0.1 # - 127.0.0.1
# - 192.168.192.1 # - 192.168.192.1
#search: ebs.netz kanzlei-kiel.netz elster.netz # search: ebs.netz kanzlei-kiel.netz elster.netz
- device: eno2 - device: eno2
@@ -143,7 +143,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- fhxb.netz - fhxb.netz
@@ -274,4 +274,3 @@ git_firewall_repository:
root_user: root_user:
name: root name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq. password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/gw-flr.oopen.de/gw-flr-common.yml
+6 -7
View File
@@ -5,10 +5,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True network_manage_devices: true
# Should the interfaces be reloaded after config change? # Should the interfaces be reloaded after config change?
network_interface_reload: False network_interface_reload: false
network_interface_path: /etc/network/interfaces.d network_interface_path: /etc/network/interfaces.d
network_interface_required_packages: network_interface_required_packages:
@@ -28,10 +28,10 @@ network_interfaces:
address: 172.16.102.1 address: 172.16.102.1
netmask: 24 netmask: 24
gateway: 172.16.102.254 gateway: 172.16.102.254
#nameservers: # nameservers:
# - 127.0.0.1 # - 127.0.0.1
# - 172.16.102.254 # - 172.16.102.254
#search: flr.netz # search: flr.netz
- device: eno2 - device: eno2
@@ -122,7 +122,7 @@ cron_user_entries:
job: /root/bin/admin-stuff/speedtest.sh job: /root/bin/admin-stuff/speedtest.sh
#cron_user_special_time_entries: [] # cron_user_special_time_entries: []
cron_user_special_time_entries: cron_user_special_time_entries:
- name: "Restart NTP service 'ntpsec'" - name: "Restart NTP service 'ntpsec'"
@@ -207,7 +207,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- flr.netz - flr.netz
@@ -286,4 +286,3 @@ git_firewall_repository:
root_user: root_user:
name: root name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq. password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/gw-fm.oopen.de/gw-fm-common.yml
+3 -4
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True network_manage_devices: true
# Should the interfaces be reloaded after config change? # Should the interfaces be reloaded after config change?
network_interface_reload: False network_interface_reload: false
network_interface_path: /etc/network/interfaces.d network_interface_path: /etc/network/interfaces.d
network_interface_required_packages: network_interface_required_packages:
@@ -160,7 +160,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- fm.netz - fm.netz
@@ -295,4 +295,3 @@ git_firewall_repository:
root_user: root_user:
name: root name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq. password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/gw-irights.oopen.de/gw-irights-common.yml
+4 -5
View File
@@ -5,10 +5,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True network_manage_devices: true
# Should the interfaces be reloaded after config change? # Should the interfaces be reloaded after config change?
network_interface_reload: False network_interface_reload: false
network_interface_path: /etc/network/interfaces.d network_interface_path: /etc/network/interfaces.d
network_interface_required_packages: network_interface_required_packages:
@@ -119,7 +119,7 @@ cron_user_entries:
job: /root/bin/admin-stuff/speedtest.sh job: /root/bin/admin-stuff/speedtest.sh
#cron_user_special_time_entries: [] # cron_user_special_time_entries: []
cron_user_special_time_entries: cron_user_special_time_entries:
- name: "Restart NTP service 'ntpsec'" - name: "Restart NTP service 'ntpsec'"
@@ -204,7 +204,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- oopen.de - oopen.de
@@ -282,4 +282,3 @@ git_firewall_repository:
root_user: root_user:
name: root name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq. password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/gw-kb.oopen.de/gw-kb-common.yml
+4 -5
View File
@@ -5,10 +5,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True network_manage_devices: true
# Should the interfaces be reloaded after config change? # Should the interfaces be reloaded after config change?
network_interface_reload: False network_interface_reload: false
network_interface_path: /etc/network/interfaces.d network_interface_path: /etc/network/interfaces.d
network_interface_required_packages: network_interface_required_packages:
@@ -100,7 +100,7 @@ cron_user_entries:
job: /root/bin/manage-gw-config/copy_gateway-config.sh ANW-KB job: /root/bin/manage-gw-config/copy_gateway-config.sh ANW-KB
#cron_user_special_time_entries: [] # cron_user_special_time_entries: []
cron_user_special_time_entries: cron_user_special_time_entries:
- name: "Check if Postfix Service is running at boot time" - name: "Check if Postfix Service is running at boot time"
@@ -195,7 +195,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- anw-kb.netz - anw-kb.netz
@@ -274,4 +274,3 @@ git_firewall_repository:
root_user: root_user:
name: root name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq. password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/gw-km.oopen.de/gw-km-common.yml
+4 -5
View File
@@ -5,10 +5,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True network_manage_devices: true
# Should the interfaces be reloaded after config change? # Should the interfaces be reloaded after config change?
network_interface_reload: False network_interface_reload: false
network_interface_path: /etc/network/interfaces.d network_interface_path: /etc/network/interfaces.d
network_interface_required_packages: network_interface_required_packages:
@@ -109,7 +109,7 @@ cron_user_entries:
hour: 0-8 hour: 0-8
job: /root/bin/admin-stuff/speedtest.sh job: /root/bin/admin-stuff/speedtest.sh
#cron_user_special_time_entries: [] # cron_user_special_time_entries: []
cron_user_special_time_entries: cron_user_special_time_entries:
- name: "Restart NTP service 'ntpsec'" - name: "Restart NTP service 'ntpsec'"
@@ -194,7 +194,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- anw-km.netz - anw-km.netz
@@ -273,4 +273,3 @@ git_firewall_repository:
root_user: root_user:
name: root name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq. password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/gw-mbr.oopen.de/gw-mbr-common.yml
+7 -8
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True network_manage_devices: true
# Should the interfaces be reloaded after config change? # Should the interfaces be reloaded after config change?
network_interface_reload: False network_interface_reload: false
network_interface_path: /etc/network/interfaces.d network_interface_path: /etc/network/interfaces.d
network_interface_required_packages: network_interface_required_packages:
@@ -207,7 +207,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- mbr-bln.netz - mbr-bln.netz
@@ -340,21 +340,21 @@ bind9_gateway_listen_on_v6:
bind9_gateway_listen_on: bind9_gateway_listen_on:
- any - any
#bind9_gateway_allow_transfer: {} # bind9_gateway_allow_transfer: {}
bind9_transfer_source: !!str "192.168.112.1" bind9_transfer_source: !!str "192.168.112.1"
bind9_notify_source: !!str "192.168.112.1" bind9_notify_source: !!str "192.168.112.1"
#bind9_gateway_allow_query: {} # bind9_gateway_allow_query: {}
bind9_gateway_allow_query: bind9_gateway_allow_query:
- local-net - local-net
#bind9_gateway_allow_query_cache: {} # bind9_gateway_allow_query_cache: {}
bind9_gateway_allow_query_cache: bind9_gateway_allow_query_cache:
- local-net - local-net
bind9_gateway_recursion: !!str "yes" bind9_gateway_recursion: !!str "yes"
#bind9_gateway_allow_recursion: {} # bind9_gateway_allow_recursion: {}
bind9_gateway_allow_recursion: bind9_gateway_allow_recursion:
- local-net - local-net
@@ -377,4 +377,3 @@ git_firewall_repository:
root_user: root_user:
name: root name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq. password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/gw-opp-neu.opp.netz/gw-opp-neu-common.yml
+5 -6
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True network_manage_devices: true
# Should the interfaces be reloaded after config change? # Should the interfaces be reloaded after config change?
network_interface_reload: False network_interface_reload: false
network_interface_path: /etc/network/interfaces.d network_interface_path: /etc/network/interfaces.d
network_interface_required_packages: network_interface_required_packages:
@@ -29,10 +29,10 @@ network_interfaces:
address: 172.16.62.2 address: 172.16.62.2
netmask: 24 netmask: 24
gateway: 172.16.62.254 gateway: 172.16.62.254
#nameservers: # nameservers:
# - 127.0.0.1 # - 127.0.0.1
# - 192.168.62.1 # - 192.168.62.1
#search: ebs.netz kanzlei-kiel.netz elster.netz # search: ebs.netz kanzlei-kiel.netz elster.netz
- device: eno2 - device: eno2
@@ -143,7 +143,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- opp.netz - opp.netz
@@ -233,4 +233,3 @@ git_firewall_repository:
root_user: root_user:
name: root name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq. password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/gw-opp.oopen.de/gw-opp-common.yml
+5 -6
View File
@@ -6,10 +6,10 @@
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True network_manage_devices: true
# Should the interfaces be reloaded after config change? # Should the interfaces be reloaded after config change?
network_interface_reload: False network_interface_reload: false
network_interface_path: /etc/network/interfaces.d network_interface_path: /etc/network/interfaces.d
network_interface_required_packages: network_interface_required_packages:
@@ -29,10 +29,10 @@ network_interfaces:
address: 172.16.62.1 address: 172.16.62.1
netmask: 24 netmask: 24
gateway: 172.16.62.254 gateway: 172.16.62.254
#nameservers: # nameservers:
# - 127.0.0.1 # - 127.0.0.1
# - 192.168.62.1 # - 192.168.62.1
#search: ebs.netz kanzlei-kiel.netz elster.netz # search: ebs.netz kanzlei-kiel.netz elster.netz
- device: eno3 - device: eno3
@@ -143,7 +143,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- opp.netz - opp.netz
@@ -276,4 +276,3 @@ git_firewall_repository:
root_user: root_user:
name: root name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq. password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/gw-replacement4.local.netz/gw-replacement4-common.yml
+1 -2
View File
@@ -98,7 +98,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- wf.netz - wf.netz
@@ -172,4 +172,3 @@ bind9_gateway_listen_on:
root_user: root_user:
name: root name: root
password: $y$j9T$IVBTpn.OrI6YiQ9q3fA8b1$Y1bmID5yXJbKfoLFt1VmQs6LezeTj5/1M9ppZBD2Pn4 password: $y$j9T$IVBTpn.OrI6YiQ9q3fA8b1$Y1bmID5yXJbKfoLFt1VmQs6LezeTj5/1M9ppZBD2Pn4
host_vars/gw-replacment.oopen.de/gw-replacment-common.yml
+2 -3
View File
@@ -98,10 +98,10 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
-local.netz - local.netz
resolved_dnssec: false resolved_dnssec: false
@@ -154,4 +154,3 @@ install_bind_packages: true
root_user: root_user:
name: root name: root
password: $y$j9T$IVBTpn.OrI6YiQ9q3fA8b1$Y1bmID5yXJbKfoLFt1VmQs6LezeTj5/1M9ppZBD2Pn4 password: $y$j9T$IVBTpn.OrI6YiQ9q3fA8b1$Y1bmID5yXJbKfoLFt1VmQs6LezeTj5/1M9ppZBD2Pn4
host_vars/gw-replacment2.oopen.de/gw-replacment2-common.yml
+2 -3
View File
@@ -98,10 +98,10 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
-local.netz - local.netz
resolved_dnssec: false resolved_dnssec: false
@@ -154,4 +154,3 @@ install_bind_packages: true
root_user: root_user:
name: root name: root
password: $y$j9T$IVBTpn.OrI6YiQ9q3fA8b1$Y1bmID5yXJbKfoLFt1VmQs6LezeTj5/1M9ppZBD2Pn4 password: $y$j9T$IVBTpn.OrI6YiQ9q3fA8b1$Y1bmID5yXJbKfoLFt1VmQs6LezeTj5/1M9ppZBD2Pn4
host_vars/gw-replacment3.oopen.de/gw-replacment3-common.yml
+2 -3
View File
@@ -98,10 +98,10 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
-local.netz - local.netz
resolved_dnssec: false resolved_dnssec: false
@@ -154,4 +154,3 @@ install_bind_packages: true
root_user: root_user:
name: root name: root
password: $y$j9T$IVBTpn.OrI6YiQ9q3fA8b1$Y1bmID5yXJbKfoLFt1VmQs6LezeTj5/1M9ppZBD2Pn4 password: $y$j9T$IVBTpn.OrI6YiQ9q3fA8b1$Y1bmID5yXJbKfoLFt1VmQs6LezeTj5/1M9ppZBD2Pn4
host_vars/gw-spr.oopen.de/gw-spr-common.yml
+1 -2
View File
@@ -98,7 +98,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- sprachenatelier.netz - sprachenatelier.netz
@@ -214,4 +214,3 @@ bind9_gateway_listen_on:
root_user: root_user:
name: root name: root
password: $y$j9T$IVBTpn.OrI6YiQ9q3fA8b1$Y1bmID5yXJbKfoLFt1VmQs6LezeTj5/1M9ppZBD2Pn4 password: $y$j9T$IVBTpn.OrI6YiQ9q3fA8b1$Y1bmID5yXJbKfoLFt1VmQs6LezeTj5/1M9ppZBD2Pn4
host_vars/iam-nd.oopen.de/iam-nd-common.yml
+1 -3
View File
@@ -90,7 +90,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- oopen.de - oopen.de
@@ -157,7 +157,6 @@ cron_user_entries:
job: /var/lib/dehydrated/tools/update_ssl_directives.sh job: /var/lib/dehydrated/tools/update_ssl_directives.sh
# --- # ---
# vars used by roles/common/tasks/users.yml # vars used by roles/common/tasks/users.yml
# --- # ---
@@ -222,4 +221,3 @@ git_firewall_repository:
root_user: root_user:
name: root name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq. password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
host_vars/initiativenserver.oopen.de/initiativenserver-common.yml
+1 -3
View File
@@ -83,7 +83,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- ~. - ~.
- oopen.de - oopen.de
@@ -96,7 +96,6 @@ resolved_fallback_nameserver:
- 194.150.168.168 - 194.150.168.168
# --- # ---
# vars used by roles/common/tasks/users.yml # vars used by roles/common/tasks/users.yml
# --- # ---
@@ -143,4 +142,3 @@ git_firewall_repository:
root_user: root_user:
name: root name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq. password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.

Some files were not shown because too many files have changed in this diff Show More