diff --git a/group_vars/all/main.yml b/group_vars/all/main.yml index 1e146c0..1c00d60 100644 --- a/group_vars/all/main.yml +++ b/group_vars/all/main.yml @@ -1,7 +1,7 @@ --- -#ansible_managed: !!str " *** [ Ansible managed file: DO NOT EDIT DIRECTLY ] ***" +# ansible_managed: !!str " *** [ Ansible managed file: DO NOT EDIT DIRECTLY ] ***" ansible_managed: > *** ANSIBLE MANAGED FILE - DO NOT EDIT *** @@ -56,8 +56,8 @@ ansible_remote_user: password: $6$bSHlaLHC$URSMVq090e/cJ1v55Jh9ws0w5WekhO7X3Y0RqryAl5R76K9khWBegC76Smjastja.xMiD57/LzUUXW7y9NvAL. shell: /bin/bash ssh_keys: - - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO90culn3sicU2chTHn40ytcTay0nUIHap0uF/5fVM6P chris@sol' - - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOQHMUKlDh2ufno5pZOhUY5xFljC1R5zQ/GjOHDkS58D root@sol' + - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO90culn3sicU2chTHn40ytcTay0nUIHap0uF/5fVM6P chris@sol' + - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOQHMUKlDh2ufno5pZOhUY5xFljC1R5zQ/GjOHDkS58D root@sol' # --- # vars used by roles/common/tasks/basic.yml @@ -69,7 +69,7 @@ locales: - en_US.UTF-8 - de_DE.UTF-8 -#copy_plain_files_security_limits: [] +# copy_plain_files_security_limits: [] copy_plain_files_security_limits: # /etc/security/limits.d/*.conf @@ -79,7 +79,7 @@ copy_plain_files_security_limits: dest_path: /etc/security/limits.d/90-user-NOFILE.conf -#copy_plain_files_systemd: [] +# copy_plain_files_systemd: [] copy_plain_files_systemd: # /etc/systemd/system.conf.d/*.conf @@ -109,24 +109,23 @@ copy_plain_files_systemd: dest_path: /etc/systemd/system.conf.d/20-DefaultLimitRTTIME.conf -#copy_plain_files_journald: [] +# copy_plain_files_journald: [] copy_plain_files_journald: - - name: SystemMaxUse - src_path: etc/systemd/journald.conf.d/50-SystemMaxUse.conf - dest_path: /etc/systemd/journald.conf.d/50-SystemMaxUse.conf + - name: SystemMaxUse + src_path: etc/systemd/journald.conf.d/50-SystemMaxUse.conf + dest_path: /etc/systemd/journald.conf.d/50-SystemMaxUse.conf - - name: SystemMaxFileSize - src_path: etc/systemd/journald.conf.d/50-SystemMaxFileSize.conf - dest_path: /etc/systemd/journald.conf.d/50-SystemMaxFileSize.conf + - name: SystemMaxFileSize + src_path: etc/systemd/journald.conf.d/50-SystemMaxFileSize.conf + dest_path: /etc/systemd/journald.conf.d/50-SystemMaxFileSize.conf - - name: MaxFileSec - src_path: etc/systemd/journald.conf.d/50-MaxFileSec.conf - dest_path: /etc/systemd/journald.conf.d/50-MaxFileSec.conf + - name: MaxFileSec + src_path: etc/systemd/journald.conf.d/50-MaxFileSec.conf + dest_path: /etc/systemd/journald.conf.d/50-MaxFileSec.conf - -#copy_plain_files_sysctl: [] +# copy_plain_files_sysctl: [] copy_plain_files_sysctl: # /etc/sysctl.d/*.conf @@ -1263,7 +1262,7 @@ apt_compiler_pkgs: - libncurses-dev - libsystemd-dev - libnss3-dev - #- python-dev + # - python-dev yum_compiler_pkgs_centos: - gcc-c++ @@ -1476,10 +1475,10 @@ yum_webserver_pkgs_centos: - poppler-utils # - libqdbm-dev - #- libatm-dev - #- libc-client2007e-dev - #- libc-client-dev - #- ffmpeg + # - libatm-dev + # - libc-client2007e-dev + # - libc-client-dev + # - ffmpeg yum_webserver_pkgs_fedora: - libdb-devel @@ -1819,26 +1818,26 @@ apt_postgresql_pkgs: - postgresql yum_postgresql_pkgs_centos: - - postgresql - - postgresql-server - - postgresql-libs - - postgresql-devel - - postgresql-static - - postgresql-plperl - - perl-DBD-Pg - - perl-DateTime-Format-Pg - - check_postgres + - postgresql + - postgresql-server + - postgresql-libs + - postgresql-devel + - postgresql-static + - postgresql-plperl + - perl-DBD-Pg + - perl-DateTime-Format-Pg + - check_postgres yum_postgresql_pkgs_fedora: - - postgresql - - postgresql-server - - postgresql-libs - - postgresql-private-devel - - postgresql-static - - postgresql-plperl - - perl-DBD-Pg - - perl-DateTime-Format-Pg - - check_postgres + - postgresql + - postgresql-server + - postgresql-libs + - postgresql-private-devel + - postgresql-static + - postgresql-plperl + - perl-DBD-Pg + - perl-DateTime-Format-Pg + - check_postgres install_bind_packages: false apt_bind_pkgs: @@ -2174,7 +2173,7 @@ yum_initial_install_fedora_38: - btrfs-progs - #- ntpdate + # - ntpdate # --- @@ -2236,7 +2235,7 @@ resolved_nameserver: # If there are more than one search domains, then specify them here in the order in which # the resolver should also search them # -#resolved_domains: [] +# resolved_domains: [] resolved_domains: - oopen.de @@ -2245,7 +2244,7 @@ resolved_dnssec: false # dns.as250.net: 194.150.168.168 # resolved_fallback_nameserver: - - 194.150.168.168 + - 194.150.168.168 # --- @@ -2283,7 +2282,7 @@ munin_remote_ipv6_old: 2a01:4f9:3a:1051::84 # --- cron_env_entries: [] -#cron_env_entries: +# cron_env_entries: # - name: PATH # job: /root/bin/admin-stuff:/root/bin:usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin # @@ -2291,7 +2290,7 @@ cron_env_entries: [] # job: /bin/bash cron_user_entries: [] -#cron_user_entries: +# cron_user_entries: # # - name: "Check if Postfix Mailservice is up and running?" # minute: "*/15" @@ -2303,7 +2302,7 @@ cron_user_entries: [] cron_user_special_time_entries: [] -#cron_user_special_time_entries: +# cron_user_special_time_entries: # # - name: "Check if Postfix Service is running at boot time" # special_time: reboot @@ -2380,9 +2379,9 @@ extra_system_user: [] entries_authorized_key: [] -#entries_authorized_key: -# - user: root -# - key: 'ssh-rsa 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 root@b.ns' +# entries_authorized_key: +# - user: root +# - key: 'ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDcc4brtgGW0xP2KiZGq5xsyUKcNiYF72zQ49Z0lqx3iu0zj9oz79oGZY1N9jCeKG30AsbwL+4H6/l2hAekFZu6fIwuiRgCVRAwYrnnlOGDAnYOGHfks23pk2BU0/fb2VnxiK967FvpJ/xDP49t1UC5voX/O2MTkz6NROJPwIClHgnwN1bg+C09UpJNmmdROi8myhiu1/aYbAWDfQzVUnHio0q3vBM16ZUQkoIHxQT4fF8elS408n0jd9WJHyRtLB/mCMI6O3G2yHdPVciqKwgRwRtJ8hDjmFfyeLtxb4ADpa2Q/f6MuJI0elxbxjp8l2XKjVSwPJ8GKomC16HfgFMrnUNQcx9YMrXB26f+lperf9NlwbQtXZffj9M+BxTAFvh+1Q/iIHqRat2Bb/8OUY9JI2zuWUliffqb5Kbzjik4vMqZvI2ED2zphsPcpLST7u+4z40vZliBf1F4P2vDBfIRK87ldfJQQw6saMZznjZPNV7CA+K7IFCpOz0wuoVE3wOka8hdYmMIMno34Zf6P+xuTaAPXJOCubKuhicUlhtX7q72Pln5kuvbO3ZRgEK3XnyIWeAd2rkaU6XVo7W19043e9HkkbG8nZETYu7TGFhufXyloinde5XLyW295BS8fKa1AteJPDLY4ClF2PZiWbxWRjAhlRAlgXgup09rN2HHjw== root@b.ns' create_sftp_group: false @@ -2411,8 +2410,8 @@ sshd_ports: - 22 sshd_listen_address: - - '::' - - '0.0.0.0' + - '::' + - '0.0.0.0' sshd_host_keys: - /etc/ssh/ssh_host_rsa_key @@ -2443,9 +2442,9 @@ sshd_kbd_interactive_authentication: sshd_use_pam: !!str "yes" -#sshd_allowed_users: -# - chris -# - sysadm +# sshd_allowed_users: +# - chris +# - sysadm sshd_allowed_users: {} sshd_print_motd: !!str "no" @@ -2454,7 +2453,7 @@ sshd_use_dns: !!str "no" sshd_gateway_ports: !!str "no" -#sshd_required_rsa_size: 4096 +# sshd_required_rsa_size: 4096 # This users are allowed to use password authentification # @@ -2582,31 +2581,31 @@ bind9_gateway_acl: - ::1/128 bind9_gateway_listen_on_v6: - - none + - none bind9_gateway_listen_on: - any -#bind9_gateway_allow_transfer: {} +# bind9_gateway_allow_transfer: {} bind9_gateway_allow_transfer: - - none + - none -#bind9_transfer_source: !!str "192.168.182.1" +# bind9_transfer_source: !!str "192.168.182.1" bind9_transfer_source: {} -#bind9_notify_source: !!str "192.168.182.1" +# bind9_notify_source: !!str "192.168.182.1" bind9_notify_source: {} -#bind9_gateway_allow_query: {} +# bind9_gateway_allow_query: {} bind9_gateway_allow_query: - local-net -#bind9_gateway_allow_query_cache: {} +# ind9_gateway_allow_query_cache: {} bind9_gateway_allow_query_cache: - local-net -bind9_gateway_recursion: !!str "yes" -#bind9_gateway_allow_recursion: {} +bind9_gateway_recursion: !!str "yes" +# bind9_gateway_allow_recursion: {} bind9_gateway_allow_recursion: - local-net @@ -2628,6 +2627,8 @@ ntp_server: {} # Firewall repository # --- +git_default_branch: main + git_firewall_repository: {} # --- @@ -2896,7 +2897,7 @@ git_jitsi_meet_repositories: # --- # group [so36_server_dehydrated] # --- -#git_so36_dehydrated_repositories: +# git_so36_dehydrated_repositories: # # # install repositories (destination: /usr/local/src/) # - name: dehydrated-cron @@ -2926,7 +2927,7 @@ nfs_start_servers: 16 # NOTE !! # Take car to increase 'fsid' in case of more than one export # -#nfs_exports: +# nfs_exports: # - src: 192.168.112.10:/data/home # path: /data/home # mount_opts: users,rsize=8192,wsize=8192,hard,intr @@ -3000,15 +3001,15 @@ copy_plain_files_postfwd: - name: postfwd.bl-recipient-exeeds-msg-size-20mb src_path: mailserver/etc/postfix/postfwd.bl-recipient-exeeds-msg-size-20mb - dest_path: /etc/postfix/postfwd.bl-recipient-exeeds-msg-size-20mb + dest_path: /etc/postfix/postfwd.bl-recipient-exeeds-msg-size-20mb - name: postfwd.high-rate-number-messages src_path: mailserver/etc/postfix/postfwd.high-rate-number-messages - dest_path: /etc/postfix/postfwd.high-rate-number-messages + dest_path: /etc/postfix/postfwd.high-rate-number-messages - name: postfwd.high-rate-number-recipients src_path: mailserver/etc/postfix/postfwd.high-rate-number-recipients - dest_path: /etc/postfix/postfwd.high-rate-number-recipients + dest_path: /etc/postfix/postfwd.high-rate-number-recipients - name: postfwd.wl-hosts src_path: mailserver/etc/postfix/postfwd.wl-hosts @@ -3103,18 +3104,18 @@ si_authorisation_signature: website_name_postfixadmin: -#email_welcome_message: "\n -#Hallo,\n +# email_welcome_message: "\n +# Hallo,\n # -#Ihre/Deine neue E-Mail Adresse ist eingerichtet.\n +# Ihre/Deine neue E-Mail Adresse ist eingerichtet.\n # -#O.OPEN\n +# O.OPEN\n # -#--\n -#O.OPEN | Phone: +49 30 / 290 484 91\n -#Erkelenzdamm 21 | Fax: +49 30 / 290 484 99\n -#D-10999 Berlin | E-MAIL: oo@oopen.de\n -#" +# --\n +# O.OPEN | Phone: +49 30 / 290 484 91\n +# Erkelenzdamm 21 | Fax: +49 30 / 290 484 99\n +# -10999 Berlin | E-MAIL: oo@oopen.de\n +# " email_welcome_message: # - @@ -3125,12 +3126,12 @@ dovecot_from_address: dovecot_reply_to: webmailer_address: -#salutation: "O.OPEN\n +# salutation: "O.OPEN\n # -#--\n -#O.OPEN | Phone: +49 30 / 290 484 91\n -#Erkelenzdamm 21 | Fax: +49 30 / 290 484 99\n -#D-10999 Berlin | http://oopen.de" +# --\n +# O.OPEN | Phone: +49 30 / 290 484 91\n +# Erkelenzdamm 21 | Fax: +49 30 / 290 484 99\n +# D-10999 Berlin | http://oopen.de" salutation: # - @@ -3278,24 +3279,22 @@ samba_cronjob_permissions: # start automatically after boot. # debian_services_active_and_started: - - bind - - cron - - haveged - - ntp - - redis-server - - ssh - - tor + - bind + - cron + - haveged + - ntp + - redis-server + - ssh + - tor redhat_services_active_and_started: - - crond - - haveged - - named - - ntpd - - redis - - sshd - - tor - - + - crond + - haveged + - named + - ntpd + - redis + - sshd + - tor # ==============================