chore(main.yml): set default git branch to main; Also includes various unrelated housekeeping updates in this file.
This commit is contained in:
+98
-99
@@ -1,7 +1,7 @@
|
||||
---
|
||||
|
||||
|
||||
#ansible_managed: !!str " *** [ Ansible managed file: DO NOT EDIT DIRECTLY ] ***"
|
||||
# ansible_managed: !!str " *** [ Ansible managed file: DO NOT EDIT DIRECTLY ] ***"
|
||||
|
||||
ansible_managed: >
|
||||
*** ANSIBLE MANAGED FILE - DO NOT EDIT ***
|
||||
@@ -56,8 +56,8 @@ ansible_remote_user:
|
||||
password: $6$bSHlaLHC$URSMVq090e/cJ1v55Jh9ws0w5WekhO7X3Y0RqryAl5R76K9khWBegC76Smjastja.xMiD57/LzUUXW7y9NvAL.
|
||||
shell: /bin/bash
|
||||
ssh_keys:
|
||||
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO90culn3sicU2chTHn40ytcTay0nUIHap0uF/5fVM6P chris@sol'
|
||||
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOQHMUKlDh2ufno5pZOhUY5xFljC1R5zQ/GjOHDkS58D root@sol'
|
||||
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO90culn3sicU2chTHn40ytcTay0nUIHap0uF/5fVM6P chris@sol'
|
||||
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOQHMUKlDh2ufno5pZOhUY5xFljC1R5zQ/GjOHDkS58D root@sol'
|
||||
|
||||
# ---
|
||||
# vars used by roles/common/tasks/basic.yml
|
||||
@@ -69,7 +69,7 @@ locales:
|
||||
- en_US.UTF-8
|
||||
- de_DE.UTF-8
|
||||
|
||||
#copy_plain_files_security_limits: []
|
||||
# copy_plain_files_security_limits: []
|
||||
copy_plain_files_security_limits:
|
||||
|
||||
# /etc/security/limits.d/*.conf
|
||||
@@ -79,7 +79,7 @@ copy_plain_files_security_limits:
|
||||
dest_path: /etc/security/limits.d/90-user-NOFILE.conf
|
||||
|
||||
|
||||
#copy_plain_files_systemd: []
|
||||
# copy_plain_files_systemd: []
|
||||
copy_plain_files_systemd:
|
||||
|
||||
# /etc/systemd/system.conf.d/*.conf
|
||||
@@ -109,24 +109,23 @@ copy_plain_files_systemd:
|
||||
dest_path: /etc/systemd/system.conf.d/20-DefaultLimitRTTIME.conf
|
||||
|
||||
|
||||
#copy_plain_files_journald: []
|
||||
# copy_plain_files_journald: []
|
||||
copy_plain_files_journald:
|
||||
|
||||
- name: SystemMaxUse
|
||||
src_path: etc/systemd/journald.conf.d/50-SystemMaxUse.conf
|
||||
dest_path: /etc/systemd/journald.conf.d/50-SystemMaxUse.conf
|
||||
- name: SystemMaxUse
|
||||
src_path: etc/systemd/journald.conf.d/50-SystemMaxUse.conf
|
||||
dest_path: /etc/systemd/journald.conf.d/50-SystemMaxUse.conf
|
||||
|
||||
- name: SystemMaxFileSize
|
||||
src_path: etc/systemd/journald.conf.d/50-SystemMaxFileSize.conf
|
||||
dest_path: /etc/systemd/journald.conf.d/50-SystemMaxFileSize.conf
|
||||
- name: SystemMaxFileSize
|
||||
src_path: etc/systemd/journald.conf.d/50-SystemMaxFileSize.conf
|
||||
dest_path: /etc/systemd/journald.conf.d/50-SystemMaxFileSize.conf
|
||||
|
||||
- name: MaxFileSec
|
||||
src_path: etc/systemd/journald.conf.d/50-MaxFileSec.conf
|
||||
dest_path: /etc/systemd/journald.conf.d/50-MaxFileSec.conf
|
||||
- name: MaxFileSec
|
||||
src_path: etc/systemd/journald.conf.d/50-MaxFileSec.conf
|
||||
dest_path: /etc/systemd/journald.conf.d/50-MaxFileSec.conf
|
||||
|
||||
|
||||
|
||||
#copy_plain_files_sysctl: []
|
||||
# copy_plain_files_sysctl: []
|
||||
copy_plain_files_sysctl:
|
||||
|
||||
# /etc/sysctl.d/*.conf
|
||||
@@ -1263,7 +1262,7 @@ apt_compiler_pkgs:
|
||||
- libncurses-dev
|
||||
- libsystemd-dev
|
||||
- libnss3-dev
|
||||
#- python-dev
|
||||
# - python-dev
|
||||
|
||||
yum_compiler_pkgs_centos:
|
||||
- gcc-c++
|
||||
@@ -1476,10 +1475,10 @@ yum_webserver_pkgs_centos:
|
||||
- poppler-utils
|
||||
|
||||
# - libqdbm-dev
|
||||
#- libatm-dev
|
||||
#- libc-client2007e-dev
|
||||
#- libc-client-dev
|
||||
#- ffmpeg
|
||||
# - libatm-dev
|
||||
# - libc-client2007e-dev
|
||||
# - libc-client-dev
|
||||
# - ffmpeg
|
||||
|
||||
yum_webserver_pkgs_fedora:
|
||||
- libdb-devel
|
||||
@@ -1819,26 +1818,26 @@ apt_postgresql_pkgs:
|
||||
- postgresql
|
||||
|
||||
yum_postgresql_pkgs_centos:
|
||||
- postgresql
|
||||
- postgresql-server
|
||||
- postgresql-libs
|
||||
- postgresql-devel
|
||||
- postgresql-static
|
||||
- postgresql-plperl
|
||||
- perl-DBD-Pg
|
||||
- perl-DateTime-Format-Pg
|
||||
- check_postgres
|
||||
- postgresql
|
||||
- postgresql-server
|
||||
- postgresql-libs
|
||||
- postgresql-devel
|
||||
- postgresql-static
|
||||
- postgresql-plperl
|
||||
- perl-DBD-Pg
|
||||
- perl-DateTime-Format-Pg
|
||||
- check_postgres
|
||||
|
||||
yum_postgresql_pkgs_fedora:
|
||||
- postgresql
|
||||
- postgresql-server
|
||||
- postgresql-libs
|
||||
- postgresql-private-devel
|
||||
- postgresql-static
|
||||
- postgresql-plperl
|
||||
- perl-DBD-Pg
|
||||
- perl-DateTime-Format-Pg
|
||||
- check_postgres
|
||||
- postgresql
|
||||
- postgresql-server
|
||||
- postgresql-libs
|
||||
- postgresql-private-devel
|
||||
- postgresql-static
|
||||
- postgresql-plperl
|
||||
- perl-DBD-Pg
|
||||
- perl-DateTime-Format-Pg
|
||||
- check_postgres
|
||||
|
||||
install_bind_packages: false
|
||||
apt_bind_pkgs:
|
||||
@@ -2174,7 +2173,7 @@ yum_initial_install_fedora_38:
|
||||
- btrfs-progs
|
||||
|
||||
|
||||
#- ntpdate
|
||||
# - ntpdate
|
||||
|
||||
|
||||
# ---
|
||||
@@ -2236,7 +2235,7 @@ resolved_nameserver:
|
||||
# If there are more than one search domains, then specify them here in the order in which
|
||||
# the resolver should also search them
|
||||
#
|
||||
#resolved_domains: []
|
||||
# resolved_domains: []
|
||||
resolved_domains:
|
||||
- oopen.de
|
||||
|
||||
@@ -2245,7 +2244,7 @@ resolved_dnssec: false
|
||||
# dns.as250.net: 194.150.168.168
|
||||
#
|
||||
resolved_fallback_nameserver:
|
||||
- 194.150.168.168
|
||||
- 194.150.168.168
|
||||
|
||||
|
||||
# ---
|
||||
@@ -2283,7 +2282,7 @@ munin_remote_ipv6_old: 2a01:4f9:3a:1051::84
|
||||
# ---
|
||||
|
||||
cron_env_entries: []
|
||||
#cron_env_entries:
|
||||
# cron_env_entries:
|
||||
# - name: PATH
|
||||
# job: /root/bin/admin-stuff:/root/bin:usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
|
||||
#
|
||||
@@ -2291,7 +2290,7 @@ cron_env_entries: []
|
||||
# job: /bin/bash
|
||||
|
||||
cron_user_entries: []
|
||||
#cron_user_entries:
|
||||
# cron_user_entries:
|
||||
#
|
||||
# - name: "Check if Postfix Mailservice is up and running?"
|
||||
# minute: "*/15"
|
||||
@@ -2303,7 +2302,7 @@ cron_user_entries: []
|
||||
|
||||
|
||||
cron_user_special_time_entries: []
|
||||
#cron_user_special_time_entries:
|
||||
# cron_user_special_time_entries:
|
||||
#
|
||||
# - name: "Check if Postfix Service is running at boot time"
|
||||
# special_time: reboot
|
||||
@@ -2380,9 +2379,9 @@ extra_system_user: []
|
||||
|
||||
|
||||
entries_authorized_key: []
|
||||
#entries_authorized_key:
|
||||
# - user: root
|
||||
# - key: 'ssh-rsa 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 root@b.ns'
|
||||
# entries_authorized_key:
|
||||
# - user: root
|
||||
# - key: 'ssh-rsa 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 root@b.ns'
|
||||
|
||||
create_sftp_group: false
|
||||
|
||||
@@ -2411,8 +2410,8 @@ sshd_ports:
|
||||
- 22
|
||||
|
||||
sshd_listen_address:
|
||||
- '::'
|
||||
- '0.0.0.0'
|
||||
- '::'
|
||||
- '0.0.0.0'
|
||||
|
||||
sshd_host_keys:
|
||||
- /etc/ssh/ssh_host_rsa_key
|
||||
@@ -2443,9 +2442,9 @@ sshd_kbd_interactive_authentication:
|
||||
|
||||
sshd_use_pam: !!str "yes"
|
||||
|
||||
#sshd_allowed_users:
|
||||
# - chris
|
||||
# - sysadm
|
||||
# sshd_allowed_users:
|
||||
# - chris
|
||||
# - sysadm
|
||||
sshd_allowed_users: {}
|
||||
|
||||
sshd_print_motd: !!str "no"
|
||||
@@ -2454,7 +2453,7 @@ sshd_use_dns: !!str "no"
|
||||
|
||||
sshd_gateway_ports: !!str "no"
|
||||
|
||||
#sshd_required_rsa_size: 4096
|
||||
# sshd_required_rsa_size: 4096
|
||||
|
||||
# This users are allowed to use password authentification
|
||||
#
|
||||
@@ -2582,31 +2581,31 @@ bind9_gateway_acl:
|
||||
- ::1/128
|
||||
|
||||
bind9_gateway_listen_on_v6:
|
||||
- none
|
||||
- none
|
||||
|
||||
bind9_gateway_listen_on:
|
||||
- any
|
||||
|
||||
#bind9_gateway_allow_transfer: {}
|
||||
# bind9_gateway_allow_transfer: {}
|
||||
bind9_gateway_allow_transfer:
|
||||
- none
|
||||
- none
|
||||
|
||||
#bind9_transfer_source: !!str "192.168.182.1"
|
||||
# bind9_transfer_source: !!str "192.168.182.1"
|
||||
bind9_transfer_source: {}
|
||||
|
||||
#bind9_notify_source: !!str "192.168.182.1"
|
||||
# bind9_notify_source: !!str "192.168.182.1"
|
||||
bind9_notify_source: {}
|
||||
|
||||
#bind9_gateway_allow_query: {}
|
||||
# bind9_gateway_allow_query: {}
|
||||
bind9_gateway_allow_query:
|
||||
- local-net
|
||||
|
||||
#bind9_gateway_allow_query_cache: {}
|
||||
# ind9_gateway_allow_query_cache: {}
|
||||
bind9_gateway_allow_query_cache:
|
||||
- local-net
|
||||
|
||||
bind9_gateway_recursion: !!str "yes"
|
||||
#bind9_gateway_allow_recursion: {}
|
||||
bind9_gateway_recursion: !!str "yes"
|
||||
# bind9_gateway_allow_recursion: {}
|
||||
bind9_gateway_allow_recursion:
|
||||
- local-net
|
||||
|
||||
@@ -2628,6 +2627,8 @@ ntp_server: {}
|
||||
# Firewall repository
|
||||
# ---
|
||||
|
||||
git_default_branch: main
|
||||
|
||||
git_firewall_repository: {}
|
||||
|
||||
# ---
|
||||
@@ -2896,7 +2897,7 @@ git_jitsi_meet_repositories:
|
||||
# ---
|
||||
# group [so36_server_dehydrated]
|
||||
# ---
|
||||
#git_so36_dehydrated_repositories:
|
||||
# git_so36_dehydrated_repositories:
|
||||
#
|
||||
# # install repositories (destination: /usr/local/src/)
|
||||
# - name: dehydrated-cron
|
||||
@@ -2926,7 +2927,7 @@ nfs_start_servers: 16
|
||||
# NOTE !!
|
||||
# Take car to increase 'fsid' in case of more than one export
|
||||
#
|
||||
#nfs_exports:
|
||||
# nfs_exports:
|
||||
# - src: 192.168.112.10:/data/home
|
||||
# path: /data/home
|
||||
# mount_opts: users,rsize=8192,wsize=8192,hard,intr
|
||||
@@ -3000,15 +3001,15 @@ copy_plain_files_postfwd:
|
||||
|
||||
- name: postfwd.bl-recipient-exeeds-msg-size-20mb
|
||||
src_path: mailserver/etc/postfix/postfwd.bl-recipient-exeeds-msg-size-20mb
|
||||
dest_path: /etc/postfix/postfwd.bl-recipient-exeeds-msg-size-20mb
|
||||
dest_path: /etc/postfix/postfwd.bl-recipient-exeeds-msg-size-20mb
|
||||
|
||||
- name: postfwd.high-rate-number-messages
|
||||
src_path: mailserver/etc/postfix/postfwd.high-rate-number-messages
|
||||
dest_path: /etc/postfix/postfwd.high-rate-number-messages
|
||||
dest_path: /etc/postfix/postfwd.high-rate-number-messages
|
||||
|
||||
- name: postfwd.high-rate-number-recipients
|
||||
src_path: mailserver/etc/postfix/postfwd.high-rate-number-recipients
|
||||
dest_path: /etc/postfix/postfwd.high-rate-number-recipients
|
||||
dest_path: /etc/postfix/postfwd.high-rate-number-recipients
|
||||
|
||||
- name: postfwd.wl-hosts
|
||||
src_path: mailserver/etc/postfix/postfwd.wl-hosts
|
||||
@@ -3103,18 +3104,18 @@ si_authorisation_signature:
|
||||
|
||||
website_name_postfixadmin:
|
||||
|
||||
#email_welcome_message: "\n
|
||||
#Hallo,\n
|
||||
# email_welcome_message: "\n
|
||||
# Hallo,\n
|
||||
#
|
||||
#Ihre/Deine neue E-Mail Adresse ist eingerichtet.\n
|
||||
# Ihre/Deine neue E-Mail Adresse ist eingerichtet.\n
|
||||
#
|
||||
#O.OPEN\n
|
||||
# O.OPEN\n
|
||||
#
|
||||
#--\n
|
||||
#O.OPEN | Phone: +49 30 / 290 484 91\n
|
||||
#Erkelenzdamm 21 | Fax: +49 30 / 290 484 99\n
|
||||
#D-10999 Berlin | E-MAIL: oo@oopen.de\n
|
||||
#"
|
||||
# --\n
|
||||
# O.OPEN | Phone: +49 30 / 290 484 91\n
|
||||
# Erkelenzdamm 21 | Fax: +49 30 / 290 484 99\n
|
||||
# -10999 Berlin | E-MAIL: oo@oopen.de\n
|
||||
# "
|
||||
email_welcome_message:
|
||||
|
||||
# -
|
||||
@@ -3125,12 +3126,12 @@ dovecot_from_address:
|
||||
dovecot_reply_to:
|
||||
webmailer_address:
|
||||
|
||||
#salutation: "O.OPEN\n
|
||||
# salutation: "O.OPEN\n
|
||||
#
|
||||
#--\n
|
||||
#O.OPEN | Phone: +49 30 / 290 484 91\n
|
||||
#Erkelenzdamm 21 | Fax: +49 30 / 290 484 99\n
|
||||
#D-10999 Berlin | http://oopen.de"
|
||||
# --\n
|
||||
# O.OPEN | Phone: +49 30 / 290 484 91\n
|
||||
# Erkelenzdamm 21 | Fax: +49 30 / 290 484 99\n
|
||||
# D-10999 Berlin | http://oopen.de"
|
||||
salutation:
|
||||
|
||||
# -
|
||||
@@ -3278,24 +3279,22 @@ samba_cronjob_permissions:
|
||||
# start automatically after boot.
|
||||
#
|
||||
debian_services_active_and_started:
|
||||
- bind
|
||||
- cron
|
||||
- haveged
|
||||
- ntp
|
||||
- redis-server
|
||||
- ssh
|
||||
- tor
|
||||
- bind
|
||||
- cron
|
||||
- haveged
|
||||
- ntp
|
||||
- redis-server
|
||||
- ssh
|
||||
- tor
|
||||
|
||||
redhat_services_active_and_started:
|
||||
- crond
|
||||
- haveged
|
||||
- named
|
||||
- ntpd
|
||||
- redis
|
||||
- sshd
|
||||
- tor
|
||||
|
||||
|
||||
- crond
|
||||
- haveged
|
||||
- named
|
||||
- ntpd
|
||||
- redis
|
||||
- sshd
|
||||
- tor
|
||||
|
||||
|
||||
# ==============================
|
||||
|
||||
Reference in New Issue
Block a user