ansible/oopen-server
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

chore(main.yml): set default git branch to main; Also includes various unrelated housekeeping updates in this file.

Browse Source
This commit is contained in:
Christoph
2026-07-27 22:16:27 +02:00
parent f39babaf5d
commit eb2c7cc15a
1 changed files with 98 additions and 99 deletions
Download Patch File Download Diff File Expand all files Collapse all files
group_vars/all/main.yml
+42 -43
View File
@@ -1,7 +1,7 @@
--- ---
#ansible_managed: !!str " *** [ Ansible managed file: DO NOT EDIT DIRECTLY ] ***" # ansible_managed: !!str " *** [ Ansible managed file: DO NOT EDIT DIRECTLY ] ***"
ansible_managed: > ansible_managed: >
*** ANSIBLE MANAGED FILE - DO NOT EDIT *** *** ANSIBLE MANAGED FILE - DO NOT EDIT ***
@@ -69,7 +69,7 @@ locales:
- en_US.UTF-8 - en_US.UTF-8
- de_DE.UTF-8 - de_DE.UTF-8
#copy_plain_files_security_limits: [] # copy_plain_files_security_limits: []
copy_plain_files_security_limits: copy_plain_files_security_limits:
# /etc/security/limits.d/*.conf # /etc/security/limits.d/*.conf
@@ -79,7 +79,7 @@ copy_plain_files_security_limits:
dest_path: /etc/security/limits.d/90-user-NOFILE.conf dest_path: /etc/security/limits.d/90-user-NOFILE.conf
#copy_plain_files_systemd: [] # copy_plain_files_systemd: []
copy_plain_files_systemd: copy_plain_files_systemd:
# /etc/systemd/system.conf.d/*.conf # /etc/systemd/system.conf.d/*.conf
@@ -109,7 +109,7 @@ copy_plain_files_systemd:
dest_path: /etc/systemd/system.conf.d/20-DefaultLimitRTTIME.conf dest_path: /etc/systemd/system.conf.d/20-DefaultLimitRTTIME.conf
#copy_plain_files_journald: [] # copy_plain_files_journald: []
copy_plain_files_journald: copy_plain_files_journald:
- name: SystemMaxUse - name: SystemMaxUse
@@ -125,8 +125,7 @@ copy_plain_files_journald:
dest_path: /etc/systemd/journald.conf.d/50-MaxFileSec.conf dest_path: /etc/systemd/journald.conf.d/50-MaxFileSec.conf
# copy_plain_files_sysctl: []
#copy_plain_files_sysctl: []
copy_plain_files_sysctl: copy_plain_files_sysctl:
# /etc/sysctl.d/*.conf # /etc/sysctl.d/*.conf
@@ -1263,7 +1262,7 @@ apt_compiler_pkgs:
- libncurses-dev - libncurses-dev
- libsystemd-dev - libsystemd-dev
- libnss3-dev - libnss3-dev
#- python-dev # - python-dev
yum_compiler_pkgs_centos: yum_compiler_pkgs_centos:
- gcc-c++ - gcc-c++
@@ -1476,10 +1475,10 @@ yum_webserver_pkgs_centos:
- poppler-utils - poppler-utils
# - libqdbm-dev # - libqdbm-dev
#- libatm-dev # - libatm-dev
#- libc-client2007e-dev # - libc-client2007e-dev
#- libc-client-dev # - libc-client-dev
#- ffmpeg # - ffmpeg
yum_webserver_pkgs_fedora: yum_webserver_pkgs_fedora:
- libdb-devel - libdb-devel
@@ -2174,7 +2173,7 @@ yum_initial_install_fedora_38:
- btrfs-progs - btrfs-progs
#- ntpdate # - ntpdate
# --- # ---
@@ -2236,7 +2235,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- oopen.de - oopen.de
@@ -2283,7 +2282,7 @@ munin_remote_ipv6_old: 2a01:4f9:3a:1051::84
# --- # ---
cron_env_entries: [] cron_env_entries: []
#cron_env_entries: # cron_env_entries:
# - name: PATH # - name: PATH
# job: /root/bin/admin-stuff:/root/bin:usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin # job: /root/bin/admin-stuff:/root/bin:usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
# #
@@ -2291,7 +2290,7 @@ cron_env_entries: []
# job: /bin/bash # job: /bin/bash
cron_user_entries: [] cron_user_entries: []
#cron_user_entries: # cron_user_entries:
# #
# - name: "Check if Postfix Mailservice is up and running?" # - name: "Check if Postfix Mailservice is up and running?"
# minute: "*/15" # minute: "*/15"
@@ -2303,7 +2302,7 @@ cron_user_entries: []
cron_user_special_time_entries: [] cron_user_special_time_entries: []
#cron_user_special_time_entries: # cron_user_special_time_entries:
# #
# - name: "Check if Postfix Service is running at boot time" # - name: "Check if Postfix Service is running at boot time"
# special_time: reboot # special_time: reboot
@@ -2380,7 +2379,7 @@ extra_system_user: []
entries_authorized_key: [] entries_authorized_key: []
#entries_authorized_key: # entries_authorized_key:
# - user: root # - user: root
# - key: 'ssh-rsa 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 root@b.ns' # - key: 'ssh-rsa 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 root@b.ns'
@@ -2443,7 +2442,7 @@ sshd_kbd_interactive_authentication:
sshd_use_pam: !!str "yes" sshd_use_pam: !!str "yes"
#sshd_allowed_users: # sshd_allowed_users:
# - chris # - chris
# - sysadm # - sysadm
sshd_allowed_users: {} sshd_allowed_users: {}
@@ -2454,7 +2453,7 @@ sshd_use_dns: !!str "no"
sshd_gateway_ports: !!str "no" sshd_gateway_ports: !!str "no"
#sshd_required_rsa_size: 4096 # sshd_required_rsa_size: 4096
# This users are allowed to use password authentification # This users are allowed to use password authentification
# #
@@ -2587,26 +2586,26 @@ bind9_gateway_listen_on_v6:
bind9_gateway_listen_on: bind9_gateway_listen_on:
- any - any
#bind9_gateway_allow_transfer: {} # bind9_gateway_allow_transfer: {}
bind9_gateway_allow_transfer: bind9_gateway_allow_transfer:
- none - none
#bind9_transfer_source: !!str "192.168.182.1" # bind9_transfer_source: !!str "192.168.182.1"
bind9_transfer_source: {} bind9_transfer_source: {}
#bind9_notify_source: !!str "192.168.182.1" # bind9_notify_source: !!str "192.168.182.1"
bind9_notify_source: {} bind9_notify_source: {}
#bind9_gateway_allow_query: {} # bind9_gateway_allow_query: {}
bind9_gateway_allow_query: bind9_gateway_allow_query:
- local-net - local-net
#bind9_gateway_allow_query_cache: {} # ind9_gateway_allow_query_cache: {}
bind9_gateway_allow_query_cache: bind9_gateway_allow_query_cache:
- local-net - local-net
bind9_gateway_recursion: !!str "yes" bind9_gateway_recursion: !!str "yes"
#bind9_gateway_allow_recursion: {} # bind9_gateway_allow_recursion: {}
bind9_gateway_allow_recursion: bind9_gateway_allow_recursion:
- local-net - local-net
@@ -2628,6 +2627,8 @@ ntp_server: {}
# Firewall repository # Firewall repository
# --- # ---
git_default_branch: main
git_firewall_repository: {} git_firewall_repository: {}
# --- # ---
@@ -2896,7 +2897,7 @@ git_jitsi_meet_repositories:
# --- # ---
# group [so36_server_dehydrated] # group [so36_server_dehydrated]
# --- # ---
#git_so36_dehydrated_repositories: # git_so36_dehydrated_repositories:
# #
# # install repositories (destination: /usr/local/src/) # # install repositories (destination: /usr/local/src/)
# - name: dehydrated-cron # - name: dehydrated-cron
@@ -2926,7 +2927,7 @@ nfs_start_servers: 16
# NOTE !! # NOTE !!
# Take car to increase 'fsid' in case of more than one export # Take car to increase 'fsid' in case of more than one export
# #
#nfs_exports: # nfs_exports:
# - src: 192.168.112.10:/data/home # - src: 192.168.112.10:/data/home
# path: /data/home # path: /data/home
# mount_opts: users,rsize=8192,wsize=8192,hard,intr # mount_opts: users,rsize=8192,wsize=8192,hard,intr
@@ -3103,18 +3104,18 @@ si_authorisation_signature:
website_name_postfixadmin: website_name_postfixadmin:
#email_welcome_message: "\n # email_welcome_message: "\n
#Hallo,\n # Hallo,\n
# #
#Ihre/Deine neue E-Mail Adresse ist eingerichtet.\n # Ihre/Deine neue E-Mail Adresse ist eingerichtet.\n
# #
#O.OPEN\n # O.OPEN\n
# #
#--\n # --\n
#O.OPEN | Phone: +49 30 / 290 484 91\n # O.OPEN | Phone: +49 30 / 290 484 91\n
#Erkelenzdamm 21 | Fax: +49 30 / 290 484 99\n # Erkelenzdamm 21 | Fax: +49 30 / 290 484 99\n
#D-10999 Berlin | E-MAIL: oo@oopen.de\n # -10999 Berlin | E-MAIL: oo@oopen.de\n
#" # "
email_welcome_message: email_welcome_message:
# - # -
@@ -3125,12 +3126,12 @@ dovecot_from_address:
dovecot_reply_to: dovecot_reply_to:
webmailer_address: webmailer_address:
#salutation: "O.OPEN\n # salutation: "O.OPEN\n
# #
#--\n # --\n
#O.OPEN | Phone: +49 30 / 290 484 91\n # O.OPEN | Phone: +49 30 / 290 484 91\n
#Erkelenzdamm 21 | Fax: +49 30 / 290 484 99\n # Erkelenzdamm 21 | Fax: +49 30 / 290 484 99\n
#D-10999 Berlin | http://oopen.de" # D-10999 Berlin | http://oopen.de"
salutation: salutation:
# - # -
@@ -3296,8 +3297,6 @@ redhat_services_active_and_started:
- tor - tor
# ============================== # ==============================