ansible/oopen-server
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

chore(main.yml): set default git branch to main; Also includes various unrelated housekeeping updates in this file.

Browse Source
This commit is contained in:
Christoph
2026-07-27 22:16:27 +02:00
parent f39babaf5d
commit eb2c7cc15a
1 changed files with 98 additions and 99 deletions
Download Patch File Download Diff File Expand all files Collapse all files
group_vars/all/main.yml
+98 -99
View File
@@ -1,7 +1,7 @@
--- ---
#ansible_managed: !!str " *** [ Ansible managed file: DO NOT EDIT DIRECTLY ] ***" # ansible_managed: !!str " *** [ Ansible managed file: DO NOT EDIT DIRECTLY ] ***"
ansible_managed: > ansible_managed: >
*** ANSIBLE MANAGED FILE - DO NOT EDIT *** *** ANSIBLE MANAGED FILE - DO NOT EDIT ***
@@ -56,8 +56,8 @@ ansible_remote_user:
password: $6$bSHlaLHC$URSMVq090e/cJ1v55Jh9ws0w5WekhO7X3Y0RqryAl5R76K9khWBegC76Smjastja.xMiD57/LzUUXW7y9NvAL. password: $6$bSHlaLHC$URSMVq090e/cJ1v55Jh9ws0w5WekhO7X3Y0RqryAl5R76K9khWBegC76Smjastja.xMiD57/LzUUXW7y9NvAL.
shell: /bin/bash shell: /bin/bash
ssh_keys: ssh_keys:
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO90culn3sicU2chTHn40ytcTay0nUIHap0uF/5fVM6P chris@sol' - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO90culn3sicU2chTHn40ytcTay0nUIHap0uF/5fVM6P chris@sol'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOQHMUKlDh2ufno5pZOhUY5xFljC1R5zQ/GjOHDkS58D root@sol' - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOQHMUKlDh2ufno5pZOhUY5xFljC1R5zQ/GjOHDkS58D root@sol'
# --- # ---
# vars used by roles/common/tasks/basic.yml # vars used by roles/common/tasks/basic.yml
@@ -69,7 +69,7 @@ locales:
- en_US.UTF-8 - en_US.UTF-8
- de_DE.UTF-8 - de_DE.UTF-8
#copy_plain_files_security_limits: [] # copy_plain_files_security_limits: []
copy_plain_files_security_limits: copy_plain_files_security_limits:
# /etc/security/limits.d/*.conf # /etc/security/limits.d/*.conf
@@ -79,7 +79,7 @@ copy_plain_files_security_limits:
dest_path: /etc/security/limits.d/90-user-NOFILE.conf dest_path: /etc/security/limits.d/90-user-NOFILE.conf
#copy_plain_files_systemd: [] # copy_plain_files_systemd: []
copy_plain_files_systemd: copy_plain_files_systemd:
# /etc/systemd/system.conf.d/*.conf # /etc/systemd/system.conf.d/*.conf
@@ -109,24 +109,23 @@ copy_plain_files_systemd:
dest_path: /etc/systemd/system.conf.d/20-DefaultLimitRTTIME.conf dest_path: /etc/systemd/system.conf.d/20-DefaultLimitRTTIME.conf
#copy_plain_files_journald: [] # copy_plain_files_journald: []
copy_plain_files_journald: copy_plain_files_journald:
- name: SystemMaxUse - name: SystemMaxUse
src_path: etc/systemd/journald.conf.d/50-SystemMaxUse.conf src_path: etc/systemd/journald.conf.d/50-SystemMaxUse.conf
dest_path: /etc/systemd/journald.conf.d/50-SystemMaxUse.conf dest_path: /etc/systemd/journald.conf.d/50-SystemMaxUse.conf
- name: SystemMaxFileSize - name: SystemMaxFileSize
src_path: etc/systemd/journald.conf.d/50-SystemMaxFileSize.conf src_path: etc/systemd/journald.conf.d/50-SystemMaxFileSize.conf
dest_path: /etc/systemd/journald.conf.d/50-SystemMaxFileSize.conf dest_path: /etc/systemd/journald.conf.d/50-SystemMaxFileSize.conf
- name: MaxFileSec - name: MaxFileSec
src_path: etc/systemd/journald.conf.d/50-MaxFileSec.conf src_path: etc/systemd/journald.conf.d/50-MaxFileSec.conf
dest_path: /etc/systemd/journald.conf.d/50-MaxFileSec.conf dest_path: /etc/systemd/journald.conf.d/50-MaxFileSec.conf
# copy_plain_files_sysctl: []
#copy_plain_files_sysctl: []
copy_plain_files_sysctl: copy_plain_files_sysctl:
# /etc/sysctl.d/*.conf # /etc/sysctl.d/*.conf
@@ -1263,7 +1262,7 @@ apt_compiler_pkgs:
- libncurses-dev - libncurses-dev
- libsystemd-dev - libsystemd-dev
- libnss3-dev - libnss3-dev
#- python-dev # - python-dev
yum_compiler_pkgs_centos: yum_compiler_pkgs_centos:
- gcc-c++ - gcc-c++
@@ -1476,10 +1475,10 @@ yum_webserver_pkgs_centos:
- poppler-utils - poppler-utils
# - libqdbm-dev # - libqdbm-dev
#- libatm-dev # - libatm-dev
#- libc-client2007e-dev # - libc-client2007e-dev
#- libc-client-dev # - libc-client-dev
#- ffmpeg # - ffmpeg
yum_webserver_pkgs_fedora: yum_webserver_pkgs_fedora:
- libdb-devel - libdb-devel
@@ -1819,26 +1818,26 @@ apt_postgresql_pkgs:
- postgresql - postgresql
yum_postgresql_pkgs_centos: yum_postgresql_pkgs_centos:
- postgresql - postgresql
- postgresql-server - postgresql-server
- postgresql-libs - postgresql-libs
- postgresql-devel - postgresql-devel
- postgresql-static - postgresql-static
- postgresql-plperl - postgresql-plperl
- perl-DBD-Pg - perl-DBD-Pg
- perl-DateTime-Format-Pg - perl-DateTime-Format-Pg
- check_postgres - check_postgres
yum_postgresql_pkgs_fedora: yum_postgresql_pkgs_fedora:
- postgresql - postgresql
- postgresql-server - postgresql-server
- postgresql-libs - postgresql-libs
- postgresql-private-devel - postgresql-private-devel
- postgresql-static - postgresql-static
- postgresql-plperl - postgresql-plperl
- perl-DBD-Pg - perl-DBD-Pg
- perl-DateTime-Format-Pg - perl-DateTime-Format-Pg
- check_postgres - check_postgres
install_bind_packages: false install_bind_packages: false
apt_bind_pkgs: apt_bind_pkgs:
@@ -2174,7 +2173,7 @@ yum_initial_install_fedora_38:
- btrfs-progs - btrfs-progs
#- ntpdate # - ntpdate
# --- # ---
@@ -2236,7 +2235,7 @@ resolved_nameserver:
# If there are more than one search domains, then specify them here in the order in which # If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them # the resolver should also search them
# #
#resolved_domains: [] # resolved_domains: []
resolved_domains: resolved_domains:
- oopen.de - oopen.de
@@ -2245,7 +2244,7 @@ resolved_dnssec: false
# dns.as250.net: 194.150.168.168 # dns.as250.net: 194.150.168.168
# #
resolved_fallback_nameserver: resolved_fallback_nameserver:
- 194.150.168.168 - 194.150.168.168
# --- # ---
@@ -2283,7 +2282,7 @@ munin_remote_ipv6_old: 2a01:4f9:3a:1051::84
# --- # ---
cron_env_entries: [] cron_env_entries: []
#cron_env_entries: # cron_env_entries:
# - name: PATH # - name: PATH
# job: /root/bin/admin-stuff:/root/bin:usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin # job: /root/bin/admin-stuff:/root/bin:usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
# #
@@ -2291,7 +2290,7 @@ cron_env_entries: []
# job: /bin/bash # job: /bin/bash
cron_user_entries: [] cron_user_entries: []
#cron_user_entries: # cron_user_entries:
# #
# - name: "Check if Postfix Mailservice is up and running?" # - name: "Check if Postfix Mailservice is up and running?"
# minute: "*/15" # minute: "*/15"
@@ -2303,7 +2302,7 @@ cron_user_entries: []
cron_user_special_time_entries: [] cron_user_special_time_entries: []
#cron_user_special_time_entries: # cron_user_special_time_entries:
# #
# - name: "Check if Postfix Service is running at boot time" # - name: "Check if Postfix Service is running at boot time"
# special_time: reboot # special_time: reboot
@@ -2380,9 +2379,9 @@ extra_system_user: []
entries_authorized_key: [] entries_authorized_key: []
#entries_authorized_key: # entries_authorized_key:
# - user: root # - user: root
# - key: 'ssh-rsa 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 root@b.ns' # - key: 'ssh-rsa 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 root@b.ns'
create_sftp_group: false create_sftp_group: false
@@ -2411,8 +2410,8 @@ sshd_ports:
- 22 - 22
sshd_listen_address: sshd_listen_address:
- '::' - '::'
- '0.0.0.0' - '0.0.0.0'
sshd_host_keys: sshd_host_keys:
- /etc/ssh/ssh_host_rsa_key - /etc/ssh/ssh_host_rsa_key
@@ -2443,9 +2442,9 @@ sshd_kbd_interactive_authentication:
sshd_use_pam: !!str "yes" sshd_use_pam: !!str "yes"
#sshd_allowed_users: # sshd_allowed_users:
# - chris # - chris
# - sysadm # - sysadm
sshd_allowed_users: {} sshd_allowed_users: {}
sshd_print_motd: !!str "no" sshd_print_motd: !!str "no"
@@ -2454,7 +2453,7 @@ sshd_use_dns: !!str "no"
sshd_gateway_ports: !!str "no" sshd_gateway_ports: !!str "no"
#sshd_required_rsa_size: 4096 # sshd_required_rsa_size: 4096
# This users are allowed to use password authentification # This users are allowed to use password authentification
# #
@@ -2582,31 +2581,31 @@ bind9_gateway_acl:
- ::1/128 - ::1/128
bind9_gateway_listen_on_v6: bind9_gateway_listen_on_v6:
- none - none
bind9_gateway_listen_on: bind9_gateway_listen_on:
- any - any
#bind9_gateway_allow_transfer: {} # bind9_gateway_allow_transfer: {}
bind9_gateway_allow_transfer: bind9_gateway_allow_transfer:
- none - none
#bind9_transfer_source: !!str "192.168.182.1" # bind9_transfer_source: !!str "192.168.182.1"
bind9_transfer_source: {} bind9_transfer_source: {}
#bind9_notify_source: !!str "192.168.182.1" # bind9_notify_source: !!str "192.168.182.1"
bind9_notify_source: {} bind9_notify_source: {}
#bind9_gateway_allow_query: {} # bind9_gateway_allow_query: {}
bind9_gateway_allow_query: bind9_gateway_allow_query:
- local-net - local-net
#bind9_gateway_allow_query_cache: {} # ind9_gateway_allow_query_cache: {}
bind9_gateway_allow_query_cache: bind9_gateway_allow_query_cache:
- local-net - local-net
bind9_gateway_recursion: !!str "yes" bind9_gateway_recursion: !!str "yes"
#bind9_gateway_allow_recursion: {} # bind9_gateway_allow_recursion: {}
bind9_gateway_allow_recursion: bind9_gateway_allow_recursion:
- local-net - local-net
@@ -2628,6 +2627,8 @@ ntp_server: {}
# Firewall repository # Firewall repository
# --- # ---
git_default_branch: main
git_firewall_repository: {} git_firewall_repository: {}
# --- # ---
@@ -2896,7 +2897,7 @@ git_jitsi_meet_repositories:
# --- # ---
# group [so36_server_dehydrated] # group [so36_server_dehydrated]
# --- # ---
#git_so36_dehydrated_repositories: # git_so36_dehydrated_repositories:
# #
# # install repositories (destination: /usr/local/src/) # # install repositories (destination: /usr/local/src/)
# - name: dehydrated-cron # - name: dehydrated-cron
@@ -2926,7 +2927,7 @@ nfs_start_servers: 16
# NOTE !! # NOTE !!
# Take car to increase 'fsid' in case of more than one export # Take car to increase 'fsid' in case of more than one export
# #
#nfs_exports: # nfs_exports:
# - src: 192.168.112.10:/data/home # - src: 192.168.112.10:/data/home
# path: /data/home # path: /data/home
# mount_opts: users,rsize=8192,wsize=8192,hard,intr # mount_opts: users,rsize=8192,wsize=8192,hard,intr
@@ -3000,15 +3001,15 @@ copy_plain_files_postfwd:
- name: postfwd.bl-recipient-exeeds-msg-size-20mb - name: postfwd.bl-recipient-exeeds-msg-size-20mb
src_path: mailserver/etc/postfix/postfwd.bl-recipient-exeeds-msg-size-20mb src_path: mailserver/etc/postfix/postfwd.bl-recipient-exeeds-msg-size-20mb
dest_path: /etc/postfix/postfwd.bl-recipient-exeeds-msg-size-20mb dest_path: /etc/postfix/postfwd.bl-recipient-exeeds-msg-size-20mb
- name: postfwd.high-rate-number-messages - name: postfwd.high-rate-number-messages
src_path: mailserver/etc/postfix/postfwd.high-rate-number-messages src_path: mailserver/etc/postfix/postfwd.high-rate-number-messages
dest_path: /etc/postfix/postfwd.high-rate-number-messages dest_path: /etc/postfix/postfwd.high-rate-number-messages
- name: postfwd.high-rate-number-recipients - name: postfwd.high-rate-number-recipients
src_path: mailserver/etc/postfix/postfwd.high-rate-number-recipients src_path: mailserver/etc/postfix/postfwd.high-rate-number-recipients
dest_path: /etc/postfix/postfwd.high-rate-number-recipients dest_path: /etc/postfix/postfwd.high-rate-number-recipients
- name: postfwd.wl-hosts - name: postfwd.wl-hosts
src_path: mailserver/etc/postfix/postfwd.wl-hosts src_path: mailserver/etc/postfix/postfwd.wl-hosts
@@ -3103,18 +3104,18 @@ si_authorisation_signature:
website_name_postfixadmin: website_name_postfixadmin:
#email_welcome_message: "\n # email_welcome_message: "\n
#Hallo,\n # Hallo,\n
# #
#Ihre/Deine neue E-Mail Adresse ist eingerichtet.\n # Ihre/Deine neue E-Mail Adresse ist eingerichtet.\n
# #
#O.OPEN\n # O.OPEN\n
# #
#--\n # --\n
#O.OPEN | Phone: +49 30 / 290 484 91\n # O.OPEN | Phone: +49 30 / 290 484 91\n
#Erkelenzdamm 21 | Fax: +49 30 / 290 484 99\n # Erkelenzdamm 21 | Fax: +49 30 / 290 484 99\n
#D-10999 Berlin | E-MAIL: oo@oopen.de\n # -10999 Berlin | E-MAIL: oo@oopen.de\n
#" # "
email_welcome_message: email_welcome_message:
# - # -
@@ -3125,12 +3126,12 @@ dovecot_from_address:
dovecot_reply_to: dovecot_reply_to:
webmailer_address: webmailer_address:
#salutation: "O.OPEN\n # salutation: "O.OPEN\n
# #
#--\n # --\n
#O.OPEN | Phone: +49 30 / 290 484 91\n # O.OPEN | Phone: +49 30 / 290 484 91\n
#Erkelenzdamm 21 | Fax: +49 30 / 290 484 99\n # Erkelenzdamm 21 | Fax: +49 30 / 290 484 99\n
#D-10999 Berlin | http://oopen.de" # D-10999 Berlin | http://oopen.de"
salutation: salutation:
# - # -
@@ -3278,24 +3279,22 @@ samba_cronjob_permissions:
# start automatically after boot. # start automatically after boot.
# #
debian_services_active_and_started: debian_services_active_and_started:
- bind - bind
- cron - cron
- haveged - haveged
- ntp - ntp
- redis-server - redis-server
- ssh - ssh
- tor - tor
redhat_services_active_and_started: redhat_services_active_and_started:
- crond - crond
- haveged - haveged
- named - named
- ntpd - ntpd
- redis - redis
- sshd - sshd
- tor - tor
# ============================== # ==============================