---

# ---
# vars used by roles/network_interfaces
# ---


# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True

# Should the interfaces be reloaded after config change?
network_interface_reload: False

network_interface_path: /etc/network/interfaces.d
network_interface_required_packages:
  - vlan
  - bridge-utils
  - ifmetric
  - ifupdown
  - ifenslave
  - resolvconf


network_interfaces:

  - device: eno2
    headline: eno2
    auto: true
    family: inet
    method: manual
    pre-up:
      - ifconfig $IFACE up
      - vconfig add eno2 11
    post-down:
      - ifconfig $IFACE down


  - device: eno2.11
    # use only once per device (for the first device entry)
    headline: eno2.11

    # auto & allow are only used for the first device entry
    allow: [] # array of allow-[stanzas] eg. allow-hotplug
    auto: true

    family: inet
    method: static
    hwaddress: 3c:ec:ef:77:d3:5e
    description:
    address: 10.10.11.6
    netmask: 24
    gateway: 10.10.11.254
    metric:
    pointopoint:
    mtu:
    scope:

    # additional user by dhcp method
    #
    hostname:
    leasehours:
    leasetime:
    vendor:
    client:

    # additional used by bootp method
    #
    bootfile:
    server:
    hwaddr:

    # optional dns settings nameservers: []
    #
    #    nameservers:
    #      - 194.150.168.168  # dns.as250.net
    #      - 91.239.100.100   # anycast.censurfridns.dk
    #    search: warenform.de
    #
    nameservers:
      - 192.168.11.1
      - 192.168.10.3
    search: ga.netz

    # optional additional subnets/ips subnets: []
    # subnets: 
    #   - '192.168.123.0/24'
    #   - '192.168.124.11/32'

    # optional bridge parameters bridge: {}
    # bridge:
    #   ports:
    #   stp:
    #   fd:
    #   maxwait:
    #   waitport:
    bridge: {}

    #  optional bonding parameters bond: {}
    #  bond:
    #    master
    #    primary
    #    slave
    #    method:
    #    miimon:
    #    lacp-rate:
    #    ad-select-rate:
    #    master:
    #    slaves:
    bond: {}

    # optional vlan settings | vlan: {}
    # vlan: {}
    #   raw-device: 'eth0'
    vlan: {}

    # inline hook scripts
    pre-up: [] # pre-up script lines
    up: []
    post-up: [] # post-up script lines (alias for up)
    pre-down: [] # pre-down script lines (alias for down)
    down: [] # down script lines
    post-down: [] # post-down script lines

  - device: br0
    # use only once per device (for the first device entry)
    headline: br0 - bridge over device eno1

    # auto & allow are only used for the first device entry
    allow: [] # array of allow-[stanzas] eg. allow-hotplug
    auto: true

    family: inet
    method: manual
    hwaddress: 3c:ec:ef:77:d3:5f
    description:
    address: 
    netmask: 
    gateway: 
    metric:
    pointopoint:
    mtu:
    scope:

    # additional user by dhcp method
    #
    hostname:
    leasehours:
    leasetime:
    vendor:
    client:

    # additional used by bootp method
    #
    bootfile:
    server:
    hwaddr:

    # optional dns settings nameservers: []
    #
    #    nameservers:
    #      - 194.150.168.168  # dns.as250.net
    #      - 91.239.100.100   # anycast.censurfridns.dk
    #    search: warenform.de
    #
    nameservers:
    search:

    # optional additional subnets/ips subnets: []
    # subnets: 
    #   - '192.168.123.0/24'
    #   - '192.168.124.11/32'

    # optional bridge parameters bridge: {}
    # bridge:
    #   ports:
    #   stp:
    #   fd:
    #   maxwait:
    #   waitport:
    bridge:
      ports: eno1 # for mor devices support a blank separated list
      stp: !!str off
      fd: 5
      hello: 2
      maxage: 12

    #  optional bonding parameters bond: {}
    #  bond:
    #    master
    #    primary
    #    slave
    #    method:
    #    miimon:
    #    lacp-rate:
    #    ad-select-rate:
    #    master:
    #    slaves:
    bond: {}

    # optional vlan settings | vlan: {}
    # vlan: {}
    #   raw-device: 'eth0'
    vlan: {}

    # inline hook scripts
    pre-up: [] # pre-up script lines
    up: []
    post-up: [] # post-up script lines (alias for up)
    pre-down: [] # pre-down script lines (alias for down)
    down: [] # down script lines
    post-down: [] # post-down script lines


# ---
# vars used by roles/ansible_dependencies
# ---


# ---
# vars used by roles/ansible_user
# ---

# ---
# vars used by roles/common/tasks/basic.yml
# ---

# ---
# vars used by apt.yml
# ---


# ---
# vars used by roles/common/tasks/users.yml
# ---


# ---
# vars used by roles/common/tasks/users-systemfiles.yml
# ---


# ---
# vars used by roles/common/tasks/webadmin-user.yml
# ---


# ---
# vars used by roles/common/tasks/sshd.yml
# ---

sshd_permit_root_login: !!str "prohibit-password"


# ---
# vars used by roles/common/tasks/sudoers.yml
# ---


# ---
# vars used by roles/common/tasks/caching-nameserver.yml
# ---


# ---
# vars used by roles/common/tasks/git.yml
# ---

# ---
# vars used by roles/common/tasks/copy_files.yml
# ---


# ---
# vars used by roles/common/tasks/symlink_files.yml
# ---


# ---
# vars used by roles/common/tasks/config_files_mailsystem_scripts.yml
# ---



# ==============================


# ---
# vars used by scripts/reset_root_passwd.yml
# ---

root_user: {}