---
# ---
# vars used by roles/common/tasks/basic.yml
# ---

# ---
# vars used by roles/common/tasks/sshd.yml
# ---

sshd_permit_root_login: !!str "prohibit-password"

# ---
# vars used by apt.yml
# ---

# ---
# vars used by roles/common/tasks/systemd-resolved.yml
# ---

systemd_resolved: true

resolved_nameserver:
  - 185.12.64.2
  - 185.12.64.1
  - 2a01:4ff:ff00::add:2
  - 2a01:4ff:ff00::add:1

resolved_domains:
  - ~.
  - oopen.de

resolved_dnssec: false

resolved_fallback_nameserver:
  - 194.150.168.168

# ---
# vars used by roles/common/tasks/cron.yml
# ---

cron_env_entries:
  - name: PATH
    job: /root/bin/admin-stuff:/root/bin:/usr/local/apache2/bin:/usr/local/php/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

  - name: SHELL
    job: /bin/bash
    insertafter: PATH

cron_user_special_time_entries:
  - name: "Restart DNS Cache service 'systemd-resolved'"
    special_time: reboot
    job: "sleep 5 ; /bin/systemctl restart systemd-resolved"
    insertafter: PATH

cron_user_entries:
  - name: "Check if webservices sre running. Restart if necessary"
    minute: "*/5"
    hour: "*"
    job: /root/bin/monitoring/check_webservice_load.sh

  - name: "Check if SSH service is running. Restart service if needed."
    minute: "*/5"
    hour: "*"
    job: /root/bin/monitoring/check_ssh.sh

  - name: "Check if Postfix Mailservice is up and running?"
    minute: "*/15"
    hour: "*"
    job: /root/bin/monitoring/check_postfix.sh

  - name: "Check Postfix E-Mail LOG file for 'fatal' errors.."
    minute: "*/5"
    hour: "*"
    job: /root/bin/postfix/check-postfix-fatal-errors.sh

  - name: "Optimize mysql tables"
    minute: "53"
    hour: "04"
    job: /root/bin/mysql/optimize_mysql_tables.sh

  - name: "Flush query cache for mysql tables"
    minute: "27"
    hour: "04"
    job: /root/bin/mysql/flush_query_cache.sh

  - name: "Flush Host cache"
    minute: "17"
    hour: "05"
    job: /root/bin/mysql/flush_host_cache.sh

  - name: "Run occ file:scan for each cloud account"
    minute: "02"
    hour: "23"
    job: /root/bin/nextcloud/occ_maintenance.sh -s cloud-test.ndhosting.de

  - name: "Background job for nextcloud instance 'cloud-test.ndhosting.de"
    minute: "*/15"
    hour: "*"
    job: sudo -u "www-data" /usr/local/php/bin/php  -f /var/www/cloud-test.ndhosting.de/htdocs/cron.php

  - name: "Generate/Renew Let's Encrypt Certificates if needed (using dehydrated script)"
    minute: "23"
    hour: "05"
    job: /var/lib/dehydrated/cron/dehydrated_cron.sh

  - name: "Check whether all certificates are included in the VHOST configurations"
    minute: "33"
    hour: "05"
    job: /var/lib/dehydrated/tools/update_ssl_directives.sh

# ---
# vars used by roles/common/tasks/users.yml
# ---

sudo_users:
  - chris
  - sysadm
  - localadmin

# ---
# vars used by roles/common/tasks/sudoers.yml
# ---

sudoers_file_user_privileges:
  - name: back
    entry: "ALL=(www-data) NOPASSWD: /usr/local/php/bin/php"