Files

65 lines
1.5 KiB
YAML

---
# generic settings
main_username: sbxadmin
main_groupname: "{{ main_username }}"
main_uid: "1000"
main_gid: "{{ main_uid }}"
# weareinteractive.environment
environment_config: { "PUID": "{{ main_gid }}", "PGID": "{{ main_gid }}" }
global_env_vars:
- "PUID={{ main_uid }}"
- "PGID={{ main_gid }}"
- "TZ={{ ntp_timezone }}"
# geerlingguy.ntp
ntp_timezone: "Europe/Berlin"
# geerlingguy.nfs
#nfs_exports: [ "/home/public *(rw,sync,no_root_squash)" ]
# geerlingguy.security
security_ssh_port: 22
security_ssh_password_authentication: "yes"
security_ssh_permit_root_login: "no"
security_ssh_usedns: "no"
security_ssh_permit_empty_password: "no"
security_ssh_challenge_response_auth: "no"
security_ssh_gss_api_authentication: "no"
security_ssh_x11_forwarding: "no"
security_ssh_allowed_users:
- "{{ main_username }}"
security_ssh_allowed_groups: []
security_sudoers_passwordless:
- "{{ main_username }}"
security_autoupdate_enabled: false
security_autoupdate_blacklist: []
security_autoupdate_reboot: false
security_autoupdate_reboot_time: "03:00"
security_autoupdate_mail_to: "service@softbox.de"
security_autoupdate_mail_on_error: false
security_fail2ban_enabled: true
security_fail2ban_custom_configuration_template: "jail.local.j2"
###
#packages
package_list:
- bash-completion
- htop
- apt-transport-https
- network-manager
- vim
- curl
- xclip
- net-tools
- rsync
- smartmontools
- parted
- mlocate
- cpp
- gcc
- make
- psmisc
#- linux-headers-$(uname -r)
- open-vm-tools