CubelaPetarandClaude Fable 5
277f378fb8
- sftp IP 192.168.99.68 in CLAUDE.md and server README (DMZ move) - ansible.cfg: ansible_python_interpreter is a host var, moved to group_vars/all.yml; [ssh_connections] -> [ssh_connection] so pipelining actually applies - remove playbooks/shutdown.yml (targeted nonexistent k3s_cluster group) Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
70 lines
1.6 KiB
YAML
70 lines
1.6 KiB
YAML
---
|
|
# connection settings (identical for all hosts)
|
|
ansible_user: sbxadmin
|
|
ansible_port: 22
|
|
ansible_python_interpreter: /usr/bin/python3
|
|
|
|
# generic settings
|
|
main_username: sbxadmin
|
|
main_groupname: "{{ main_username }}"
|
|
main_uid: "1000"
|
|
main_gid: "{{ main_uid }}"
|
|
|
|
# weareinteractive.environment
|
|
environment_config: { "PUID": "{{ main_gid }}", "PGID": "{{ main_gid }}" }
|
|
|
|
global_env_vars:
|
|
- "PUID={{ main_uid }}"
|
|
- "PGID={{ main_gid }}"
|
|
- "TZ={{ ntp_timezone }}"
|
|
|
|
# geerlingguy.ntp
|
|
ntp_timezone: "Europe/Berlin"
|
|
|
|
# geerlingguy.nfs
|
|
#nfs_exports: [ "/home/public *(rw,sync,no_root_squash)" ]
|
|
|
|
# geerlingguy.security
|
|
security_ssh_port: 22
|
|
security_ssh_password_authentication: "yes"
|
|
security_ssh_permit_root_login: "no"
|
|
security_ssh_usedns: "no"
|
|
security_ssh_permit_empty_password: "no"
|
|
security_ssh_challenge_response_auth: "no"
|
|
security_ssh_gss_api_authentication: "no"
|
|
security_ssh_x11_forwarding: "no"
|
|
security_ssh_allowed_users:
|
|
- "{{ main_username }}"
|
|
security_ssh_allowed_groups: []
|
|
security_sudoers_passwordless:
|
|
- "{{ main_username }}"
|
|
security_autoupdate_enabled: false
|
|
security_autoupdate_blacklist: []
|
|
security_autoupdate_reboot: false
|
|
security_autoupdate_reboot_time: "03:00"
|
|
security_autoupdate_mail_to: "service@softbox.de"
|
|
security_autoupdate_mail_on_error: false
|
|
security_fail2ban_enabled: true
|
|
security_fail2ban_custom_configuration_template: "jail.local.j2"
|
|
###
|
|
#packages
|
|
package_list:
|
|
- bash-completion
|
|
- htop
|
|
- apt-transport-https
|
|
- network-manager
|
|
- vim
|
|
- curl
|
|
- xclip
|
|
- net-tools
|
|
- rsync
|
|
- smartmontools
|
|
- parted
|
|
- mlocate
|
|
- cpp
|
|
- gcc
|
|
- make
|
|
- psmisc
|
|
#- linux-headers-$(uname -r)
|
|
- open-vm-tools
|