CubelaPetarandClaude Fable 5
fbafe9670c
- hosts.ini: underscore group names, hostname aliases with ansible_host - move ansible_user/ansible_port to group_vars/all.yml - rename group_vars files to match underscore group names - trim sftp group_vars to its only override (password auth off) - run.yml: load moved secrets file (group_vars/secrets.yml) - untrack .DS_Store, extend .gitignore - prefill root/ansible/server READMEs, add jira + cloud server folders - update CLAUDE.md to match Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
69 lines
1.6 KiB
YAML
69 lines
1.6 KiB
YAML
---
|
|
# connection settings (identical for all hosts)
|
|
ansible_user: sbxadmin
|
|
ansible_port: 22
|
|
|
|
# generic settings
|
|
main_username: sbxadmin
|
|
main_groupname: "{{ main_username }}"
|
|
main_uid: "1000"
|
|
main_gid: "{{ main_uid }}"
|
|
|
|
# weareinteractive.environment
|
|
environment_config: { "PUID": "{{ main_gid }}", "PGID": "{{ main_gid }}" }
|
|
|
|
global_env_vars:
|
|
- "PUID={{ main_uid }}"
|
|
- "PGID={{ main_gid }}"
|
|
- "TZ={{ ntp_timezone }}"
|
|
|
|
# geerlingguy.ntp
|
|
ntp_timezone: "Europe/Berlin"
|
|
|
|
# geerlingguy.nfs
|
|
#nfs_exports: [ "/home/public *(rw,sync,no_root_squash)" ]
|
|
|
|
# geerlingguy.security
|
|
security_ssh_port: 22
|
|
security_ssh_password_authentication: "yes"
|
|
security_ssh_permit_root_login: "no"
|
|
security_ssh_usedns: "no"
|
|
security_ssh_permit_empty_password: "no"
|
|
security_ssh_challenge_response_auth: "no"
|
|
security_ssh_gss_api_authentication: "no"
|
|
security_ssh_x11_forwarding: "no"
|
|
security_ssh_allowed_users:
|
|
- "{{ main_username }}"
|
|
security_ssh_allowed_groups: []
|
|
security_sudoers_passwordless:
|
|
- "{{ main_username }}"
|
|
security_autoupdate_enabled: false
|
|
security_autoupdate_blacklist: []
|
|
security_autoupdate_reboot: false
|
|
security_autoupdate_reboot_time: "03:00"
|
|
security_autoupdate_mail_to: "service@softbox.de"
|
|
security_autoupdate_mail_on_error: false
|
|
security_fail2ban_enabled: true
|
|
security_fail2ban_custom_configuration_template: "jail.local.j2"
|
|
###
|
|
#packages
|
|
package_list:
|
|
- bash-completion
|
|
- htop
|
|
- apt-transport-https
|
|
- network-manager
|
|
- vim
|
|
- curl
|
|
- xclip
|
|
- net-tools
|
|
- rsync
|
|
- smartmontools
|
|
- parted
|
|
- mlocate
|
|
- cpp
|
|
- gcc
|
|
- make
|
|
- psmisc
|
|
#- linux-headers-$(uname -r)
|
|
- open-vm-tools
|