151 lines
3.1 KiB
YAML
151 lines
3.1 KiB
YAML
---
|
|
# file: roles/base/defaults/main.yml
|
|
|
|
# ****
|
|
# Core
|
|
# ****
|
|
|
|
# General
|
|
# =======
|
|
|
|
# User that should be configured for future management
|
|
base_core_management_user: "{{ ansible_user }}"
|
|
|
|
# Secondary user that may be configured for future management
|
|
base_core_secondary_user: ""
|
|
|
|
# If enabled, the password for the management user account will be disabled
|
|
base_core_management_user_disable_password: false
|
|
|
|
# If enabled, the password for the secondary user account will be disabled
|
|
base_core_secondary_user_disable_password: false
|
|
|
|
# Install all available updates at runtime
|
|
base_core_install_updates: true
|
|
|
|
# Firewall
|
|
# ========
|
|
|
|
# Allows the firewall to be configured
|
|
base_core_firewall_configure: true
|
|
|
|
# Hostname
|
|
# ========
|
|
|
|
# Defines the hostname to be forced on the host but is ignored if undefined
|
|
base_core_hostname: ""
|
|
|
|
# MOTD
|
|
# ====
|
|
|
|
# Allows the MOTD to be configured
|
|
base_core_motd_configure: true
|
|
|
|
# Banner to add to MOTD
|
|
base_core_motd_banner: ""
|
|
|
|
# Root CA
|
|
# =======
|
|
|
|
# Defines the basename to use for the Root CA
|
|
base_core_root_ca_basename: ""
|
|
|
|
# Converts the defined certificate from DER to PEM type
|
|
base_core_root_ca_convert: false
|
|
|
|
# URL to download the Root CA
|
|
base_core_root_ca_url: ""
|
|
|
|
# SSH
|
|
# ===
|
|
|
|
# Allow ssh root login
|
|
base_core_ssh_permit_root_login: false
|
|
|
|
# Allow ssh password authentication
|
|
base_core_ssh_permit_password_authentication: false
|
|
|
|
# Self Signed Cert
|
|
# ================
|
|
|
|
# Common name for self signed cert, use hostname as a default
|
|
base_core_cert_common_name: "{{ ansible_facts['nodename'] }}"
|
|
|
|
# Time Sync
|
|
# ========
|
|
|
|
# Defines the timezone to apply to the client
|
|
base_core_timezone: "America/Boise"
|
|
|
|
# Web Management
|
|
# ==============
|
|
|
|
# Enables the installation of the cockpit web management package(s)
|
|
base_core_web_management: false
|
|
|
|
# ******
|
|
# Debian
|
|
# ******
|
|
|
|
# Automatic Updates
|
|
# =============
|
|
|
|
base_debian_automatic_updates_download: "02:00"
|
|
base_debian_automatic_updates_download_randomizer: "5m"
|
|
base_debian_automatic_updates_update: "02:15"
|
|
base_debian_automatic_updates_update_randomizer: "5m"
|
|
base_debian_automatic_updates_reboot: "03:30"
|
|
|
|
# ******
|
|
# RedHat
|
|
# ******
|
|
|
|
# RHEL Subscription
|
|
# =============
|
|
|
|
base_redhat_subscription_activationkey: ""
|
|
base_redhat_subscription_org_id: ""
|
|
|
|
# EPEL
|
|
# =============
|
|
|
|
base_redhat_epel: true
|
|
|
|
# DNF Automatic
|
|
# =============
|
|
|
|
base_redhat_dnf_automatic_timer: "02:00"
|
|
base_redhat_dnf_automatic_timer_randomizer: "5m"
|
|
|
|
# commands
|
|
# --------
|
|
|
|
base_redhat_dnf_automatic_apply_updates: yes
|
|
base_redhat_dnf_automatic_download_updates: yes
|
|
base_redhat_dnf_automatic_upgrade_type: default
|
|
base_redhat_dnf_automatic_random_sleep: 0
|
|
|
|
# emitters
|
|
# --------
|
|
|
|
base_redhat_dnf_automatic_emit_via: stdio
|
|
base_redhat_dnf_automatic_system_name: "{{ ansible_facts['nodename'] }}"
|
|
|
|
# command
|
|
# -------
|
|
|
|
base_redhat_dnf_automatic_command_format: ""
|
|
base_redhat_dnf_automatic_stdin_format: ""
|
|
|
|
# command_email
|
|
# -------------
|
|
|
|
base_redhat_dnf_automatic_email_command_format: ""
|
|
base_redhat_dnf_automatic_email_stdin_format: ""
|
|
|
|
# email
|
|
# -----
|
|
|
|
base_redhat_dnf_automatic_email_from: root
|
|
base_redhat_dnf_automatic_email_to: root
|
|
base_redhat_dnf_automatic_email_host: localhost
|