--- # List of UNIX group which will have full root access, using sudo system_admin_groups: ['admins','Domain\ Admins'] # Email address of the admin (will receive root email) # system_admin_email: admin@domain.net # List of basic system utilisties to install # (Common list for EL and Debian based distro) system_utils: - htop - screen - iftop - tcpdump - bzip2 - pbzip2 - lzop - vim - bash-completion - rsync - lsof - net-tools - sysstat - pciutils - strace - wget - man-db - unzip - openssl - pv - less - nano - tree - mc - tar # Kernel modules to load system_kmods: [] # List of extra package to install system_extra_pkgs: [] # MegaCLI tool version megacli_version: 8.07.14-1 # List of FS to mount fstab: [] # fstab: # - name: /mnt/data # src: files.domain.org:/data # opts: noatime # fstype: nfs # state: present # boot: yes # Various SELinux booleans sebool: [] # sebool: # - name: httpd_use_fusefs # state: True # persistent: True system_swappiness: 10 system_sysctl: {} # system_sysctl: # vm.vfs_cache_pressure: 500 # vm.dirty_ratio: 10 # vm.dirty_background_ratio: 5 # Disable traditional rsyslog daemon system_disable_syslog: False # Send journald logs to a remote server using systemd-journal-upload # system_journal_remote_uri: http://logs.example.com:19532 # Max disk space used by the Journal. Default is 10% of the available space. But must be exressed as an absolute value in the conf # We can specify the max amount of space used, and the min amount of space left free. The smallest limit will apply system_journal_max_use: 3G system_journal_keep_free: 2G # System Timezone system_tz: 'Europe/Paris' # Tuned profile to apply. If undefined, virt-host and virt-guest are applied automatically when needed # system_tuned_profile: enterprise-storage # Frquency of the fstrim cron job. Can be daily, weekly or monthly system_fstrim_freq: weekly system_base_bash_aliases: ls: 'ls $LS_OPTIONS' ll: 'ls $LS_OPTIONS -l' l: 'ls $LS_OPTIONS -lA' rm: 'rm -i' cp: 'cp -i' mv: 'mv -i' sudo: 'sudo ' # Allow alias expansion after sudo system_extra_bash_aliases: {} system_bash_aliases: "{{ system_base_bash_aliases | combine(system_extra_bash_aliases, recursive=True) }}" # shell scriplet to exec on boot system_rc_local_base_cmd: [] system_rc_local_extra_cmd: [] system_rc_local_cmd: "{{ system_rc_local_base_cmd + system_rc_local_extra_cmd }}" # shell scriplet to exec on shutdown system_rc_local_shutdown_base_cmd: [] system_rc_local_shutdown_extra_cmd: [] system_rc_local_shutdown_cmd: "{{ system_rc_local_shutdown_base_cmd + system_rc_local_shutdown_extra_cmd }}" # Optional : if system_ansible_ssh_keys is set (to a list of public SSH keys) # it'll configure the keys for the ansible user. If not set, you have to configure it manually # or with the ssh_users / ssh_extra_users # system_ansible_ssh_keys: [] # if set, will add the following options to the ssh keys for ansible system_ansible_ssh_keys_options: - no-X11-forwarding - no-agent-forwarding - no-pty # If set, will restrict the ansible ssh keys to the configured IP. # An empty list means no restriction system_ansible_src_ip: [] ...