# When running a typical evolinux playbook
# you can customize those variables :

# emails

general_alert_email: "root@localhost"
reboot_alert_email: Null
apt_alert_email: Null
log2mail_alert_email: Null
raid_alert_email: Null
postfix_alias_email: Null
fail2ban_alert_email: Null
listupgrade_alert_email: Null
evomaintenance_alert_email: Null

# evolinux-base/hostname

evolinux_hostname: "{{ ansible_hostname }}"
evolinux_domain: "{{ ansible_domain }}"
evolinux_fqdn: "{{ ansible_fqdn }}"
evolinux_internal_hostname: "{{ evolinux_hostname }}"

# evolinux-base/apt

evolinux_apt_repositories_components: "main"
evolinux_apt_hooks: False

# evolinux-base/postfix

evolinux_postfix_myorigin: "{{ ansible_fqdn }}"
evolinux_postfix_slow_transports_enabled: True
evolinux_postfix_remove_exim: True

# evolinux-base/kernel

evolinux_kernel_reboot_after_panic: True
evolinux_kernel_disable_tcp_timestamps: True
evolinux_kernel_reduce_swapiness: True
evolinux_kernel_cve20165696: True

# evolinux-base/providers

evolinux_provider_online: False
evolinux_provider_orange_fce: False

# evolinux-base/default_www

evolinux_default_www_redirect_url: "http://evolix.fr"
evolinux_default_www_ssl_subject: "/CN={{ ansible_fqdn }}"
evolinux_default_www_nginx_enabled: False
evolinux_default_www_apache_enabled: False

# evolinux-base/misc.

evolinux_ntp_server: Null
evolinux_delete_nfs: True

# evolinux-admin-users

admin_users:
  - name: foo
    uid: 1001
    fullname: 'Mr Foo'
    password_hash: 'sdfgsdfgsdfgsdfg'
    ssh_key: 'ssh-rsa AZERTYXYZ'
  - name: bar
    uid: 1002
    fullname: 'Mr Bar'
    password_hash: 'gsdfgsdfgsdfgsdf'
    ssh_key: 'ssh-rsa QWERTYUIOP'

# minifirewall

minifirewall_git_url: "https://forge.evolix.org/minifirewall.git"
minifirewall_checkout_path: "/usr/local/src/minifirewall"
minifirewall_int: "{{ ansible_default_ipv4.interface }}"
minifirewall_ipv6: "on"
minifirewall_intlan: "{{ ansible_default_ipv4.address }}/32"
minifirewall_trusted_ips: []
minifirewall_privilegied_ips: []

# squid

squid_address: "{{ ansible_default_ipv4.address }}"

# proftpd

proftpd_hostname: "{{ ansible_hostname }}"
proftpd_fqdn: "{{ ansible_fqdn }}"

# evomaintenance

evomaintenance_alert_email: Null

evomaintenance_hostname: "{{ ansible_fqdn }}"

evomaintenance_pg_host: Null
evomaintenance_pg_passwd: Null
evomaintenance_pg_db: Null
evomaintenance_pg_table: Null

evomaintenance_from: "evomaintenance@{{ ansible_fqdn }}"
evomaintenance_full_from: "Evomaintenance <{{ evomaintenance_from }}>"

evomaintenance_urgency_from: mama.doe@example.com
evomaintenance_urgency_tel: "06.00.00.00.00"

evomaintenance_realm: "{{ ansible_domain }}"

evomaintenance_hosts: []