ansible-roles/evolinux-base/defaults/main.yml
Jérémy Lecour b2971d1f7d evolinux-base: add ssh.yml
* disable root login
* list authorized addresses
* disable AcceptEnv
2016-12-27 14:04:12 +01:00

56 lines
1.2 KiB
YAML

---
general_alert_email: "root@localhost"
reboot_alert_email: Null
apt_alert_email: Null
log2mail_alert_email: Null
raid_alert_email: Null
postfix_alias_email: Null
# hostname
evolinux_hostname: "{{ ansible_hostname }}"
evolinux_domain: "{{ ansible_domain }}"
evolinux_fqdn: "{{ ansible_fqdn }}"
evolinux_internal_hostname: "{{ evolinux_hostname }}"
# apt
evolinux_apt_repositories_components: "main"
evolinux_apt_hooks: True
evolinux_apt_remove_aptitude: True
# postfix
evolinux_postfix_myorigin: "{{ ansible_fqdn }}"
evolinux_postfix_slow_transports_enabled: True
evolinux_postfix_remove_exim: True
# kernel
evolinux_kernel_reboot_after_panic: True
evolinux_kernel_disable_tcp_timestamps: True
evolinux_kernel_reduce_swapiness: True
evolinux_kernel_cve20165696: True
# providers
evolinux_provider_online: False
evolinux_provider_orange_fce: False
# default www
evolinux_default_www_redirect_url: "http://evolix.fr"
evolinux_default_www_ssl_subject: "/CN={{ ansible_fqdn }}"
evolinux_default_www_nginx_enabled: False
evolinux_default_www_apache_enabled: False
# ssh
evolinux_ssh_password_auth_addresses: []
evolinux_ssh_disable_root: True
# misc.
evolinux_ntp_server: Null
evolinux_delete_nfs: True