/
/
/
This repo is destined for my server automations and setup.
1# ========================================
2# SYSTEM CONFIGURATION
3# ========================================
4system_timezone: UTC
5system_locale: en_US.UTF-8
6system_hostname: "{{ inventory_hostname }}"
7system_auto_upgrades: false
8system_unattended_upgrades: true
9
10# ========================================
11# USER CONFIGURATION
12# ========================================
13my_user_username: yannick
14user_uid: 1000
15user_gid: 1000
16user_shell: /bin/zsh
17my_user_groups: [sudo, docker, users]
18user_ssh_keys: []
19
20# ========================================
21# DOCKER CONFIGURATION
22# ========================================
23docker_users:
24 - "{{ my_user_username }}"
25docker_install_compose: true
26docker_compose_version: v2.24.5
27docker_install_pip: false
28docker_edition: "ce"
29docker_install_recommends: false
30docker_apt_release_channel: stable
31docker_daemon_options:
32 log-driver: "json-file"
33 log-opts:
34 max-size: "10m"
35 max-file: "3"
36 storage-driver: "overlay2"
37 live-restore: true
38
39# ========================================
40# SECURITY CONFIGURATION
41# ========================================
42security_ssh_port: 22
43security_ssh_password_authentication: "no"
44security_ssh_permit_root_login: "no"
45security_ssh_usedns: "no"
46security_ssh_permit_empty_password: "no"
47security_ssh_challenge_response_auth: "no"
48security_ssh_gss_api_authentication: "no"
49security_ssh_x11_forwarding: "no"
50security_sudoers_passwordless: ['%sudo']
51security_autoupdate_enabled: false
52
53# Remove unnecessary network services
54security_unnecessary_packages:
55 - telnet
56 - rsh-server
57 - rsh-redone-server
58
59# ========================================
60# HOMELAB SERVICE DEFAULTS
61# ========================================
62
63# GUI configuration (for workstation)
64gui_enabled: false
65gpu_enabled: false
66
67# ========================================
68# ENVIRONMENT SETTINGS
69# ========================================
70environment: homelab
71env: homelab
72