/
/
/
This repo is destined for my server automations and setup.
1# ========================================
2# SYSTEM CONFIGURATION
3# ========================================
4system_timezone: UTC
5system_locale: en_US.UTF-8
6system_hostname: "{{ inventory_hostname }}"
7system_auto_upgrades: false
8system_unattended_upgrades: true
9
10# ========================================
11# USER CONFIGURATION
12# ========================================
13user_name: yannick
14user_uid: 1000
15user_gid: 1000
16user_shell: /bin/zsh
17user_groups: [sudo, docker, users]
18user_ssh_keys: []
19
20# ========================================
21# DOCKER CONFIGURATION
22# ========================================
23docker_users:
24 - "{{ user_name }}"
25 - yannick
26docker_install_compose: true
27docker_compose_version: v2.24.5
28docker_install_pip: false
29docker_edition: "ce"
30docker_install_recommends: false
31docker_apt_release_channel: stable
32docker_daemon_options:
33 log-driver: "json-file"
34 log-opts:
35 max-size: "10m"
36 max-file: "3"
37 storage-driver: "overlay2"
38 live-restore: true
39
40# ========================================
41# SECURITY CONFIGURATION
42# ========================================
43security_ssh_port: 22
44security_ssh_password_authentication: "no"
45security_ssh_permit_root_login: "no"
46security_ssh_usedns: "no"
47security_ssh_permit_empty_password: "no"
48security_ssh_challenge_response_auth: "no"
49security_ssh_gss_api_authentication: "no"
50security_ssh_x11_forwarding: "no"
51security_sudoers_passwordless: ['%sudo']
52security_autoupdate_enabled: false
53
54# Remove unnecessary network services
55security_unnecessary_packages:
56 - telnet
57 - rsh-server
58 - rsh-redone-server
59
60# ========================================
61# HOMELAB SERVICE DEFAULTS
62# ========================================
63
64# GUI configuration (for workstation)
65gui_enabled: false
66gpu_enabled: false
67
68# ========================================
69# ENVIRONMENT SETTINGS
70# ========================================
71environment: homelab
72env: homelab
73