/
/
Ansible role that sets up sane defaults based on a simple host configuration.
Baseline Debian/Ubuntu system configuration.
| Variable | Default | Description |
|---|---|---|
system_hostname |
inventory hostname | Set the system hostname |
system_timezone |
Europe/Amsterdam |
System timezone |
system_auto_upgrades |
false |
Disable unattended-upgrades (prevents surprise reboots) |
system_passwordless_sudo |
true |
Allow sudo group to run commands without password |
system_umask |
002 |
Default UMASK for new files |
system_upgrade_mode |
dist |
Package upgrade mode: dist, full, or safe |
system_extra_packages |
[] |
Additional APT packages to install |
system_wifi_powersave_disable |
false |
Disable WiFi power saving via systemd oneshot |
system_wifi_auto_reconnect |
false |
Periodic LAN check; bounce interface on failure |
system_wifi_interface |
wlan0 |
WiFi interface name |
system_wifi_check_interval_sec |
60 |
Reconnect check interval (seconds) |
system_wifi_lan_target |
"" |
LAN ping target. This decides whether to reconnect. Empty discovers the default gateway at run time |
system_wifi_wan_target |
1.1.1.1 |
WAN ping target â logged only, never a reason to reconnect |
system_wifi_check_count |
2 |
Echo requests per probe |
system_wifi_check_timeout |
3 |
Per-probe timeout (seconds) |
The reconnect is driven by the LAN check alone. These devices talk to the broker, the registry and the runner on the local subnet; an internet outage is not a reason to bounce a working link, and a LAN failure behind a working internet connection is the case the unit exists for.
system_wifi_check_target(a single internet-only target) was replaced by the pair above.
system_manage_hostname is true)