system

1---
2# Feature flags
3system_disable_auto_updates: true
4system_manage_hostname: true
5system_passwordless_sudo: true
6system_reboot_if_required: true
7
8# Sudo group
9system_sudo_group: sudo
10
11# Extra packages (safe on headless)
12system_extra_packages: []
13
14# Package upgrade mode: "dist" or "full-upgrade"
15system_upgrade_mode: dist
16
17# UMASK
18system_umask: "002"
19
20# Kernel memory tunables. See roles/system/tasks/sysctl.yml for the
21# measurements behind these -- swappiness 60 had a Pi Zero 2 W paging 42k
22# pages out in 18 idle minutes at 60% memory use.
23system_sysctl_enabled: true
24system_sysctl_memory:
25  vm.swappiness: "10"
26  vm.vfs_cache_pressure: "50"
27
28# Persistent journal.
29#
30# Bounded deliberately: most of these hosts boot from SD cards, and an
31# unbounded journal defaults to 10% of the filesystem with continuous writes --
32# the exact wear pattern SD cards die of. Raise per-host for a machine on real
33# storage that is worth keeping more history on.
34system_journal_persistent: true
35system_journal_max_use: "200M"
36system_journal_max_file: "20M"
37system_journal_retention: "30day"
38# A looping service can otherwise write thousands of lines a second straight
39# to the card.
40system_journal_ratelimit_interval: "30s"
41system_journal_ratelimit_burst: "2000"
42
43# WiFi reliability (edge devices)
44system_wifi_powersave_disable: false
45system_wifi_auto_reconnect: false
46system_wifi_interface: "wlan0"
47system_wifi_check_interval_sec: 60
48
49# **The LAN decides whether to reconnect; the WAN only labels the log line.**
50# These devices talk to the broker, the registry and the runner -- all on the
51# local subnet -- so an internet outage is not a reason to bounce a working
52# link, and a LAN failure behind a working internet connection is exactly the
53# case the reconnect exists for.
54#
55# Empty means "discover the default gateway at run time", which keeps this
56# correct on any host without a per-host override.
57system_wifi_lan_target: ""
58system_wifi_wan_target: "1.1.1.1"
59system_wifi_check_count: 2
60system_wifi_check_timeout: 3
61
62