majic-ansible-roles Files · testsite/group

Files @ 941f4f372672

Branch filter:

Location: majic-ansible-roles/testsite/group_vars/all.yml

941f4f372672 830 B text/x-yaml Show Annotation Show as Raw Download as Raw

branko

MAR-12: Updated the common role to deploy ferm, and set-up a basic firewall for allowing incoming SSH and ICMP echo requsts (ping).

---
# Configuration for role 'common', shared across all servers.
os_users:
  - name: admin
    uid: 1000
    additional_groups: sudo
    authorized_keys:
      - "{{ lookup('file', '~/.ssh/id_rsa.pub') }}"
    password: '$6$/aerscJY6aevRG$ABBCymEDtk2mHW/dklre9dMEdgZNJvVHsGLCzgjGmy61FssZ.KW7ePcO2wsMGIkHcg3mZlrA4dhYh.APq9OQu0'
  - name: johndoe
    uid: 1001
    additional_groups: "office,developer"
    authorized_keys: []
    password: '$6$cJnUatae7cMz23fl$O3HE2TslnEaKaTDSZnvuDDrfqILAiuMV1wOPGVnkUQFxUu3gIWZOyO7AI1OWYkqeQMVBiezpSqYNiQy6NF6bi0'

os_groups:
  - name: office
    gid: 2000
  - name: developer
    gid: 2001

common_packages:
  - emacs23-nox
  - screen
  - debconf-utils

ca_certificates:
  - "{{ inventory_dir }}/tls/example_ca_chain.pem"

incoming_connection_limit: 2/second

incoming_connection_limit_burst: 6