Graham McIntire
292758900e
- DNS: hi.mcintire.me A/AAAA, git.mcintire.me A/AAAA updated to new host - forgejo role: Docker Compose deployment with SQLite, INSTALL_LOCK, admin user creation - Caddyfile-hi.j2: reverse proxy git.mcintire.me -> localhost:3000 - tailscale role: skip connect when no auth key; dynamic repo suite - debian role: fix Signed-By for debian.sources on trixie - curl added to base Debian packages - support.vntx.net: added to vntx_servers, DNS, host_vars
114 lines
2 KiB
YAML
114 lines
2 KiB
YAML
---
|
|
managed_groups: []
|
|
managed_users: []
|
|
|
|
admin_group_map:
|
|
Debian: sudo
|
|
RedHat: wheel
|
|
FreeBSD: wheel
|
|
|
|
admin_group: "{{ admin_group_map.get(ansible_facts['os_family'], 'sudo') }}"
|
|
|
|
sudoers_dir_map:
|
|
Debian: /etc/sudoers.d
|
|
RedHat: /etc/sudoers.d
|
|
FreeBSD: /usr/local/etc/sudoers.d
|
|
Alpine: /etc/sudoers.d
|
|
|
|
sudoers_dir: "{{ sudoers_dir_map.get(ansible_facts['os_family'], '/etc/sudoers.d') }}"
|
|
|
|
sudoers_path_map:
|
|
Debian: /etc/sudoers
|
|
RedHat: /etc/sudoers
|
|
FreeBSD: /usr/local/etc/sudoers
|
|
Alpine: /etc/sudoers
|
|
|
|
sudoers_path: "{{ sudoers_path_map.get(ansible_facts['os_family'], '/etc/sudoers') }}"
|
|
|
|
visudo_path_map:
|
|
Debian: /usr/sbin/visudo
|
|
RedHat: /usr/sbin/visudo
|
|
FreeBSD: /usr/local/sbin/visudo
|
|
Alpine: /usr/sbin/visudo
|
|
|
|
visudo_path: "{{ visudo_path_map.get(ansible_facts['os_family'], '/usr/sbin/visudo') }}"
|
|
|
|
base_common_packages:
|
|
- git
|
|
- vim
|
|
- wget
|
|
- htop
|
|
- tmux
|
|
- rsync
|
|
- zsh
|
|
|
|
base_packages_by_os_family:
|
|
Debian:
|
|
- sudo
|
|
- curl
|
|
- jq
|
|
- sysstat
|
|
- smartmontools
|
|
- lm-sensors
|
|
- debconf-utils
|
|
- chrony
|
|
- python3
|
|
- python3-apt
|
|
RedHat:
|
|
- sudo
|
|
- jq
|
|
- sysstat
|
|
- smartmontools
|
|
- lm_sensors
|
|
- python3
|
|
FreeBSD:
|
|
- sudo
|
|
- python3
|
|
|
|
base_packages_by_distribution:
|
|
Ubuntu:
|
|
- lsof
|
|
- mosh
|
|
- unattended-upgrades
|
|
- silversearcher-ag
|
|
- net-tools
|
|
- locate
|
|
- fail2ban
|
|
- nethogs
|
|
- pv
|
|
- fzf
|
|
- qemu-guest-agent
|
|
- python3-apt
|
|
Debian:
|
|
- lsof
|
|
- mosh
|
|
- unattended-upgrades
|
|
- silversearcher-ag
|
|
- net-tools
|
|
- locate
|
|
- fail2ban
|
|
- nethogs
|
|
- pv
|
|
- fzf
|
|
- qemu-guest-agent
|
|
AlmaLinux:
|
|
- bind-utils
|
|
- lsof
|
|
- nano
|
|
- net-tools
|
|
- pv
|
|
- selinux-policy
|
|
- tar
|
|
- unzip
|
|
- qemu-guest-agent
|
|
- python3-libselinux
|
|
|
|
# Packages only available on specific AlmaLinux versions
|
|
# EL9 has mosh, mlocate, fail2ban via EPEL; EL10 does not yet
|
|
base_packages_almalinux_9:
|
|
- mosh
|
|
- mlocate
|
|
- fail2ban
|
|
|
|
base_packages_almalinux_10:
|
|
- plocate
|