infra/ansible/roles/freeradius/defaults/main.yml
2026-07-12 15:35:31 -05:00

50 lines
1.3 KiB
YAML

---
# FreeRADIUS v3 role for Debian
freeradius_config_dir: /etc/freeradius/3.0
freeradius_service_name: freeradius
# Packages to install (Debian)
freeradius_packages:
- freeradius
- freeradius-mysql
- freeradius-utils
- mariadb-server
- python3-pymysql
# MySQL connection
freeradius_db_host: localhost
freeradius_db_port: 3306
freeradius_db_name: radius
freeradius_db_user: radius
# SQL dialect
freeradius_sql_dialect: mysql
freeradius_sql_driver: "rlm_sql_{{ freeradius_sql_dialect }}"
# Whether to read clients from nas table
freeradius_read_clients: true
freeradius_client_table: nas
# NAS clients — define in host_vars
# Each entry: { nasname, shortname, type, ports, secret, server, community, description }
freeradius_nas_clients: []
# RADIUS clients.conf entries — define in host_vars
# Each entry: { name, ipaddr, secret, shortname, nas_type }
freeradius_clients:
- name: localhost
ipaddr: "127.0.0.1"
secret: "{{ vault_freeradius_localhost_secret | default('testing123') }}"
shortname: localhost
nas_type: other
# Whether to seed the DB schema
freeradius_seed_db: true
# Whether to seed NAS table from freeradius_nas_clients
freeradius_seed_nas: true
# Whether to load user data from a SQL dump file
freeradius_load_user_data: false
freeradius_user_data_file: ""