# Alliance Boréale - Rôle Common - Default Variables
# Date: 2025-10-31

---
# Ces valeurs sont écrasées par group_vars/all.yml
# Elles servent de fallback si group_vars absent

base_packages:
  - vim
  - htop
  - curl
  - git
  - python3

system:
  timezone: America/Toronto
  locale: en_CA.UTF-8

ntp:
  enabled: true
  servers:
    - 0.ca.pool.ntp.org
    - 1.ca.pool.ntp.org

ssh:
  port: 22
  permit_root_login: false
  password_authentication: false
  pubkey_authentication: true

users:
  ansible:
    name: ansible
    groups: [sudo]
    shell: /bin/bash
    sudo_nopasswd: true

security:
  firewall: nftables
  fail2ban_enabled: true
  unattended_upgrades: true

firewall:
  default_policy: drop

network:
  internal_subnet: 10.0.0.0/8