alliance-boreale/infrastructure/ansible2/roles/common/defaults/main.yml
Dan Allaire ef98fd8a3f Refonte
2026-03-09 18:23:06 -04:00

47 lines
750 B
YAML

# Alliance Boréale - Rôle Common - Default Variables
# Date: 2025-10-31
---
# Ces valeurs sont écrasées par group_vars/all.yml
# Elles servent de fallback si group_vars absent
base_packages:
- vim
- htop
- curl
- git
- python3
system:
timezone: America/Toronto
locale: en_CA.UTF-8
ntp:
enabled: true
servers:
- 0.ca.pool.ntp.org
- 1.ca.pool.ntp.org
ssh:
port: 22
permit_root_login: false
password_authentication: false
pubkey_authentication: true
users:
ansible:
name: ansible
groups: [sudo]
shell: /bin/bash
sudo_nopasswd: true
security:
firewall: nftables
fail2ban_enabled: true
unattended_upgrades: true
firewall:
default_policy: drop
network:
internal_subnet: 10.0.0.0/8