ansible_become_password: "{{ vault_root_pass }}"
ansible_host: "{{ vault_ansible_host }}"
ansible_connection: local

custom_development:
  rust:
    enable: true

custom_common:
  sysctl:
    'fs.inotify.max_user_watches': 1048576
    'vm.swappiness': 1
  packages:
    - pcscd
    - pinentry-curses
    - radeontop
  git:
    enable: true
    username: "{{ vault_common_gitconfig_username }}"
    email: "{{ vault_common_gitconfig_email }}"
    force_sign: true
    signing_key: "{{ vault_common_gitconfig_signingkey }}"
  install_fonts: true

custom_security:
  firewall:
    filter:
      policy:
        output: accept
        forward: accept
    mangle:
      drop_privatenets: false
      policy:
        forward: accept