ansible_become_password: "{{ vault_root_pass }}"
ansible_host: "{{ vault_ansible_host }}"

# common role
common_apt_packages:
  - pcscd
  - pinentry-curses
  - radeontop
common_git_enabled: true
common_git_username: "{{ vault_common_gitconfig_username }}"
common_git_email: "{{ vault_common_gitconfig_email }}"
common_git_force_sign: true
common_git_signing_key: "{{ vault_common_gitconfig_signingkey }}"
common_install_fonts: true
common_sysctl_configuration:
  'fs.inotify.max_user_watches': 1048576
  'vm.swappiness': 1

# security role
security_firewall_filter_policy_output: accept
security_firewall_filter_policy_forward: accept
security_firewall_mangle_policy_forward: accept