23 lines
771 B
YAML
23 lines
771 B
YAML
ansible_become_password: "{{ vault_root_pass }}"
|
|
ansible_host: "{{ vault_ansible_host }}"
|
|
|
|
# common role
|
|
common_apt_packages:
|
|
- pcscd
|
|
- pinentry-curses
|
|
- radeontop
|
|
common_git_enabled: true
|
|
common_git_username: "{{ vault_common_gitconfig_username }}"
|
|
common_git_email: "{{ vault_common_gitconfig_email }}"
|
|
common_git_force_sign: true
|
|
common_git_signing_key: "{{ vault_common_gitconfig_signingkey }}"
|
|
common_install_fonts: true
|
|
security_sysctl_configuration:
|
|
'fs.inotify.max_user_watches': 1048576
|
|
'vm.swappiness': 1
|
|
workstation_setup_xorg_enabled: true
|
|
# security role
|
|
security_firewall_filter_policy_output: accept
|
|
security_firewall_filter_policy_forward: accept
|
|
security_firewall_mangle_policy_forward: accept
|
|
security_firewall_mangle_drop_reservednets: false
|