42 lines
900 B
YAML
42 lines
900 B
YAML
ansible_become_password: "{{ vault_root_pass }}"
|
|
ansible_host: "{{ vault_ansible_host }}"
|
|
ansible_connection: local
|
|
|
|
custom_development:
|
|
rust:
|
|
enable: true
|
|
|
|
custom_common:
|
|
sysctl:
|
|
'fs.inotify.max_user_watches': 1048576
|
|
'vm.swappiness': 1
|
|
packages:
|
|
- pcscd
|
|
- pinentry-curses
|
|
- radeontop
|
|
git:
|
|
enable: true
|
|
username: "{{ vault_common_gitconfig_username }}"
|
|
email: "{{ vault_common_gitconfig_email }}"
|
|
force_sign: true
|
|
signing_key: "{{ vault_common_gitconfig_signingkey }}"
|
|
install_fonts: true
|
|
|
|
custom_security:
|
|
firewall:
|
|
filter:
|
|
policy:
|
|
output: accept
|
|
forward: accept
|
|
mangle:
|
|
drop_privatenets: false
|
|
policy:
|
|
forward: accept
|
|
|
|
dns:
|
|
type: "udp"
|
|
udp:
|
|
dns4: "{{ vault_groups.network.internal.dns4 }}"
|
|
dns6: "{{ vault_groups.network.internal.dns6 }}"
|
|
network: "internal"
|
|
ip_dualstack: false
|