2012-10-08 19:35:54 +00:00
|
|
|
---
|
2012-11-09 22:39:32 +00:00
|
|
|
basedir: /srv/web/infra/ansible
|
2012-10-08 19:48:36 +00:00
|
|
|
private: /srv/private/ansible
|
2013-05-09 22:59:38 +00:00
|
|
|
bigfiles: /srv/web/infra/bigfiles
|
2012-10-08 19:48:36 +00:00
|
|
|
files: /srv/web/infra/ansible/files
|
2017-04-13 15:46:14 +00:00
|
|
|
roles_path: /srv/web/infra/ansible/roles
|
|
|
|
|
handlers_path: /srv/web/infra/ansible/handlers
|
|
|
|
|
tasks_path: /srv/web/infra/ansible/tasks
|
2014-01-06 17:52:58 +00:00
|
|
|
vars_path: "/srv/web/infra/ansible/vars"
|
2012-10-08 19:35:54 +00:00
|
|
|
dist_tag: unknown
|
2013-03-04 19:29:57 +00:00
|
|
|
auth_keys_from_fas: '/srv/web/infra/ansible/scripts/auth-keys-from-fas'
|
2015-05-13 19:50:33 +00:00
|
|
|
|
2020-06-12 09:22:33 -07:00
|
|
|
# Note: we do "+all -some" rather than "+some" to make sure we can use this
|
2019-04-08 22:01:29 +02:00
|
|
|
# same list on both EL7 and Fedora and get new ciphers: on Fedora, at time of writing,
|
|
|
|
|
# this includes TLSv1.3, which EL7 does not have.
|
2019-04-13 17:07:05 +02:00
|
|
|
ssl_protocols: "+all -SSLv3 -TLSv1 -TLSv1.1"
|
2019-04-08 21:35:23 +02:00
|
|
|
ssl_ciphers: "TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK"
|
2016-08-30 19:36:53 +00:00
|
|
|
|
2024-06-03 15:02:18 -07:00
|
|
|
httpd_maxrequestworkers: 2500
|
2020-04-30 09:55:06 +00:00
|
|
|
|
2014-01-06 22:42:09 +00:00
|
|
|
# Set a default hostname base to transient. Override in host vars or command line.
|
|
|
|
|
hostbase: transient
|
2022-05-19 14:05:11 -07:00
|
|
|
global_pkgs_inst: ['bind-utils', 'nc', 'openssh-clients',
|
2014-01-24 22:27:34 +00:00
|
|
|
'patch', 'postfix', 'rsync', 'strace',
|
2013-09-26 14:57:09 +00:00
|
|
|
'tmpwatch', 'traceroute', 'vim-enhanced', 'xz', 'zsh',
|
2022-05-19 14:05:11 -07:00
|
|
|
'bash-completion',
|
2023-11-16 10:17:21 -08:00
|
|
|
'atop', 'htop', 'rsyslog']
|
2019-04-09 13:50:01 +00:00
|
|
|
# Set up variables for various files to make sure we don't forget to use.
|
|
|
|
|
repoSpanner_rpms_http: 8445
|
|
|
|
|
repoSpanner_ansible_http: 8443
|
