225 lines
5.3 KiB
YAML
225 lines
5.3 KiB
YAML
---
|
|
- name: Install vm-radius
|
|
hosts: vm-radius
|
|
roles:
|
|
- firewall
|
|
- zabbix-agent2
|
|
- chrony
|
|
- radius
|
|
vars:
|
|
###### Firewalld configuration ######
|
|
firewall:
|
|
- previous: replaced
|
|
- zone: internal
|
|
state: enabled
|
|
permanent: true
|
|
service:
|
|
- ssh
|
|
- zabbix-agent
|
|
- radius
|
|
|
|
- zone: internal
|
|
state: disabled
|
|
permanent: true
|
|
service:
|
|
- cockpit
|
|
- dhcpv6-client
|
|
- mdns
|
|
- samba-client
|
|
|
|
- set_default_zone: internal
|
|
state: enabled
|
|
permanent: true
|
|
|
|
- interface: ens192
|
|
zone: internal
|
|
state: enabled
|
|
permanent: true
|
|
###### Zabbix agent configuration ######
|
|
agent_major_version: "7.0"
|
|
agent_variant: "2"
|
|
agent_package_state: present # present or latest
|
|
agent_param_server: ::/0
|
|
agent_param_listenport: 10050
|
|
# agent_2_plugin_list: ['named'] # set in inventory vars
|
|
agent_param_tlsconnect: unencrypted
|
|
agent_param_tlsaccept:
|
|
- unencrypted
|
|
agent_apply_firewalld_rule: auto # force or auto
|
|
freeradius_version: 3.2.8
|
|
# db_type: mysql # mariadb #
|
|
# db_login_host: localhost
|
|
# radius_db_name: radius
|
|
# radius_db_user: radius
|
|
# radius_db_password: secret
|
|
###### chrony-client ######
|
|
chrony_disable_ntpd: true
|
|
chrony_enable: true
|
|
chrony_log_enable: true
|
|
chrony_log: measurements statistics tracking
|
|
chrony_logdir: /var/log/chrony/
|
|
chrony_ntp_servers:
|
|
- 10.203.2.11
|
|
- 10.203.2.12
|
|
chrony_rtcsync: true
|
|
chrony_timezone: Europe/Moscow
|
|
###### radius ######
|
|
radius_clients:
|
|
- ipaddr: "0.0.0.0"
|
|
secret: radiussecpasw
|
|
radius_users:
|
|
- user: 0dmin
|
|
password: "foot11foot"
|
|
DlinkUserLevel: 5
|
|
DlinkPrivelegeLevel: 5
|
|
MikrotikGroup: full
|
|
ServiceType: 6
|
|
|
|
- user: v.petrenko
|
|
password: "rjat0dtcyf"
|
|
DlinkUserLevel: 5
|
|
DlinkPrivelegeLevel: 5
|
|
MikrotikGroup: full
|
|
ServiceType: 6
|
|
|
|
- user: bgbilling
|
|
password: "bgpassword"
|
|
DlinkUserLevel: 5
|
|
DlinkPrivelegeLevel: 5
|
|
MikrotikGroup: full
|
|
ServiceType: 6
|
|
|
|
- user: bgbillingsw
|
|
password: "billingswpwd"
|
|
DlinkUserLevel: 5
|
|
DlinkPrivelegeLevel: 5
|
|
ServiceType: 6
|
|
|
|
- user: bgbillingsw1
|
|
password: "billingswpwd"
|
|
DlinkUserLevel: 4
|
|
DlinkPrivelegeLevel: 4
|
|
ServiceType: 6
|
|
|
|
- user: 0null
|
|
password: "3AloopA"
|
|
DlinkUserLevel: 3
|
|
DlinkPrivelegeLevel: 3
|
|
MikrotikGroup: read
|
|
|
|
- user: a.soldatov
|
|
password: "admin01root"
|
|
DlinkUserLevel: 3
|
|
DlinkPrivelegeLevel: 3
|
|
MikrotikGroup: read
|
|
|
|
- user: a.naumov
|
|
password: "95t0x2ww"
|
|
DlinkUserLevel: 3
|
|
DlinkPrivelegeLevel: 3
|
|
MikrotikGroup: read
|
|
|
|
- user: k.sergeev
|
|
password: "yrw3w9q3"
|
|
DlinkUserLevel: 3
|
|
DlinkPrivelegeLevel: 3
|
|
MikrotikGroup: read
|
|
|
|
- user: d.kolesov
|
|
password: "bestTP666"
|
|
DlinkUserLevel: 3
|
|
DlinkPrivelegeLevel: 3
|
|
MikrotikGroup: read
|
|
|
|
- user: a.sokolovskiy
|
|
password: "sokolovskiy123"
|
|
DlinkUserLevel: 3
|
|
DlinkPrivelegeLevel: 3
|
|
MikrotikGroup: read
|
|
|
|
- user: a.nemanov
|
|
password: "23383739"
|
|
DlinkUserLevel: 3
|
|
DlinkPrivelegeLevel: 3
|
|
MikrotikGroup: read
|
|
|
|
- user: s.marasanov
|
|
password: "07879469"
|
|
DlinkUserLevel: 3
|
|
DlinkPrivelegeLevel: 3
|
|
MikrotikGroup: read
|
|
|
|
- user: d.masyanov
|
|
password: "87660764"
|
|
DlinkUserLevel: 5
|
|
DlinkPrivelegeLevel: 5
|
|
MikrotikGroup: full
|
|
ServiceType: 6
|
|
|
|
- user: m.dorofeev
|
|
password: "00085228"
|
|
DlinkUserLevel: 3
|
|
DlinkPrivelegeLevel: 3
|
|
MikrotikGroup: read
|
|
|
|
- user: d.emelianenko
|
|
password: "49881775"
|
|
DlinkUserLevel: 5
|
|
DlinkPrivelegeLevel: 5
|
|
MikrotikGroup: full
|
|
ServiceType: 6
|
|
|
|
- user: i.yanov
|
|
password: "c3Ki05Y8"
|
|
DlinkUserLevel: 3
|
|
DlinkPrivelegeLevel: 3
|
|
MikrotikGroup: read
|
|
|
|
- user: a.izotov
|
|
password: "39166264"
|
|
DlinkUserLevel: 3
|
|
DlinkPrivelegeLevel: 3
|
|
MikrotikGroup: read
|
|
|
|
- user: a.mironov
|
|
password: "8649510273"
|
|
DlinkUserLevel: 3
|
|
DlinkPrivelegeLevel: 3
|
|
MikrotikGroup: read
|
|
|
|
- user: a.niyazmuhamedov
|
|
password: "2808679015"
|
|
DlinkUserLevel: 3
|
|
DlinkPrivelegeLevel: 3
|
|
MikrotikGroup: read
|
|
|
|
- user: a.koltachihin
|
|
password: "29842919"
|
|
DlinkUserLevel: 3
|
|
DlinkPrivelegeLevel: 3
|
|
MikrotikGroup: read
|
|
|
|
- user: robot.diagnostic
|
|
password: "prod-UsyVXcv13Y8YU25QNaoR"
|
|
DlinkUserLevel: 3
|
|
DlinkPrivelegeLevel: 3
|
|
MikrotikGroup: read
|
|
|
|
- user: i.belkov
|
|
password: "8050824738"
|
|
DlinkUserLevel: 3
|
|
DlinkPrivelegeLevel: 3
|
|
MikrotikGroup: read
|
|
|
|
- user: v.bondarenko
|
|
password: "8490059810"
|
|
DlinkUserLevel: 3
|
|
DlinkPrivelegeLevel: 3
|
|
MikrotikGroup: read
|
|
|
|
- user: d.ezhova
|
|
password: "5919946437"
|
|
DlinkUserLevel: 3
|
|
DlinkPrivelegeLevel: 3
|
|
MikrotikGroup: read
|