mrwho
3735c11b9f
- Enable sysctl_tune to apply kernel parameter tuning - Add flush_sysctl_rules to ensure rules are applied after changes
34 lines
1.6 KiB
YAML
34 lines
1.6 KiB
YAML
---
|
|
# ── Admin groups ───────────────────────────────────────────────────────────────
|
|
# Add new users here. Each entry requires:
|
|
# username — Linux username
|
|
# ssh_key — public SSH key string (optional, but strongly recommended)
|
|
#
|
|
# To allow a group on a specific host/group, override `users_allowed_admin_groups`
|
|
# in the corresponding group_vars/<group>/vars.yml or host_vars/<host>/vars.yml.
|
|
|
|
users_admin_groups:
|
|
super_admin:
|
|
- username: mrwho
|
|
ssh_key: >-
|
|
ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAlQz8IhTEQ0utmWmwOC7FijieQULbeyXLDkjmYwSyptqj+7u0qyPPStQzN9leIISSKJ1/eJ5UbETTvc1R1Jg1tdTg5xZTMoz0jwruDP73vYIxLdeO4cZvjJIGyzS2PemUM+016uf4DLZ3jmK4hwEi2mF6UX+NYRPNIuPpr96gP1kYb1vrlG7P0cEk7EbGO6Deda3S64L0lDherSqc/Z7cn8nr6iemTdsBfl303vqFgXf/aWijuvVPUSpSiI3fR0NwvX/RW7oDIFls1dVU5CPkcwaX25Fu3voJ6e3lmduW+1s/vL1nMd5ourET+1Std3S75jqzkVsV3R74Xkgq5avn7w==
|
|
|
|
middle_admin: []
|
|
# Example:
|
|
# - username: m.ivanov
|
|
# ssh_key: "ssh-rsa AAAA..."
|
|
|
|
junior_admin: []
|
|
# Example:
|
|
# - username: j.petrov
|
|
# ssh_key: "ssh-rsa AAAA..."
|
|
|
|
# ── Default access policy ──────────────────────────────────────────────────────
|
|
# Which admin groups are provisioned on hosts by default.
|
|
# Override in group_vars/<os_group>/vars.yml or host_vars/<host>/vars.yml
|
|
# to restrict access on specific servers.
|
|
users_allowed_admin_groups:
|
|
- super_admin
|
|
- middle_admin
|
|
- junior_admin
|