mrwho
3735c11b9f
- Enable sysctl_tune to apply kernel parameter tuning - Add flush_sysctl_rules to ensure rules are applied after changes
38 lines
1.4 KiB
YAML
38 lines
1.4 KiB
YAML
---
|
|
# ── SSH connection ─────────────────────────────────────────────────────────────
|
|
# Credentials are injected from GitLab CI/CD Variables:
|
|
# ANSIBLE_SSH_USER — remote user
|
|
# ANSIBLE_SSHKEY_ID_RSA — private SSH key (записывается в ~/.ssh/id_rsa в before_script)
|
|
# ANSIBLE_BECOME_PASS — sudo password
|
|
ignored_interfaces: lo
|
|
ansible_user: "{{ lookup('env', 'ANSIBLE_SSH_USER') | mandatory }}"
|
|
ansible_become: true
|
|
ansible_become_method: sudo
|
|
ansible_become_pass: "{{ lookup('env', 'ANSIBLE_BECOME_PASS') | mandatory }}"
|
|
|
|
ansible_ssh_common_args: "-o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null"
|
|
|
|
# Zabbix agent default settings
|
|
agent_major_version: "7.0"
|
|
agent_variant: "2"
|
|
agent_2_plugin_list: ['']
|
|
agent_param_server:
|
|
- 10.203.0.50
|
|
agent_param_serveractive:
|
|
- 10.203.0.50
|
|
agent_param_tlsconnect: unencrypted
|
|
agent_param_tlsaccept:
|
|
- unencrypted
|
|
|
|
# Chrony NTP Client settings
|
|
chrony_log_enable: true
|
|
chrony_log: measurements statistics tracking
|
|
chrony_logdir: /var/log/chrony/
|
|
chrony_ntp_servers:
|
|
- router.local.mrwho.ru
|
|
chrony_rtcsync: true
|
|
chrony_timezone: Europe/Moscow
|
|
# Firewalld defaults
|
|
firewall_disable_conflicting_services: true
|
|
firewall_transactional_update_reboot_ok: true
|