ansible-bootstrap-rocky9/roles/rocky9/tasks/sysctl_tuning.yml
2026-05-11 18:57:10 +03:00

62 lines
1.6 KiB
YAML

---
- name: Kernel Tuning
ansible.builtin.include_tasks: kernel_tune.yml
- name: TCP/UDP Tuning
ansible.builtin.include_tasks: tcp_tune.yml
- name: IP ip_spoofing
ansible.builtin.include_tasks: ip_spoofing.yml
- name: IP Forwarding
ansible.builtin.include_tasks: ip_forward.yml
- name: IP Bridge
ansible.builtin.include_tasks: ip_bridge.yml
# - name: Deploy kernel_tune.conf
# ansible.builtin.template:
# src: kernel_tune.conf.j2
# dest: /etc/sysctl.d/kernel_tune.conf
# mode: "0644"
# - name: Deploy tcp_tune.conf
# ansible.builtin.template:
# src: tcp_tune.conf.j2
# dest: /etc/sysctl.d/tcp_tune.conf
# mode: "0644"
# - name: Deploy ip_spoofing.conf
# ansible.builtin.template:
# src: ip_spoofing.conf.j2
# dest: /etc/sysctl.d/ip_spoofing.conf
# mode: "0644"
# - name: Deploy ip_forward.conf
# ansible.builtin.template:
# src: ip_forward.conf.j2
# dest: /etc/sysctl.d/ip_forward.conf
# mode: "0644"
# - name: Deploy ip_bridge.conf
# ansible.builtin.template:
# src: ip_bridge.conf.j2
# dest: /etc/sysctl.d/ip_bridge.conf
# mode: "0644"
# - name: Deploy httpd-tune.conf
# ansible.builtin.template:
# src: httpd-tune.conf.j2
# dest: /etc/sysctl.d/httpd-tune.conf
# mode: "0644"
# limit for using memory
- name: vm.overcommit_ratio
ansible.posix.sysctl:
name: vm.overcommit_ratio
value: 100
state: present
sysctl_file: /etc/sysctl.d/ip_httpd.conf
- name: vm.overcommit_memory
ansible.posix.sysctl:
name: vm.overcommit_memory
value: 2
state: present
sysctl_file: /etc/sysctl.d/ip_httpd.conf