docu(schema): update docs and examples to compact dict keys
This commit is contained in:
@@ -44,7 +44,7 @@ all:
|
|||||||
user:
|
user:
|
||||||
name: "ops"
|
name: "ops"
|
||||||
password: "CHANGE_ME"
|
password: "CHANGE_ME"
|
||||||
public_key: "ssh-ed25519 AAAA..."
|
key: "ssh-ed25519 AAAA..."
|
||||||
root:
|
root:
|
||||||
password: "CHANGE_ME"
|
password: "CHANGE_ME"
|
||||||
packages:
|
packages:
|
||||||
@@ -77,7 +77,7 @@ all:
|
|||||||
system:
|
system:
|
||||||
type: "virtual"
|
type: "virtual"
|
||||||
os: "rhel"
|
os: "rhel"
|
||||||
os_version: "9"
|
version: "9"
|
||||||
name: "db01.example.com"
|
name: "db01.example.com"
|
||||||
id: 101
|
id: 101
|
||||||
cpus: 4
|
cpus: 4
|
||||||
@@ -97,14 +97,14 @@ all:
|
|||||||
user:
|
user:
|
||||||
name: "dbadmin"
|
name: "dbadmin"
|
||||||
password: "CHANGE_ME"
|
password: "CHANGE_ME"
|
||||||
public_key: "ssh-ed25519 AAAA..."
|
key: "ssh-ed25519 AAAA..."
|
||||||
root:
|
root:
|
||||||
password: "CHANGE_ME"
|
password: "CHANGE_ME"
|
||||||
luks:
|
luks:
|
||||||
enabled: true
|
enabled: true
|
||||||
passphrase: "CHANGE_ME"
|
passphrase: "CHANGE_ME"
|
||||||
auto_decrypt_method: "keyfile"
|
method: "keyfile"
|
||||||
keyfile_size: 128
|
keysize: 128
|
||||||
features:
|
features:
|
||||||
cis:
|
cis:
|
||||||
enabled: true
|
enabled: true
|
||||||
|
|||||||
@@ -18,7 +18,7 @@ all:
|
|||||||
system:
|
system:
|
||||||
type: "virtual"
|
type: "virtual"
|
||||||
os: "debian"
|
os: "debian"
|
||||||
os_version: "12"
|
version: "12"
|
||||||
name: "web01.local"
|
name: "web01.local"
|
||||||
cpus: 2
|
cpus: 2
|
||||||
memory: 2048
|
memory: 2048
|
||||||
@@ -41,7 +41,7 @@ all:
|
|||||||
user:
|
user:
|
||||||
name: "web"
|
name: "web"
|
||||||
password: "CHANGE_ME"
|
password: "CHANGE_ME"
|
||||||
public_key: "ssh-ed25519 AAAA..."
|
key: "ssh-ed25519 AAAA..."
|
||||||
root:
|
root:
|
||||||
password: "CHANGE_ME"
|
password: "CHANGE_ME"
|
||||||
packages:
|
packages:
|
||||||
@@ -59,7 +59,7 @@ all:
|
|||||||
system:
|
system:
|
||||||
type: "virtual"
|
type: "virtual"
|
||||||
os: "rhel"
|
os: "rhel"
|
||||||
os_version: "9"
|
version: "9"
|
||||||
name: "db01.local"
|
name: "db01.local"
|
||||||
cpus: 4
|
cpus: 4
|
||||||
memory: 4096
|
memory: 4096
|
||||||
@@ -81,13 +81,13 @@ all:
|
|||||||
user:
|
user:
|
||||||
name: "db"
|
name: "db"
|
||||||
password: "CHANGE_ME"
|
password: "CHANGE_ME"
|
||||||
public_key: "ssh-ed25519 AAAA..."
|
key: "ssh-ed25519 AAAA..."
|
||||||
root:
|
root:
|
||||||
password: "CHANGE_ME"
|
password: "CHANGE_ME"
|
||||||
luks:
|
luks:
|
||||||
enabled: true
|
enabled: true
|
||||||
passphrase: "CHANGE_ME"
|
passphrase: "CHANGE_ME"
|
||||||
auto_decrypt_method: "keyfile"
|
method: "keyfile"
|
||||||
features:
|
features:
|
||||||
firewall:
|
firewall:
|
||||||
enabled: false
|
enabled: false
|
||||||
@@ -99,7 +99,7 @@ all:
|
|||||||
system:
|
system:
|
||||||
type: "virtual"
|
type: "virtual"
|
||||||
os: "fedora"
|
os: "fedora"
|
||||||
os_version: "41"
|
version: "41"
|
||||||
name: "compute01.local"
|
name: "compute01.local"
|
||||||
cpus: 8
|
cpus: 8
|
||||||
memory: 8192
|
memory: 8192
|
||||||
@@ -118,7 +118,7 @@ all:
|
|||||||
user:
|
user:
|
||||||
name: "compute"
|
name: "compute"
|
||||||
password: "CHANGE_ME"
|
password: "CHANGE_ME"
|
||||||
public_key: "ssh-ed25519 AAAA..."
|
key: "ssh-ed25519 AAAA..."
|
||||||
root:
|
root:
|
||||||
password: "CHANGE_ME"
|
password: "CHANGE_ME"
|
||||||
features:
|
features:
|
||||||
|
|||||||
@@ -28,17 +28,18 @@ system:
|
|||||||
user:
|
user:
|
||||||
name: "admin"
|
name: "admin"
|
||||||
password: "CHANGE_ME"
|
password: "CHANGE_ME"
|
||||||
public_key: "ssh-ed25519 AAAA..."
|
key: "ssh-ed25519 AAAA..."
|
||||||
root:
|
root:
|
||||||
password: "CHANGE_ME"
|
password: "CHANGE_ME"
|
||||||
luks:
|
luks:
|
||||||
enabled: true
|
enabled: true
|
||||||
passphrase: "CHANGE_ME"
|
passphrase: "CHANGE_ME"
|
||||||
mapper_name: "SYSTEM_DECRYPTED"
|
mapper: "SYSTEM_DECRYPTED"
|
||||||
auto_decrypt: true
|
auto: true
|
||||||
auto_decrypt_method: "tpm2"
|
method: "tpm2"
|
||||||
tpm2_device: "auto"
|
tpm2:
|
||||||
tpm2_pcrs: "7"
|
device: "auto"
|
||||||
|
pcrs: "7"
|
||||||
features:
|
features:
|
||||||
cis:
|
cis:
|
||||||
enabled: false
|
enabled: false
|
||||||
|
|||||||
@@ -12,13 +12,13 @@ hypervisor:
|
|||||||
storage: "local-lvm"
|
storage: "local-lvm"
|
||||||
datacenter: "dc01"
|
datacenter: "dc01"
|
||||||
cluster: "cluster01"
|
cluster: "cluster01"
|
||||||
validate_certs: false
|
certs: false
|
||||||
ssh: true # VMware only; enables temporary SSH in installer
|
ssh: true # VMware only; enables temporary SSH in installer
|
||||||
|
|
||||||
system:
|
system:
|
||||||
type: "virtual" # virtual|physical
|
type: "virtual" # virtual|physical
|
||||||
os: "archlinux"
|
os: "archlinux"
|
||||||
os_version: ""
|
version: ""
|
||||||
name: "{{ inventory_hostname }}"
|
name: "{{ inventory_hostname }}"
|
||||||
id: 100
|
id: 100
|
||||||
cpus: 4
|
cpus: 4
|
||||||
@@ -46,27 +46,28 @@ system:
|
|||||||
user:
|
user:
|
||||||
name: "ops"
|
name: "ops"
|
||||||
password: "CHANGE_ME"
|
password: "CHANGE_ME"
|
||||||
public_key: "ssh-ed25519 AAAA..."
|
key: "ssh-ed25519 AAAA..."
|
||||||
root:
|
root:
|
||||||
password: "CHANGE_ME"
|
password: "CHANGE_ME"
|
||||||
luks:
|
luks:
|
||||||
enabled: false
|
enabled: false
|
||||||
passphrase: "CHANGE_ME"
|
passphrase: "CHANGE_ME"
|
||||||
mapper_name: "SYSTEM_DECRYPTED"
|
mapper: "SYSTEM_DECRYPTED"
|
||||||
auto_decrypt: true
|
auto: true
|
||||||
auto_decrypt_method: "tpm2"
|
method: "tpm2"
|
||||||
tpm2_device: "auto"
|
tpm2:
|
||||||
tpm2_pcrs: "7"
|
device: "auto"
|
||||||
keyfile_size: 64
|
pcrs: "7"
|
||||||
|
keysize: 64
|
||||||
options: "discard,tries=3"
|
options: "discard,tries=3"
|
||||||
type: "luks2"
|
type: "luks2"
|
||||||
cipher: "aes-xts-plain64"
|
cipher: "aes-xts-plain64"
|
||||||
hash: "sha512"
|
hash: "sha512"
|
||||||
iter_time: 4000
|
iter: 4000
|
||||||
key_size: 512
|
bits: 512
|
||||||
pbkdf: "argon2id"
|
pbkdf: "argon2id"
|
||||||
use_urandom: true
|
urandom: true
|
||||||
verify_passphrase: true
|
verify: true
|
||||||
packages:
|
packages:
|
||||||
- jq
|
- jq
|
||||||
- tmux
|
- tmux
|
||||||
|
|||||||
Reference in New Issue
Block a user