docu(schema): update docs and examples to compact dict keys

This commit is contained in:
2026-02-11 05:37:18 +01:00
parent 636656214b
commit aac2bd0b06
4 changed files with 33 additions and 31 deletions

View File

@@ -44,7 +44,7 @@ all:
user: user:
name: "ops" name: "ops"
password: "CHANGE_ME" password: "CHANGE_ME"
public_key: "ssh-ed25519 AAAA..." key: "ssh-ed25519 AAAA..."
root: root:
password: "CHANGE_ME" password: "CHANGE_ME"
packages: packages:
@@ -77,7 +77,7 @@ all:
system: system:
type: "virtual" type: "virtual"
os: "rhel" os: "rhel"
os_version: "9" version: "9"
name: "db01.example.com" name: "db01.example.com"
id: 101 id: 101
cpus: 4 cpus: 4
@@ -97,14 +97,14 @@ all:
user: user:
name: "dbadmin" name: "dbadmin"
password: "CHANGE_ME" password: "CHANGE_ME"
public_key: "ssh-ed25519 AAAA..." key: "ssh-ed25519 AAAA..."
root: root:
password: "CHANGE_ME" password: "CHANGE_ME"
luks: luks:
enabled: true enabled: true
passphrase: "CHANGE_ME" passphrase: "CHANGE_ME"
auto_decrypt_method: "keyfile" method: "keyfile"
keyfile_size: 128 keysize: 128
features: features:
cis: cis:
enabled: true enabled: true

View File

@@ -18,7 +18,7 @@ all:
system: system:
type: "virtual" type: "virtual"
os: "debian" os: "debian"
os_version: "12" version: "12"
name: "web01.local" name: "web01.local"
cpus: 2 cpus: 2
memory: 2048 memory: 2048
@@ -41,7 +41,7 @@ all:
user: user:
name: "web" name: "web"
password: "CHANGE_ME" password: "CHANGE_ME"
public_key: "ssh-ed25519 AAAA..." key: "ssh-ed25519 AAAA..."
root: root:
password: "CHANGE_ME" password: "CHANGE_ME"
packages: packages:
@@ -59,7 +59,7 @@ all:
system: system:
type: "virtual" type: "virtual"
os: "rhel" os: "rhel"
os_version: "9" version: "9"
name: "db01.local" name: "db01.local"
cpus: 4 cpus: 4
memory: 4096 memory: 4096
@@ -81,13 +81,13 @@ all:
user: user:
name: "db" name: "db"
password: "CHANGE_ME" password: "CHANGE_ME"
public_key: "ssh-ed25519 AAAA..." key: "ssh-ed25519 AAAA..."
root: root:
password: "CHANGE_ME" password: "CHANGE_ME"
luks: luks:
enabled: true enabled: true
passphrase: "CHANGE_ME" passphrase: "CHANGE_ME"
auto_decrypt_method: "keyfile" method: "keyfile"
features: features:
firewall: firewall:
enabled: false enabled: false
@@ -99,7 +99,7 @@ all:
system: system:
type: "virtual" type: "virtual"
os: "fedora" os: "fedora"
os_version: "41" version: "41"
name: "compute01.local" name: "compute01.local"
cpus: 8 cpus: 8
memory: 8192 memory: 8192
@@ -118,7 +118,7 @@ all:
user: user:
name: "compute" name: "compute"
password: "CHANGE_ME" password: "CHANGE_ME"
public_key: "ssh-ed25519 AAAA..." key: "ssh-ed25519 AAAA..."
root: root:
password: "CHANGE_ME" password: "CHANGE_ME"
features: features:

View File

@@ -28,17 +28,18 @@ system:
user: user:
name: "admin" name: "admin"
password: "CHANGE_ME" password: "CHANGE_ME"
public_key: "ssh-ed25519 AAAA..." key: "ssh-ed25519 AAAA..."
root: root:
password: "CHANGE_ME" password: "CHANGE_ME"
luks: luks:
enabled: true enabled: true
passphrase: "CHANGE_ME" passphrase: "CHANGE_ME"
mapper_name: "SYSTEM_DECRYPTED" mapper: "SYSTEM_DECRYPTED"
auto_decrypt: true auto: true
auto_decrypt_method: "tpm2" method: "tpm2"
tpm2_device: "auto" tpm2:
tpm2_pcrs: "7" device: "auto"
pcrs: "7"
features: features:
cis: cis:
enabled: false enabled: false

View File

@@ -12,13 +12,13 @@ hypervisor:
storage: "local-lvm" storage: "local-lvm"
datacenter: "dc01" datacenter: "dc01"
cluster: "cluster01" cluster: "cluster01"
validate_certs: false certs: false
ssh: true # VMware only; enables temporary SSH in installer ssh: true # VMware only; enables temporary SSH in installer
system: system:
type: "virtual" # virtual|physical type: "virtual" # virtual|physical
os: "archlinux" os: "archlinux"
os_version: "" version: ""
name: "{{ inventory_hostname }}" name: "{{ inventory_hostname }}"
id: 100 id: 100
cpus: 4 cpus: 4
@@ -46,27 +46,28 @@ system:
user: user:
name: "ops" name: "ops"
password: "CHANGE_ME" password: "CHANGE_ME"
public_key: "ssh-ed25519 AAAA..." key: "ssh-ed25519 AAAA..."
root: root:
password: "CHANGE_ME" password: "CHANGE_ME"
luks: luks:
enabled: false enabled: false
passphrase: "CHANGE_ME" passphrase: "CHANGE_ME"
mapper_name: "SYSTEM_DECRYPTED" mapper: "SYSTEM_DECRYPTED"
auto_decrypt: true auto: true
auto_decrypt_method: "tpm2" method: "tpm2"
tpm2_device: "auto" tpm2:
tpm2_pcrs: "7" device: "auto"
keyfile_size: 64 pcrs: "7"
keysize: 64
options: "discard,tries=3" options: "discard,tries=3"
type: "luks2" type: "luks2"
cipher: "aes-xts-plain64" cipher: "aes-xts-plain64"
hash: "sha512" hash: "sha512"
iter_time: 4000 iter: 4000
key_size: 512 bits: 512
pbkdf: "argon2id" pbkdf: "argon2id"
use_urandom: true urandom: true
verify_passphrase: true verify: true
packages: packages:
- jq - jq
- tmux - tmux