Commit Graph

71 Commits

Author SHA1 Message Date
67c320fcc2 fix(vars): enforce strict list-only DNS and user.key format for IaC compatibility 2026-02-12 21:50:55 +01:00
ed8da6e4e2 fix(luks): complete migration of partitioning_luks_tpm2_device reference 2026-02-11 23:28:05 +01:00
a60e6fd0d3 refactor(bootstrap): nest network fields under system.network to match main project schema 2026-02-11 23:03:37 +01:00
7a76f58384 refactor(luks): use system_cfg.luks directly across roles 2026-02-11 19:26:51 +01:00
cd34b41862 fix(banner): align MOTD star border and default motd to disabled 2026-02-11 08:02:27 +01:00
e7323258fd refactor(schema): move filesystem into system dictionary 2026-02-11 05:37:18 +01:00
3d026407e5 refactor(configuration): simplify grub commandline variable assembly 2026-02-11 05:37:18 +01:00
469d89641e refactor(configuration): reduce LUKS runtime temporary facts 2026-02-11 05:37:18 +01:00
636656214b refactor(schema): rename nested dict keys and simplify validation 2026-02-11 05:37:18 +01:00
b8c672507f refactor(vars): simplify normalization and remove effective intermediates 2026-02-11 05:37:18 +01:00
fcc7c6aeb6 fix(runtime): migrate roles to nested system fields 2026-02-11 05:37:18 +01:00
9101e12126 refactor(vars): remove legacy variable inputs 2026-02-11 05:37:18 +01:00
fc05708466 refactor(vars): add system/hypervisor dict inputs 2026-02-11 05:37:18 +01:00
3d8b623f66 refactor(services): remove unnecessary firewalld services disablement. 2026-01-05 18:19:14 +01:00
a093bf3e28 feat(services): implement SSH server toggeling 2026-01-05 18:18:18 +01:00
c62de8bf4a Make chroot command configurable 2026-01-02 18:53:55 +01:00
c5e01c3652 Add swap_enabled toggle for swap setup 2026-01-02 18:51:27 +01:00
49372309d2 Add zstd toggle for btrfs and zram 2026-01-02 18:47:32 +01:00
88a8737115 Use systemd module and link timezone 2026-01-02 16:10:50 +01:00
52c67c5a39 Move derived vars into role defaults 2026-01-02 11:25:51 +01:00
1c23055dd2 Add firewalld_enabled toggle 2026-01-02 11:25:40 +01:00
8395ad9e90 Define optional defaults and require vm_cpus 2026-01-02 11:25:06 +01:00
e59f056904 Move partitioning LUKS defaults into role 2026-01-02 11:23:31 +01:00
0bd85319f6 Remove defaults for required vars 2025-12-28 17:10:00 +01:00
e7c5166128 Normalize user-facing defaults 2025-12-28 16:41:11 +01:00
cf179b0d16 Normalize LUKS boot layout and partitioning defaults 2025-12-28 16:00:49 +01:00
5288167825 Restore Debian ESP mount layout 2025-12-28 02:24:33 +01:00
7cf0dabc3c Fix Debian initramfs regeneration 2025-12-28 01:54:14 +01:00
73b42f29cb Enable GRUB cryptodisk defaults 2025-12-28 00:46:09 +01:00
4705db7fe2 Fix Debian EFI mount layout 2025-12-27 23:49:21 +01:00
7323781046 LUKS enrollment and RHEL cmdline/BLS 2025-12-26 22:09:08 +01:00
eba93f90b7 Configuration role refactor and network template 2025-12-26 20:38:42 +01:00
259604470f Add Debian 13 (Trixie) support 2025-08-11 21:37:25 +02:00
93dae69781 Add rhel10 support 2025-06-17 03:13:30 +02:00
da7f22edbe Add vm_dns_search to hostname if set 2025-05-26 14:37:28 +02:00
8882160fc4 dont fail if selinux is undefined 2025-02-07 20:47:30 +01:00
cfcf1d6107 Remove motd files for rhel 2025-02-05 17:14:17 +01:00
52af252662 Enable option to disable selinux for all osses 2025-02-05 01:41:10 +01:00
893f5995ab Fix CIS applienc for RHEL8 2025-01-21 22:34:01 +01:00
229395211c Add banner 2025-01-21 20:16:05 +01:00
febd87919f CIS Adjustments 2025-01-21 19:55:36 +01:00
0f729b4e8a remove zram from debian11 since no support 2024-10-31 16:00:44 +01:00
99499a2f45 remove zram for rhel8 since no support 2024-10-31 15:56:42 +01:00
e5d4886246 Add SWAP support 2024-10-31 05:46:33 +01:00
658287c159 Add zram-generator config 2024-10-31 02:18:55 +01:00
64abe4daa5 Add swap optimalisations 2024-10-31 02:05:11 +01:00
842a68ab36 Fix riski shell pipe 2024-10-31 00:43:49 +01:00
8a655993bd Include MAC-Address into the NetworkManager keyfile 2024-10-31 00:13:23 +01:00
72305d48a3 Fix variable hierarchy 2024-10-30 22:19:00 +01:00
03cc238237 Fix ISO mounting for VMware Hypervisor 2024-10-30 20:25:41 +01:00