Sandwich
0f54698fc3
Replace the single-user system.user dict with a system.users list to support multiple user accounts. Update all roles, templates, examples, validation, and documentation to use the new format. Remove redundant post-normalization type checks from validation.yml. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
64 lines
1.1 KiB
YAML
64 lines
1.1 KiB
YAML
---
|
|
# Example variables for baremetal installs.
|
|
hypervisor:
|
|
type: "none"
|
|
|
|
system:
|
|
type: "physical"
|
|
os: "archlinux"
|
|
filesystem: "btrfs" # btrfs|ext4|xfs
|
|
name: "{{ inventory_hostname }}"
|
|
cpus: 8
|
|
memory: 16384
|
|
network:
|
|
ip: "{{ ansible_host | default('') }}"
|
|
prefix: 24
|
|
gateway: "10.0.0.1"
|
|
dns:
|
|
servers:
|
|
- "1.1.1.1"
|
|
disks:
|
|
- device: "/dev/sda"
|
|
size: 120
|
|
- device: "/dev/sdb"
|
|
size: 500
|
|
mount:
|
|
path: /data
|
|
fstype: ext4
|
|
users:
|
|
- name: "admin"
|
|
password: "CHANGE_ME"
|
|
keys:
|
|
- "ssh-ed25519 AAAA..."
|
|
root:
|
|
password: "CHANGE_ME"
|
|
luks:
|
|
enabled: true
|
|
passphrase: "CHANGE_ME"
|
|
mapper: "SYSTEM_DECRYPTED"
|
|
auto: true
|
|
method: "tpm2"
|
|
tpm2:
|
|
device: "auto"
|
|
pcrs: "7"
|
|
features:
|
|
cis:
|
|
enabled: false
|
|
selinux:
|
|
enabled: true
|
|
firewall:
|
|
enabled: true
|
|
backend: "firewalld"
|
|
toolkit: "nftables"
|
|
ssh:
|
|
enabled: true
|
|
zstd:
|
|
enabled: true
|
|
swap:
|
|
enabled: true
|
|
banner:
|
|
motd: true
|
|
sudo: true
|
|
chroot:
|
|
tool: "arch-chroot"
|