Sandwich
8071a7c56c
Flat network fields (bridge, ip, prefix, gateway, vlan) are now converted into a single-entry interfaces[] list during normalization. All virtualization tasks (proxmox, vmware, libvirt, xen) and configuration (NM, Alpine, Void) now consume system_cfg.network.interfaces exclusively for multi-NIC support. Also fixes: user.key -> user.keys in system_cfg output, strict list-only DNS in example inventories, removes legacy single-MAC virtualization_mac_address default.
64 lines
1.1 KiB
YAML
64 lines
1.1 KiB
YAML
---
|
|
# Example variables for baremetal installs.
|
|
hypervisor:
|
|
type: "none"
|
|
|
|
system:
|
|
type: "physical"
|
|
os: "archlinux"
|
|
filesystem: "btrfs" # btrfs|ext4|xfs
|
|
name: "{{ inventory_hostname }}"
|
|
cpus: 8
|
|
memory: 16384
|
|
network:
|
|
ip: "{{ ansible_host | default('') }}"
|
|
prefix: 24
|
|
gateway: "10.0.0.1"
|
|
dns:
|
|
servers:
|
|
- "1.1.1.1"
|
|
disks:
|
|
- device: "/dev/sda"
|
|
size: 120
|
|
- device: "/dev/sdb"
|
|
size: 500
|
|
mount:
|
|
path: /data
|
|
fstype: ext4
|
|
user:
|
|
name: "admin"
|
|
password: "CHANGE_ME"
|
|
keys:
|
|
- "ssh-ed25519 AAAA..."
|
|
root:
|
|
password: "CHANGE_ME"
|
|
luks:
|
|
enabled: true
|
|
passphrase: "CHANGE_ME"
|
|
mapper: "SYSTEM_DECRYPTED"
|
|
auto: true
|
|
method: "tpm2"
|
|
tpm2:
|
|
device: "auto"
|
|
pcrs: "7"
|
|
features:
|
|
cis:
|
|
enabled: false
|
|
selinux:
|
|
enabled: true
|
|
firewall:
|
|
enabled: true
|
|
backend: "firewalld"
|
|
toolkit: "nftables"
|
|
ssh:
|
|
enabled: true
|
|
zstd:
|
|
enabled: true
|
|
swap:
|
|
enabled: true
|
|
banner:
|
|
motd: true
|
|
sudo: true
|
|
chroot:
|
|
tool: "arch-chroot"
|