28 lines
585 B
YAML
28 lines
585 B
YAML
---
|
|
hypervisor: "none"
|
|
custom_iso: false
|
|
cis: false
|
|
selinux: true
|
|
vmware_ssh: false
|
|
firewalld_enabled: true
|
|
|
|
cis_enabled: "{{ cis | bool }}"
|
|
custom_iso_enabled: "{{ custom_iso | bool }}"
|
|
|
|
luks_enabled: false
|
|
luks_mapper_name: "SYSTEM_DECRYPTED"
|
|
luks_auto_decrypt: true
|
|
luks_auto_decrypt_method: "tpm2"
|
|
luks_tpm2_device: "auto"
|
|
luks_tpm2_pcrs: ""
|
|
luks_keyfile_size: 64
|
|
luks_options: "discard,tries=3"
|
|
luks_type: "luks2"
|
|
luks_cipher: "aes-xts-plain64"
|
|
luks_hash: "sha512"
|
|
luks_iter_time: 4000
|
|
luks_key_size: 512
|
|
luks_pbkdf: "argon2id"
|
|
luks_use_urandom: true
|
|
luks_verify_passphrase: true
|