Files
Ansible-Bootstrap/roles/global_defaults/defaults/main.yml

25 lines
858 B
YAML

---
global_defaults_hypervisor: "none"
global_defaults_custom_iso: false
global_defaults_cis: false
global_defaults_selinux: true
global_defaults_vmware_ssh: false
global_defaults_firewalld_enabled: true
global_defaults_luks_enabled: false
global_defaults_luks_mapper_name: "SYSTEM_DECRYPTED"
global_defaults_luks_auto_decrypt: true
global_defaults_luks_auto_decrypt_method: "tpm2"
global_defaults_luks_tpm2_device: "auto"
global_defaults_luks_tpm2_pcrs: ""
global_defaults_luks_keyfile_size: 64
global_defaults_luks_options: "discard,tries=3"
global_defaults_luks_type: "luks2"
global_defaults_luks_cipher: "aes-xts-plain64"
global_defaults_luks_hash: "sha512"
global_defaults_luks_iter_time: 4000
global_defaults_luks_key_size: 512
global_defaults_luks_pbkdf: "argon2id"
global_defaults_luks_use_urandom: true
global_defaults_luks_verify_passphrase: true