Adding initial generic configs to systems

2026-08-06 13:07:55 -04:00
parent 4ca24faf13
commit 662e6d30df
6 changed files with 165 additions and 2 deletions
@@ -0,0 +1,90 @@
+# NTP (chrony) client configs
+chrony:
+  ntpservers:
+    - virginia.time.system76.com
+    - ohio.time.system76.com
+    - oregon.time.system76.com
+  options: 'iburst nts'
+  allow:
+    - 127.0.0.1
+
+# Common packages to install everywhere - this is self-explanatory
+packages:
+  pkgs:
+    wanted:
+      - bash
+      - curl
+      - git
+      - gzip
+      - rsync
+      - screen
+      - unzip
+      - wget
+      - zip
+
+# SSH server config
+openssh:
+  banner_string: |
+    #  ____  _ _      ____       _     _ _
+    # | __ )(_) |_   / ___| ___ | |__ | (_)_ __
+    # |  _ \| | __| | |  _ / _ \| '_ \| | | '_ \
+    # | |_) | | |_  | |_| | (_) | |_) | | | | | |
+    # |____/|_|\__|  \____|\___/|_.__/|_|_|_| |_|
+    #
+    # The machine you are currently attempting to access is
+    # restricted to only those within the Bit Goblin organization and
+    # those otherwise granted permission to do so. Unauthorized access
+    # is prohibited. This system is monitored, and actions are logged.
+    #
+sshd_config:
+  ListenAddress: '0.0.0.0'
+  Port: 22
+  Protocol: 2
+  Banner: '/etc/ssh/banner'
+  HostKey:
+    - '/etc/ssh/ssh_host_rsa_key'
+    - '/etc/ssh/ssh_host_ecdsa_key'
+    - '/etc/ssh/ssh_host_ed25519_key'
+  SyslogFacility: 'AUTHPRIV'
+  LogLevel: 'INFO'
+  LoginGraceTime: 120
+  PermitRootLogin: 'without-password'
+  PasswordAuthentication: 'yes'
+  PubkeyAuthentication: 'yes'
+  PermitEmptyPasswords: 'no'
+  X11Forwarding: 'yes'
+  PrintMotd: 'yes'
+  UsePAM: 'yes'
+  UseDNS: 'yes'
+
+# Timezone configuration - self-explanatory, but turns off UTC system clock
+timezone:
+  name: 'America/New_York'
+  utc: True
+
+# Host vim configuration - tries to set sane defaults
+vim:
+  managed_vimrc: False
+  config:
+    syntax: 'on'
+
+  settings:
+    bs: indent,eol,start
+    cindent:
+    nocompatible:
+    smartindent:
+    laststatus: 2
+    tabstop: 4
+    softtabstop: 4
+    shiftwidth: 4
+    noexpandtab:
+    nowrap:
+    swapsync: ''
+
+  mappings:
+    <C-u>: :tabp<enter>
+    <C-i>: :tabn<enter>
+    <C-J>: <C-W>j
+    <C-K>: <C-W>k
+    <C-H>: <C-W>h
+    <C-L>: <C-W>l
@@ -0,0 +1,4 @@
+base:
+  ## Common stuff
+  '*':
+    - common