# NTP (chrony) client configs
chrony:
  ntpservers:
    - virginia.time.system76.com
    - ohio.time.system76.com
    - oregon.time.system76.com
  options: 'iburst nts'
  allow:
    - 127.0.0.1

# Common packages to install everywhere - this is self-explanatory
packages:
  pkgs:
    wanted:
      - bash
      - curl
      - git
      - gzip
      - rsync
      - screen
      - unzip
      - wget
      - zip

# SSH server config
openssh:
  banner_string: |
    #  ____  _ _      ____       _     _ _
    # | __ )(_) |_   / ___| ___ | |__ | (_)_ __
    # |  _ \| | __| | |  _ / _ \| '_ \| | | '_ \
    # | |_) | | |_  | |_| | (_) | |_) | | | | | |
    # |____/|_|\__|  \____|\___/|_.__/|_|_|_| |_|
    #
    # The machine you are currently attempting to access is
    # restricted to only those within the Bit Goblin organization and
    # those otherwise granted permission to do so. Unauthorized access
    # is prohibited. This system is monitored, and actions are logged.
    #
sshd_config:
  ListenAddress: '0.0.0.0'
  Port: 22
  Protocol: 2
  Banner: '/etc/ssh/banner'
  HostKey:
    - '/etc/ssh/ssh_host_rsa_key'
    - '/etc/ssh/ssh_host_ecdsa_key'
    - '/etc/ssh/ssh_host_ed25519_key'
  SyslogFacility: 'AUTHPRIV'
  LogLevel: 'INFO'
  LoginGraceTime: 120
  PermitRootLogin: 'without-password'
  PasswordAuthentication: 'yes'
  PubkeyAuthentication: 'yes'
  PermitEmptyPasswords: 'no'
  X11Forwarding: 'yes'
  PrintMotd: 'yes'
  UsePAM: 'yes'
  UseDNS: 'yes'

# Timezone configuration - self-explanatory, but turns off UTC system clock
timezone:
  name: 'America/New_York'
  utc: True

# Host vim configuration - tries to set sane defaults
vim:
  managed_vimrc: False
  config:
    syntax: 'on'

  settings:
    bs: indent,eol,start
    cindent:
    nocompatible:
    smartindent:
    laststatus: 2
    tabstop: 4
    softtabstop: 4
    shiftwidth: 4
    noexpandtab:
    nowrap:
    swapsync: ''

  mappings:
    <C-u>: :tabp<enter>
    <C-i>: :tabn<enter>
    <C-J>: <C-W>j
    <C-K>: <C-W>k
    <C-H>: <C-W>h
    <C-L>: <C-W>l