Files

91 lines
2.0 KiB
Plaintext

# NTP (chrony) client configs
chrony:
ntpservers:
- virginia.time.system76.com
- ohio.time.system76.com
- oregon.time.system76.com
options: 'iburst nts'
allow:
- 127.0.0.1
# Common packages to install everywhere - this is self-explanatory
packages:
pkgs:
wanted:
- bash
- curl
- git
- gzip
- rsync
- screen
- unzip
- wget
- zip
# SSH server config
openssh:
banner_string: |
# ____ _ _ ____ _ _ _
# | __ )(_) |_ / ___| ___ | |__ | (_)_ __
# | _ \| | __| | | _ / _ \| '_ \| | | '_ \
# | |_) | | |_ | |_| | (_) | |_) | | | | | |
# |____/|_|\__| \____|\___/|_.__/|_|_|_| |_|
#
# The machine you are currently attempting to access is
# restricted to only those within the Bit Goblin organization and
# those otherwise granted permission to do so. Unauthorized access
# is prohibited. This system is monitored, and actions are logged.
#
sshd_config:
ListenAddress: '0.0.0.0'
Port: 22
Protocol: 2
Banner: '/etc/ssh/banner'
HostKey:
- '/etc/ssh/ssh_host_rsa_key'
- '/etc/ssh/ssh_host_ecdsa_key'
- '/etc/ssh/ssh_host_ed25519_key'
SyslogFacility: 'AUTHPRIV'
LogLevel: 'INFO'
LoginGraceTime: 120
PermitRootLogin: 'without-password'
PasswordAuthentication: 'yes'
PubkeyAuthentication: 'yes'
PermitEmptyPasswords: 'no'
X11Forwarding: 'yes'
PrintMotd: 'yes'
UsePAM: 'yes'
UseDNS: 'yes'
# Timezone configuration - self-explanatory, but turns off UTC system clock
timezone:
name: 'America/New_York'
utc: True
# Host vim configuration - tries to set sane defaults
vim:
managed_vimrc: False
config:
syntax: 'on'
settings:
bs: indent,eol,start
cindent:
nocompatible:
smartindent:
laststatus: 2
tabstop: 4
softtabstop: 4
shiftwidth: 4
noexpandtab:
nowrap:
swapsync: ''
mappings:
<C-u>: :tabp<enter>
<C-i>: :tabn<enter>
<C-J>: <C-W>j
<C-K>: <C-W>k
<C-H>: <C-W>h
<C-L>: <C-W>l