---

packages_common:
  - 'bash'
  - 'curl'
  - 'screen'
  - 'unzip'
  - 'vim'
  - 'wget'
  - 'zip'

# common apache config
apache_listen_ip: '*'
apache_listen_port: 80
# merge apache config arrays
apache_mods_enabled: >-
  {{
    (apache_mods_enabled_gitea | default([]))
    + (apache_mods_enabled_munin | default([]))
  }}
apache_vhosts: >-
  {{
    (apache_vhosts_gitea | default([]))
    + (apache_vhosts_munin | default([]))
  }}

docker_add_repo: True
docker_users:
  - 'gballan'

munin_node_host_name: "{{ ansible_fqdn }}"
munin_node_allowed_ips:
  - '^10\.7\.10\.35$'
  - '^127\.0\.0\.1$'
  - '^::1$'
munin_node_plugins:
  - name: 'cpu'
  - name: 'df'
  - name: 'memory'
  - name: 'swap'
  - name: 'threads'
  - name: 'uptime'
  - name: 'users'

ntp_enabled: True
ntp_timezone: 'America/New_York'
ntp_package: 'chrony'
ntp_daemon: 'chronyd'
ntp_config_file: '/etc/chrony/chrony.conf'
ntp_driftfile: '/var/lib/chrony/chrony.drift'
ntp_manage_config: True
ntp_servers:
  - 'virginia.time.system76.com iburst'
  - 'ohio.time.system76.com iburst'
  - 'oregon.time.system76.com iburst'
ntp_restrict:
  - '127.0.0.1'
  - '::1'

sudoers_sudoers:
  privileges:
    - name: '%sudo'
      entry: 'ALL=NOPASSWD:ALL'
    - name: '%linuxadmins'
      entry: 'ALL=(ALL) ALL'