---

packages_common:
  - 'bash'
  - 'curl'
  - 'screen'
  - 'unzip'
  - 'vim'
  - 'wget'
  - 'zip'

# common apache config
apache_listen_ip: '*'
apache_listen_port: 80
# merge apache config arrays
apache_mods_enabled: >-
  {{
    (apache_mods_enabled_gitea | default([]))
    + (apache_mods_enabled_munin | default([]))
  }}
apache_vhosts: >-
  {{
    (apache_vhosts_gitea | default([]))
    + (apache_vhosts_munin | default([]))
  }}

munin_node_allowed_ips:
  - '^10\.7\.10\.95$'
  - '^127\.0\.0\.1$'
  - '^::1$'

ntp_enabled: True
ntp_timezone: 'America/New_York'
ntp_package: 'chrony'
ntp_daemon: 'chronyd'
ntp_config_file: '/etc/chrony/chrony.conf'
ntp_driftfile: '/var/lib/chrony/chrony.drift'
ntp_manage_config: True
ntp_servers:
  - 'virginia.time.system76.com iburst'
  - 'ohio.time.system76.com iburst'
  - 'oregon.time.system76.com iburst'
ntp_restrict:
  - '127.0.0.1'
  - '::1'

sudoers_sudoers:
  privileges:
    - name: '%sudo'
      entry: 'ALL=NOPASSWD:ALL'
    - name: '%linuxadmins'
      entry: 'ALL=(ALL) ALL'