diff options
| author | Silvio Rhatto <rhatto@riseup.net> | 2020-10-01 15:02:47 -0300 |
|---|---|---|
| committer | Silvio Rhatto <rhatto@riseup.net> | 2020-10-01 15:02:47 -0300 |
| commit | 765ca2bd25384c3d33d243a5b2f0aa419edcd8fa (patch) | |
| tree | b59aa15319607ea45ba83516628539b420d8841b /puppet/config/common.yaml | |
| parent | b0d7b1d90860f858578455c5cf695c062c0ade07 (diff) | |
| parent | c212514035cffd38acbfac1413064937b28685b6 (diff) | |
| download | semanticscuttle-765ca2bd25384c3d33d243a5b2f0aa419edcd8fa.tar.gz semanticscuttle-765ca2bd25384c3d33d243a5b2f0aa419edcd8fa.tar.bz2 | |
Merge commit 'c212514035cffd38acbfac1413064937b28685b6' as 'puppet'
Diffstat (limited to 'puppet/config/common.yaml')
| -rw-r--r-- | puppet/config/common.yaml | 65 |
1 files changed, 65 insertions, 0 deletions
diff --git a/puppet/config/common.yaml b/puppet/config/common.yaml new file mode 100644 index 0000000..936420d --- /dev/null +++ b/puppet/config/common.yaml @@ -0,0 +1,65 @@ +--- +# +# General +# +nodo::subsystem::apt::include_src : false +nodo::subsystem::apt::use_next_release : false +nodo::subsystem::monitor::use_nagios : false +nodo::subsystem::monitor::address : "%{::fqdn}" + +# +# Firewall +# +firewall::ssl_ratelimit : "s:ssl:200/sec:20" +firewall::local_net : false +firewall::local::manage_host : true +firewall::local::manage_iface : false + +# +# Mail +# +mail::sympa::subdomain : "listas" +mail::sympa::lang : "pt_BR" + +# +# Monitoring +# +nodo::munin_node::allow: '127.0.0.1:192.168.0.[0-9]*:192.168.1.[0-9]*' + +# +# Timezone and ntp +# +ntp::zone : "Brazil/East" +ntp::pool : "south-america.pool.ntp.org" +ntp::servers : + - 'a.ntp.br' + - 'b.ntp.br' + - 'c.ntp.br' + +# +# Nameservers +# +# OpenDNS +nodo::subsystem::resolver::nameservers: + - '208.67.222.222' + - '208.67.220.220' + +# +# OpenSSH +# +sshd::use_storedconfigs : false +sshd::manage_nagios : false +sshd::listen_address : [ "%{::ipaddress}", '127.0.0.1' ] +sshd::password_authentication : 'yes' +sshd::shared_ip : 'yes' +sshd::tcp_forwarding : 'yes' +sshd::x11_forwarding : 'no' +sshd::hardened : 'yes' +sshd::print_motd : 'no' +sshd::ports : [ 22 ] +sshd::use_pam : 'no' + +# +# Backup +# +backupninja::keystore: '' |