import basics from NSA's commission repo

1 files changed, 36 insertions, 0 deletions

diff --git a/roles/common/defaults/main.yml b/roles/common/defaults/main.yml
new file mode 100644
index 0000000..22287b0
--- /dev/null
+++ b/roles/common/defaults/main.yml
@@ -0,0 +1,36 @@
+---
+###############################################################################
+# DO NOT EDIT. Set your variables in `vars/*.yml` instead.
+# This is a reference of all the variables.
+###############################################################################
+
+common_timezone: 'Etc/UTC'
+# domain: (required)
+# main_user_name: (required)
+# admin_email: (required)
+main_user_shell: "/bin/bash"
+friendly_networks:
+  - ""
+
+# ssh
+ssh_kex_algorithms: "diffie-hellman-group-exchange-sha256"
+ssh_ciphers: "aes256-ctr,aes192-ctr,aes128-ctr"
+ssh_macs: "hmac-sha2-512,hmac-sha2-256,hmac-ripemd160"
+sshd_allow_passwd: "no"
+sshd_print_motd: "yes"
+sshd_allow_root: "without-password"
+sshd_forward_x11: "yes"
+
+# ntp
+ntp_servers:
+  # use nearby ntp servers by default
+  - 0.pool.ntp.org
+  - 1.pool.ntp.org
+  - 2.pool.ntp.org
+  - 3.pool.ntp.org
+  # use servers tailored to the server location
+  # See http://www.pool.ntp.org/en/use.html
+  # - 0.north-america.pool.ntp.org
+  # - 1.north-america.pool.ntp.org
+  # - 2.north-america.pool.ntp.org
+  # - 3.north-america.pool.ntp.org