---
prole_audit_scan_paths:
  - /etc
  - /usr/local
  - /opt
  - /srv

prole_audit_scan_paths_extra: []

prole_audit_allow_prefixes:
  - "{{ prole_home | default('/opt/prole') }}"
  - "{{ prole_conf | default('/opt/prole/conf') }}"
  - /etc/rancher/k3s
  - /var/lib/rancher
  - /usr/local/bin/k3s
  - /usr/local/bin/kubectl
  - /usr/local/bin/crictl
  - /usr/local/bin/ctr
  - /usr/local/bin/k3s-killall.sh
  - /usr/local/bin/k3s-uninstall.sh
  - /etc/systemd/system/k3s.service
  - /etc/systemd/system/k3s.service.env
  - /etc/systemd/system/k3s-agent.service
  - /etc/systemd/system/k3s-agent.service.env
  - /usr/local/bin/helm
  - /etc/rsyslog.d/10-server.conf
  - /etc/rsyslog.d/90-forward-all.conf
  - /etc/dnsmasq.d/05-samba-ad.conf
  - /etc/dnsmasq.d/99-dns-forward-max.conf
  - /usr/local/sbin/rotate-pihole-db
  - /var/lib/pihole/db-archive

prole_audit_allow_prefixes_extra: []

prole_audit_dpkg_verify_packages: []

prole_audit_tracked_packages:
  - curl
  - iptables
  - rsyslog
  - samba
  - krb5-user
  - open-iscsi
  - util-linux
  - dphys-swapfile
  - zram-tools