prole/infrastructure/roles/samba_ad_dc/defaults/main.yml

43 lines
1.3 KiB
YAML

---
# roles/samba_ad_dc_defaults/defaults/main.yml
# DNS
samba_ad_dc_dns_forwarders:
- 10.0.0.5
- 10.0.0.4
# Identity
# When samba_ad_dc_child_id is set (e.g., A000001), the realm/workgroup/netbios
# will be derived automatically as a child of samba_ad_dc_parent_realm.
samba_ad_dc_parent_realm: "PROLE.ORG"
samba_ad_dc_parent_netbios: "{{ samba_ad_dc_parent_realm.split('.')[0] | upper }}"
samba_ad_dc_child_id: ""
samba_ad_dc_realm: >-
{{ (samba_ad_dc_child_id | length > 0)
| ternary((samba_ad_dc_child_id | upper) ~ '.' ~ samba_ad_dc_parent_realm, samba_ad_dc_parent_realm) }}
samba_ad_dc_workgroup: >-
{{ (samba_ad_dc_child_id | length > 0)
| ternary((samba_ad_dc_child_id | upper), "PROLE") }}
samba_ad_dc_netbios_name: "{{ inventory_hostname_short | upper }}"
samba_ad_dc_server_string: "{{ samba_ad_dc_realm }} AD DC"
# Role/services
samba_ad_dc_server_role: "active directory domain controller"
samba_ad_dc_server_services: "-smb -winbind"
# RFC2307
samba_ad_dc_rfc2307: true
# Homes
samba_ad_dc_template_homedir: "/prole/home/%U"
samba_ad_dc_template_shell: "/bin/bash"
# Shares
samba_ad_dc_sysvol_path: "/var/lib/samba/sysvol"
samba_ad_dc_netlogon_path: "/var/lib/samba/sysvol/{{ samba_ad_dc_realm | lower }}/scripts"
# K3s/Kubeadm access group
samba_kubeadm_group: "kubeadm"
samba_kubeadm_members:
- chrisfu