prole/infrastructure/roles/audit/defaults/main.yml

47 lines
1.1 KiB
YAML

---
prole_audit_scan_paths:
- /etc
- /usr/local
- /opt
- /srv
prole_audit_scan_paths_extra: []
prole_audit_allow_prefixes:
- "{{ prole_home | default('/opt/prole') }}"
- "{{ prole_conf | default('/opt/prole/conf') }}"
- /etc/rancher/k3s
- /var/lib/rancher
- /usr/local/bin/k3s
- /usr/local/bin/kubectl
- /usr/local/bin/crictl
- /usr/local/bin/ctr
- /usr/local/bin/k3s-killall.sh
- /usr/local/bin/k3s-uninstall.sh
- /etc/systemd/system/k3s.service
- /etc/systemd/system/k3s.service.env
- /etc/systemd/system/k3s-agent.service
- /etc/systemd/system/k3s-agent.service.env
- /usr/local/bin/helm
- /etc/rsyslog.d/10-server.conf
- /etc/rsyslog.d/90-forward-all.conf
- /etc/dnsmasq.d/05-samba-ad.conf
- /etc/dnsmasq.d/99-dns-forward-max.conf
- /usr/local/sbin/rotate-pihole-db
- /var/lib/pihole/db-archive
prole_audit_allow_prefixes_extra: []
prole_audit_dpkg_verify_packages: []
prole_audit_tracked_packages:
- curl
- iptables
- rsyslog
- samba
- krb5-user
- open-iscsi
- util-linux
- dphys-swapfile
- zram-tools