Compare commits
No commits in common. "3efeb38623586d5991fc4573975b798263853842" and "970eda96d212c8af47e1d1bce366c4a04213931a" have entirely different histories.
3efeb38623
...
970eda96d2
3 changed files with 3 additions and 146 deletions
|
@ -9,7 +9,7 @@ Ansible playbooks and roles to deploy Debian clients for LinuxMuster.
|
||||||
* **Join domain**
|
* **Join domain**
|
||||||
* **Activate kerberos-support**
|
* **Activate kerberos-support**
|
||||||
* **Mount homes from server**
|
* **Mount homes from server**
|
||||||
* **Install printer**
|
* **Install printer**
|
||||||
Installs local cups (printserver) and configures/installs all subscribed printers on login. Printers can be subscribed by user or by machine
|
Installs local cups (printserver) and configures/installs all subscribed printers on login. Printers can be subscribed by user or by machine
|
||||||
|
|
||||||
## Following optional modules are available:
|
## Following optional modules are available:
|
||||||
|
|
|
@ -21,11 +21,11 @@ If the cabling does not properly support large screen resolutions, the desired r
|
||||||
This variable specifies the resolution and frequency of display.
|
This variable specifies the resolution and frequency of display.
|
||||||
Default: "1920x1080@60"
|
Default: "1920x1080@60"
|
||||||
Type: *String*
|
Type: *String*
|
||||||
* **dual_screen**
|
* ** dual_screen **
|
||||||
Array with X11 and Wayland naming of desired primary display.
|
Array with X11 and Wayland naming of desired primary display.
|
||||||
Type: *String*
|
Type: *String*
|
||||||
Example: [DisplayPort-3, DP-4]
|
Example: [DisplayPort-3, DP-4]
|
||||||
* **audio_output**
|
* ** audio_output **
|
||||||
Array of audio-output device to be selected.
|
Array of audio-output device to be selected.
|
||||||
Example: [pci-0000_00_1f.3, analog-stereo]
|
Example: [pci-0000_00_1f.3, analog-stereo]
|
||||||
|
|
||||||
|
|
|
@ -6,148 +6,5 @@ all:
|
||||||
kde_desktop_pkg:
|
kde_desktop_pkg:
|
||||||
- akonadi-backend-sqlite
|
- akonadi-backend-sqlite
|
||||||
|
|
||||||
|
|
||||||
## Proxy configuration (see: doc/localproxy.md)
|
|
||||||
# localproxy: true
|
|
||||||
# no_proxy: "firewall.{{ domain }},server.{{ domain }},.{{ domain }}"
|
|
||||||
|
|
||||||
# kerberize_uris: "idam.{{ domain }}, server.{{ domain }}, *.{{ domain }}"
|
|
||||||
|
|
||||||
## Configure additional apt options. E.g. Apt-cacher?
|
|
||||||
# apt_conf: "Acquire::http::Proxy \"http://aptcache.{{ domain }}:3142/\";"
|
|
||||||
|
|
||||||
## Configure NTP-Server
|
|
||||||
# ntp_serv: "server.{{ domain }}"
|
|
||||||
|
|
||||||
## NFS-Server for additional mount. Comment out or leave empty to use no additional NFS-Server:
|
|
||||||
# nfs_server: "files.{{ domain }}"
|
|
||||||
|
|
||||||
## List of print servers. The order of the print servers determines which print server the printer will be installed from:
|
|
||||||
# printservers:
|
|
||||||
# - "server.{{ domain }}"
|
|
||||||
# - "print.{{ domain }}"
|
|
||||||
|
|
||||||
## PAM mount nextcloud. Comment out or leave empty to skip:
|
|
||||||
# web_dav: "https://nc.{{ domain }}/remote.php/dav/files/%(USER)"
|
|
||||||
|
|
||||||
## Local mirror for mscorefonts. Comment out or leave empty to use no mirror:
|
|
||||||
# mirror_msfonts: "http://livebox.{{ domain }}/mscorefonts/"
|
|
||||||
|
|
||||||
## Local mirror for libdvdcss. Comment out or leave empty to use no mirror:
|
|
||||||
# mirror_dvdcss: "http://livebox.{{ domain }}/libdvdcss/"
|
|
||||||
|
|
||||||
## SSH-keys to deploy:
|
|
||||||
## passwordless login for default-user (ansible)
|
|
||||||
##
|
|
||||||
# keys2deploy:
|
|
||||||
# - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAI........ admin1@example.com'
|
|
||||||
# - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAI........ admin2@example.com'
|
|
||||||
|
|
||||||
## Use grub-mkpasswd-pbkdf2 to calculate the password hash:
|
|
||||||
# grub_pwd: 'grub.pbkdf2.sha512.10000.EF6E2F4F758771751EF4A8A85B1F3F25F35A3AF859DBF0BB8153D9DF6B48D27A2DCDF4ECDC0711D2A93DCBBCF2C4D6FC69D02E1179AB14B62750BDD502C81C95.442C213A064A98E5FF089F3E647C6481327750127D310ABC39596176233C0CE75311EE818EE7F77BD961BBB723A15F853DE6DDD3BF30C7273769C7AC2587CD28'
|
|
||||||
|
|
||||||
## Installs VM-support (QEMU/KVM)
|
|
||||||
## Additional infrastructure (seedbox) nedded. See: doc/vm.md
|
|
||||||
##
|
|
||||||
# vm_support: true
|
|
||||||
# vm_torrent_serv: "seedbox.{{ domain }}"
|
|
||||||
# vm_uploadseed_pwd: secret = "token:topsecret"
|
|
||||||
|
|
||||||
## Additional packages to install
|
|
||||||
##
|
|
||||||
# extra_pkgs:
|
|
||||||
# - vim
|
|
||||||
# - mc
|
|
||||||
# - tmux
|
|
||||||
# - debconf-utils
|
|
||||||
|
|
||||||
## WLAN configuration (see: doc/vpn.md):
|
|
||||||
##
|
|
||||||
## WPA Personal
|
|
||||||
# wlan: psk
|
|
||||||
# wlan_ssid: devicesPSK
|
|
||||||
# wlan_password: "topsecretpasswd"
|
|
||||||
#
|
|
||||||
## WPA Enterprise with EAP-TLS
|
|
||||||
## Additional infrastructure (radius server) needed. See: doc/vpn.md
|
|
||||||
# wlan: eap-tls
|
|
||||||
# wlan_ssid: devicesEAPtls
|
|
||||||
# wlan_eap_ca:
|
|
||||||
# C: DE
|
|
||||||
# ST: Baden-Wuerttemberg
|
|
||||||
# L: Reutlingen
|
|
||||||
# O: Linuxschule
|
|
||||||
# emailAddress: admin@example.com
|
|
||||||
# CN: Radius Certificate Authority
|
|
||||||
# password: "secret4radiusCA"
|
|
||||||
# wlan_eap_ca_crl: "http://radius.{{ domain }}/radius-ca.crl"
|
|
||||||
|
|
||||||
## VPN Configuration (Wireguard)
|
|
||||||
## Additional infrastructure needed (see: doc/vpn.md)
|
|
||||||
##
|
|
||||||
# vpn: wg # only set on hosts/groups, which will get wireguard profiles
|
|
||||||
# wg_endpoint: "203.0.113.1:51820"
|
|
||||||
# wg_allowed_ips: "10.0.0.0/16;"
|
|
||||||
# wg_ip_cdr: 24
|
|
||||||
# wg_dns: "9.9.9.9"
|
|
||||||
# wg_dns_search: "{{ domain }}"
|
|
||||||
|
|
||||||
## Reporter service
|
|
||||||
## Enable automatic reports
|
|
||||||
# misc_reporter: true
|
|
||||||
## Server to which reports should be sent. If you don't want to use reporting, this can be empty:
|
|
||||||
# misc_reporter_serv: "collector.{{ domain }}"
|
|
||||||
|
|
||||||
## Additional roles to run (see: doc/custom_roles.md):
|
|
||||||
##
|
|
||||||
# custom_roles:
|
|
||||||
# - fvs
|
|
||||||
|
|
||||||
hosts:
|
hosts:
|
||||||
localhost:
|
localhost:
|
||||||
|
|
||||||
laptops:
|
|
||||||
children:
|
|
||||||
teacherlaptop: # teacherlaptops will get laptop vars too
|
|
||||||
hosts:
|
|
||||||
vars:
|
|
||||||
## Activate WLAN and select authentication mode (see: doc/wlan.md)
|
|
||||||
wlan: psk # (none|psk|eap-tls)
|
|
||||||
|
|
||||||
## Use localhome on mobile devices
|
|
||||||
localhome: true
|
|
||||||
|
|
||||||
## Create local guest user
|
|
||||||
localuser: guest
|
|
||||||
localuser_password: !unsafe Muster!
|
|
||||||
|
|
||||||
teacherlaptop:
|
|
||||||
hosts:
|
|
||||||
vars:
|
|
||||||
exam_mode: false
|
|
||||||
# vpn: wg
|
|
||||||
extra_pkgs1:
|
|
||||||
- plasma-discover
|
|
||||||
- nextcloud-desktop
|
|
||||||
- dolphin-nextcloud
|
|
||||||
sudo_permissions:
|
|
||||||
"%role-teacher":
|
|
||||||
- /usr/bin/apt
|
|
||||||
- /usr/sbin/cryptsetup
|
|
||||||
polkit_rules:
|
|
||||||
"role-teacher":
|
|
||||||
- "org.freedesktop.NetworkManager.settings.modify.system"
|
|
||||||
- "org.freedesktop.packagekit.package-install"
|
|
||||||
- "org.freedesktop.packagekit.package-reinstall"
|
|
||||||
- "org.freedesktop.packagekit.system-update"
|
|
||||||
- "org.freedesktop.packagekit.upgrade-system"
|
|
||||||
- "org.freedesktop.packagekit.package-install-untrusted"
|
|
||||||
localuser: false
|
|
||||||
localhome_logout_missing_serverhome: false
|
|
||||||
wlan_enable_on_boot: false
|
|
||||||
misc_avoid_suspend: false
|
|
||||||
misc_pwroff: false
|
|
||||||
misc_pwroff_idle: false
|
|
||||||
misc_reporter: false # privacy for teachers
|
|
||||||
printer_admin_group: role-teacher
|
|
||||||
fvs_remove_discover: false # Custom role feature to give teachers package store
|
|
||||||
|
|
Loading…
Add table
Reference in a new issue