---
# OS Specific Settings

os_gpg_key_pubkey_name: gpg-pubkey-fd431d51-4ae0493b
os_gpg_key_pubkey_content: "Red Hat, Inc. (release key 2) <security@redhat.com> fd431d51"

# disable repo_gpgcheck due to OS default repos
rhel9cis_rule_enable_repogpg: false

# Vars setup for overiding main.yml
rhel9cis_sshd:
    clientalivecountmax: 3
    clientaliveinterval: 900
    logingracetime: 60
    # allowusers: 
    allowgroups: sshd wheel
    # denyusers:
    # denygroups:
    usr_min_uid: 1000