28 lines
1 KiB
YAML
28 lines
1 KiB
YAML
|
---
|
||
|
|
# Location of the host (generic, sr2_de_fsn)
|
||
|
|
baseline_location: generic
|
||
|
|
# Enable running the Ansible Lockdown CIS role
|
||
|
|
baseline_lockdown: true
|
||
|
|
# UK Ministry of Justice Login Banner (seems as good as any)
|
||
|
|
# https://security-guidance.service.justice.gov.uk/system-lockdown-and-hardening-standard/#appendix-a-login-banner
|
||
|
|
baseline_warning_banner: |
|
||
|
|
THIS SYSTEM IS FOR AUTHORISED USERS ONLY.
|
||
|
|
|
||
|
|
This is a private system; only use this system if you have specific authority to do so.
|
||
|
|
Otherwise you are liable to prosecution under the Computer Misuse Act 1990. If you do
|
||
|
|
not have the express permission of the operator or owner of this system, switch off or
|
||
|
|
disconnect now to avoid prosecution.
|
||
|
|
|
||
|
|
# Local NTP servers if available
|
||
|
|
baseline_ntp_servers:
|
||
|
|
- 0.pool.ntp.org
|
||
|
|
- 1.pool.ntp.org
|
||
|
|
- 2.pool.ntp.org
|
||
|
|
- 3.pool.ntp.org
|
||
|
|
# baseline_second_disk_device:
|
||
|
|
baseline_second_disk_vg_name: "datavg"
|
||
|
|
baseline_second_disk_var_size: "5G"
|
||
|
|
baseline_second_disk_var_log_size: "5G"
|
||
|
|
baseline_second_disk_var_log_audit_size: "5G"
|
||
|
|
baseline_second_disk_var_tmp_size: "5G"
|