Initial import; migrate some roles from irl.wip

roles/baseline/defaults/main.yml

@@ -0,0 +1,27 @@
+---
+# Location of the host (generic, sr2_de_fsn)
+baseline_location: generic
+# Enable running the Ansible Lockdown CIS role
+baseline_lockdown: true
+# UK Ministry of Justice Login Banner (seems as good as any)
+# https://security-guidance.service.justice.gov.uk/system-lockdown-and-hardening-standard/#appendix-a-login-banner
+baseline_warning_banner: |
+  THIS SYSTEM IS FOR AUTHORISED USERS ONLY.
+
+  This is a private system; only use this system if you have specific authority to do so.
+  Otherwise you are liable to prosecution under the Computer Misuse Act 1990. If you do
+  not have the express permission of the operator or owner of this system, switch off or
+  disconnect now to avoid prosecution.
+
+# Local NTP servers if available
+baseline_ntp_servers:
+  - 0.pool.ntp.org
+  - 1.pool.ntp.org
+  - 2.pool.ntp.org
+  - 3.pool.ntp.org
+# baseline_second_disk_device:
+baseline_second_disk_vg_name: "datavg"
+baseline_second_disk_var_size: "5G"
+baseline_second_disk_var_log_size: "5G"
+baseline_second_disk_var_log_audit_size: "5G"
+baseline_second_disk_var_tmp_size: "5G"