--- # Location of the host (generic, sr2_de_fsn) baseline_location: generic # Enable running the Ansible Lockdown CIS role baseline_lockdown: true # UK Ministry of Justice Login Banner (seems as good as any) # https://security-guidance.service.justice.gov.uk/system-lockdown-and-hardening-standard/#appendix-a-login-banner baseline_warning_banner: | THIS SYSTEM IS FOR AUTHORISED USERS ONLY. This is a private system; only use this system if you have specific authority to do so. Otherwise you are liable to prosecution under the Computer Misuse Act 1990. If you do not have the express permission of the operator or owner of this system, switch off or disconnect now to avoid prosecution. # Local NTP servers if available baseline_ntp_servers: - 0.pool.ntp.org - 1.pool.ntp.org - 2.pool.ntp.org - 3.pool.ntp.org # baseline_second_disk_device: baseline_second_disk_vg_name: "datavg" baseline_second_disk_var_size: "5G" baseline_second_disk_var_log_size: "5G" baseline_second_disk_var_log_audit_size: "5G" baseline_second_disk_var_tmp_size: "5G"