|
@@ -1,192 +1,3 @@
|
1
|
|
-# config file for ansible -- http://ansible.com/
|
2
|
|
-# ==============================================
|
3
|
|
-
|
4
|
|
-# nearly all parameters can be overridden in ansible-playbook
|
5
|
|
-# or with command line flags. ansible will read ANSIBLE_CONFIG,
|
6
|
|
-# ansible.cfg in the current working directory, .ansible.cfg in
|
7
|
|
-# the home directory or /etc/ansible/ansible.cfg, whichever it
|
8
|
|
-# finds first
|
9
|
|
-
|
10
|
1
|
[defaults]
|
11
|
|
-
|
12
|
|
-# some basic default values...
|
13
|
|
-
|
14
|
|
-hostfile = /etc/ansible/hosts
|
15
|
|
-library = /usr/share/ansible
|
16
|
|
-remote_tmp = $HOME/.ansible/tmp
|
17
|
|
-pattern = *
|
18
|
|
-forks = 5
|
19
|
|
-poll_interval = 15
|
20
|
|
-sudo_user = root
|
21
|
|
-#ask_sudo_pass = True
|
22
|
|
-#ask_pass = True
|
23
|
|
-transport = smart
|
24
|
|
-remote_port = 22
|
25
|
|
-module_lang = C
|
26
|
|
-
|
27
|
|
-# plays will gather facts by default, which contain information about
|
28
|
|
-# the remote system.
|
29
|
|
-#
|
30
|
|
-# smart - gather by default, but don't regather if already gathered
|
31
|
|
-# implicit - gather by default, turn off with gather_facts: False
|
32
|
|
-# explicit - do not gather by default, must say gather_facts: True
|
33
|
|
-gathering = smart
|
34
|
|
-
|
35
|
|
-# additional paths to search for roles in, colon separated
|
36
|
|
-roles_path = /etc/ansible/roles
|
37
|
|
-
|
38
|
|
-# uncomment this to disable SSH key host checking
|
39
|
|
-#host_key_checking = False
|
40
|
|
-
|
41
|
|
-# change this for alternative sudo implementations
|
42
|
|
-sudo_exe = sudo
|
43
|
|
-
|
44
|
|
-# what flags to pass to sudo
|
45
|
|
-#sudo_flags = -H
|
46
|
|
-
|
47
|
|
-# SSH timeout
|
48
|
|
-timeout = 10
|
49
|
|
-
|
50
|
|
-# default user to use for playbooks if user is not specified
|
51
|
|
-# (/usr/bin/ansible will use current user as default)
|
52
|
|
-#remote_user = root
|
53
|
|
-
|
54
|
|
-# logging is off by default unless this path is defined
|
55
|
|
-# if so defined, consider logrotate
|
56
|
|
-#log_path = /var/log/ansible.log
|
57
|
|
-
|
58
|
|
-# default module name for /usr/bin/ansible
|
59
|
|
-#module_name = command
|
60
|
|
-
|
61
|
|
-# use this shell for commands executed under sudo
|
62
|
|
-# you may need to change this to bin/bash in rare instances
|
63
|
|
-# if sudo is constrained
|
64
|
|
-#executable = /bin/sh
|
65
|
|
-
|
66
|
|
-# if inventory variables overlap, does the higher precedence one win
|
67
|
|
-# or are hash values merged together? The default is 'replace' but
|
68
|
|
-# this can also be set to 'merge'.
|
69
|
|
-#hash_behaviour = replace
|
70
|
|
-
|
71
|
|
-# list any Jinja2 extensions to enable here:
|
72
|
|
-#jinja2_extensions = jinja2.ext.do,jinja2.ext.i18n
|
73
|
|
-
|
74
|
|
-# if set, always use this private key file for authentication, same as
|
75
|
|
-# if passing --private-key to ansible or ansible-playbook
|
76
|
|
-#private_key_file = /path/to/file
|
77
|
|
-
|
78
|
|
-# format of string {{ ansible_managed }} available within Jinja2
|
79
|
|
-# templates indicates to users editing templates files will be replaced.
|
80
|
|
-# replacing {file}, {host} and {uid} and strftime codes with proper values.
|
81
|
|
-ansible_managed = Ansible managed: {file} modified on %Y-%m-%d %H:%M:%S by {uid} on {host}
|
82
|
|
-
|
83
|
|
-# by default, ansible-playbook will display "Skipping [host]" if it determines a task
|
84
|
|
-# should not be run on a host. Set this to "False" if you don't want to see these "Skipping"
|
85
|
|
-# messages. NOTE: the task header will still be shown regardless of whether or not the
|
86
|
|
-# task is skipped.
|
87
|
|
-#display_skipped_hosts = True
|
88
|
|
-
|
89
|
|
-# by default (as of 1.3), Ansible will raise errors when attempting to dereference
|
90
|
|
-# Jinja2 variables that are not set in templates or action lines. Uncomment this line
|
91
|
|
-# to revert the behavior to pre-1.3.
|
92
|
|
-#error_on_undefined_vars = False
|
93
|
|
-
|
94
|
|
-# by default (as of 1.6), Ansible may display warnings based on the configuration of the
|
95
|
|
-# system running ansible itself. This may include warnings about 3rd party packages or
|
96
|
|
-# other conditions that should be resolved if possible.
|
97
|
|
-# to disable these warnings, set the following value to False:
|
98
|
|
-#system_warnings = True
|
99
|
|
-
|
100
|
|
-# by default (as of 1.4), Ansible may display deprecation warnings for language
|
101
|
|
-# features that should no longer be used and will be removed in future versions.
|
102
|
|
-# to disable these warnings, set the following value to False:
|
103
|
|
-#deprecation_warnings = True
|
104
|
|
-
|
105
|
|
-# set plugin path directories here, separate with colons
|
106
|
|
-action_plugins = /usr/share/ansible_plugins/action_plugins
|
107
|
|
-callback_plugins = /usr/share/ansible_plugins/callback_plugins
|
108
|
|
-connection_plugins = /usr/share/ansible_plugins/connection_plugins
|
109
|
|
-lookup_plugins = /usr/share/ansible_plugins/lookup_plugins
|
110
|
|
-vars_plugins = /usr/share/ansible_plugins/vars_plugins
|
111
|
|
-filter_plugins = /usr/share/ansible_plugins/filter_plugins
|
112
|
|
-
|
113
|
|
-# don't like cows? that's unfortunate.
|
114
|
|
-# set to 1 if you don't want cowsay support or export ANSIBLE_NOCOWS=1
|
|
2
|
+roles_path = roles
|
115
|
3
|
nocows = 1
|
116
|
|
-
|
117
|
|
-# don't like colors either?
|
118
|
|
-# set to 1 if you don't want colors, or export ANSIBLE_NOCOLOR=1
|
119
|
|
-#nocolor = 1
|
120
|
|
-
|
121
|
|
-# the CA certificate path used for validating SSL certs. This path
|
122
|
|
-# should exist on the controlling node, not the target nodes
|
123
|
|
-# common locations:
|
124
|
|
-# RHEL/CentOS: /etc/pki/tls/certs/ca-bundle.crt
|
125
|
|
-# Fedora : /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
|
126
|
|
-# Ubuntu : /usr/share/ca-certificates/cacert.org/cacert.org.crt
|
127
|
|
-#ca_file_path =
|
128
|
|
-
|
129
|
|
-# the http user-agent string to use when fetching urls. Some web server
|
130
|
|
-# operators block the default urllib user agent as it is frequently used
|
131
|
|
-# by malicious attacks/scripts, so we set it to something unique to
|
132
|
|
-# avoid issues.
|
133
|
|
-#http_user_agent = ansible-agent
|
134
|
|
-
|
135
|
|
-[paramiko_connection]
|
136
|
|
-
|
137
|
|
-# uncomment this line to cause the paramiko connection plugin to not record new host
|
138
|
|
-# keys encountered. Increases performance on new host additions. Setting works independently of the
|
139
|
|
-# host key checking setting above.
|
140
|
|
-#record_host_keys=False
|
141
|
|
-
|
142
|
|
-# by default, Ansible requests a pseudo-terminal for commands executed under sudo. Uncomment this
|
143
|
|
-# line to disable this behaviour.
|
144
|
|
-#pty=False
|
145
|
|
-
|
146
|
|
-[ssh_connection]
|
147
|
|
-
|
148
|
|
-# ssh arguments to use
|
149
|
|
-# Leaving off ControlPersist will result in poor performance, so use
|
150
|
|
-# paramiko on older platforms rather than removing it
|
151
|
|
-#ssh_args = -o ControlMaster=auto -o ControlPersist=60s
|
152
|
|
-
|
153
|
|
-# The path to use for the ControlPath sockets. This defaults to
|
154
|
|
-# "%(directory)s/ansible-ssh-%%h-%%p-%%r", however on some systems with
|
155
|
|
-# very long hostnames or very long path names (caused by long user names or
|
156
|
|
-# deeply nested home directories) this can exceed the character limit on
|
157
|
|
-# file socket names (108 characters for most platforms). In that case, you
|
158
|
|
-# may wish to shorten the string below.
|
159
|
|
-#
|
160
|
|
-# Example:
|
161
|
|
-# control_path = %(directory)s/%%h-%%r
|
162
|
|
-#control_path = %(directory)s/ansible-ssh-%%h-%%p-%%r
|
163
|
|
-
|
164
|
|
-# Enabling pipelining reduces the number of SSH operations required to
|
165
|
|
-# execute a module on the remote server. This can result in a significant
|
166
|
|
-# performance improvement when enabled, however when using "sudo:" you must
|
167
|
|
-# first disable 'requiretty' in /etc/sudoers
|
168
|
|
-#
|
169
|
|
-# By default, this option is disabled to preserve compatibility with
|
170
|
|
-# sudoers configurations that have requiretty (the default on many distros).
|
171
|
|
-#
|
172
|
|
-pipelining = True
|
173
|
|
-
|
174
|
|
-# if True, make ansible use scp if the connection type is ssh
|
175
|
|
-# (default is sftp)
|
176
|
|
-#scp_if_ssh = True
|
177
|
|
-
|
178
|
|
-[accelerate]
|
179
|
|
-accelerate_port = 5099
|
180
|
|
-accelerate_timeout = 30
|
181
|
|
-accelerate_connect_timeout = 5.0
|
182
|
|
-
|
183
|
|
-# The daemon timeout is measured in minutes. This time is measured
|
184
|
|
-# from the last activity to the accelerate daemon.
|
185
|
|
-accelerate_daemon_timeout = 30
|
186
|
|
-
|
187
|
|
-# If set to yes, accelerate_multi_key will allow multiple
|
188
|
|
-# private keys to be uploaded to it, though each user must
|
189
|
|
-# have access to the system via SSH to add a new key. The default
|
190
|
|
-# is "no".
|
191
|
|
-#accelerate_multi_key = yes
|
192
|
|
-
|