diff --git a/group_vars/all/all.yaml b/group_vars/all/all.yaml index 1fa271a..80d5b03 100644 --- a/group_vars/all/all.yaml +++ b/group_vars/all/all.yaml @@ -9,11 +9,10 @@ system_locale: en_US.UTF-8 # Monitoring monitoring_enabled: true -monitoring_prometheus_node_exporter: true # Logs -journal_retention_days: 21 -journal_max_disk_limit: "5%" +common_journal_retention_days: 21 +common_journal_max_disk_limit: "5%" # User management admin_users: @@ -26,7 +25,7 @@ admin_users: # Containers management containers: docker: - enabled: false + enabled: false state: absent k3s: enabled: false diff --git a/group_vars/all/docker.yaml b/group_vars/all/docker.yaml index 557bbba..c6756a9 100644 --- a/group_vars/all/docker.yaml +++ b/group_vars/all/docker.yaml @@ -4,95 +4,95 @@ docker_install_compose_plugin: true docker_users: - "{{ ansible_user }}" docker_daemon_options: - debug: false - init: false - live-restore: true - shutdown-timeout: 60 - default-runtime: "runc" - raw-logs: false + debug: false + init: false + live-restore: true + shutdown-timeout: 60 + default-runtime: "runc" + raw-logs: false - default-cgroupns-mode: "private" - containerd-namespace: "docker" - containerd-plugins-namespace: "docker-plugins" + default-cgroupns-mode: "private" + containerd-namespace: "docker" + containerd-plugins-namespace: "docker-plugins" - selinux-enabled: false - icc: true - authorization-plugins: [] - allow-direct-routing: false - no-new-privileges: true - # userns-remap: default + selinux-enabled: false + icc: true + authorization-plugins: [] + allow-direct-routing: false + no-new-privileges: true + # userns-remap: default - ipv6: true - ip-forward: true - iptables: true - ip6tables: true - ip-masq: false - userland-proxy: false - mtu: 1500 - default-address-pools: - - base: "10.200.0.0/16" - size: 24 - default-network-opts: {} + ipv6: true + ip-forward: true + iptables: true + ip6tables: true + ip-masq: false + userland-proxy: false + mtu: 1500 + default-address-pools: + - base: "10.200.0.0/16" + size: 24 + default-network-opts: {} - dns: - - "100.100.100.100" - - "1.1.1.1" - - "8.8.8.8" - dns-search: - - "headnet.itqdev.xyz" - dns-opts: [] + dns: + - "100.100.100.100" + - "1.1.1.1" + - "8.8.8.8" + dns-search: + - "headnet.itqdev.xyz" + dns-opts: [] - storage-driver: "overlay2" - storage-opts: [] - default-shm-size: "16M" + storage-driver: "overlay2" + storage-opts: [] + default-shm-size: "16M" - builder: - gc: - enabled: true - defaultReservedSpace: "10GB" - policy: - - filter: - - "type=source.local" - maxUsedSpace: "512MB" - keepDuration: "48h" - - maxUsedSpace: "100GB" - keepDuration: "1440h" - reservedSpace: "10GB" - - all: true - reservedSpace: "50GB" - maxUsedSpace: "200GB" - minFreeSpace: "20GB" + builder: + gc: + enabled: true + defaultReservedSpace: "10GB" + policy: + - filter: + - "type=source.local" + maxUsedSpace: "512MB" + keepDuration: "48h" + - maxUsedSpace: "100GB" + keepDuration: "1440h" + reservedSpace: "10GB" + - all: true + reservedSpace: "50GB" + maxUsedSpace: "200GB" + minFreeSpace: "20GB" - log-driver: "json-file" - log-format: "text" - log-level: "" - log-opts: - labels: "local" - env: "os,customer" - max-size: "50m" - max-file: "5" - cache-disabled: "false" - cache-max-size: "20m" - cache-max-file: "5" - cache-compress: "true" + log-driver: "json-file" + log-format: "text" + log-level: "" + log-opts: + labels: "local" + env: "os,customer" + max-size: "50m" + max-file: "5" + cache-disabled: "false" + cache-max-size: "20m" + cache-max-file: "5" + cache-compress: "true" - default-ulimits: - nofile: - Name: "nofile" - Soft: 64000 - Hard: 64000 + default-ulimits: + nofile: + Name: "nofile" + Soft: 64000 + Hard: 64000 - registry-mirrors: [] - insecure-registries: [] - max-download-attempts: 5 - max-concurrent-downloads: 3 - max-concurrent-uploads: 3 + registry-mirrors: [] + insecure-registries: [] + max-download-attempts: 5 + max-concurrent-downloads: 3 + max-concurrent-uploads: 3 - experimental: false - features: - cdi: true - containerd-snapshotter: false + experimental: false + features: + cdi: true + containerd-snapshotter: false - labels: [] + labels: [] - exec-opts: [] + exec-opts: [] diff --git a/group_vars/all/packages.yaml b/group_vars/all/packages.yaml index e633085..82fdd59 100644 --- a/group_vars/all/packages.yaml +++ b/group_vars/all/packages.yaml @@ -29,13 +29,12 @@ system_packages: - gdb - gcc - cron - - just - bat - sqlite3 monitoring: - htop - atop - - psmisc # pstree + - psmisc # pstree - iotop - nethogs - nload diff --git a/group_vars/all/sysctl.yaml b/group_vars/all/sysctl.yaml index db0d3ae..bb37707 100644 --- a/group_vars/all/sysctl.yaml +++ b/group_vars/all/sysctl.yaml @@ -8,6 +8,9 @@ sysctl_tuning: net.ipv4.tcp_keepalive_probes: 5 net.ipv4.tcp_keepalive_intvl: 15 net.ipv4.ip_local_port_range: "1024 65535" + net.core.default_qdisc: fq + net.ipv4.tcp_congestion_control: bbr + net.ipv4.tcp_slow_start_after_idle: 0 # Memory tuning vm.swappiness: 10