style(group_vars): formatting improvements

group_vars/all/all.yaml

@@ -9,11 +9,10 @@ system_locale: en_US.UTF-8
 
 # Monitoring
 monitoring_enabled: true
-monitoring_prometheus_node_exporter: true
 
 # Logs
-journal_retention_days: 21
+common_journal_retention_days: 21
-journal_max_disk_limit: "5%"
+common_journal_max_disk_limit: "5%"
 
 # User management
 admin_users:
@@ -26,7 +25,7 @@ admin_users:
 # Containers management
 containers:
   docker:
-    enabled: false 
+    enabled: false
     state: absent
   k3s:
     enabled: false

group_vars/all/docker.yaml

@@ -4,95 +4,95 @@ docker_install_compose_plugin: true
 docker_users:
   - "{{ ansible_user }}"
 docker_daemon_options:
-    debug: false
+  debug: false
-    init: false
+  init: false
-    live-restore: true
+  live-restore: true
-    shutdown-timeout: 60
+  shutdown-timeout: 60
-    default-runtime: "runc"
+  default-runtime: "runc"
-    raw-logs: false
+  raw-logs: false
 
-    default-cgroupns-mode: "private"
+  default-cgroupns-mode: "private"
-    containerd-namespace: "docker"
+  containerd-namespace: "docker"
-    containerd-plugins-namespace: "docker-plugins"
+  containerd-plugins-namespace: "docker-plugins"
 
-    selinux-enabled: false
+  selinux-enabled: false
-    icc: true
+  icc: true
-    authorization-plugins: []
+  authorization-plugins: []
-    allow-direct-routing: false
+  allow-direct-routing: false
-    no-new-privileges: true
+  no-new-privileges: true
-    # userns-remap: default
+  # userns-remap: default
 
-    ipv6: true
+  ipv6: true
-    ip-forward: true
+  ip-forward: true
-    iptables: true
+  iptables: true
-    ip6tables: true
+  ip6tables: true
-    ip-masq: false
+  ip-masq: false
-    userland-proxy: false
+  userland-proxy: false
-    mtu: 1500
+  mtu: 1500
-    default-address-pools:
+  default-address-pools:
-      - base: "10.200.0.0/16"
+    - base: "10.200.0.0/16"
-        size: 24
+      size: 24
-    default-network-opts: {}
+  default-network-opts: {}
 
-    dns:
+  dns:
-      - "100.100.100.100"
+    - "100.100.100.100"
-      - "1.1.1.1"
+    - "1.1.1.1"
-      - "8.8.8.8"
+    - "8.8.8.8"
-    dns-search:
+  dns-search:
-      - "headnet.itqdev.xyz"
+    - "headnet.itqdev.xyz"
-    dns-opts: []
+  dns-opts: []
 
-    storage-driver: "overlay2"
+  storage-driver: "overlay2"
-    storage-opts: []
+  storage-opts: []
-    default-shm-size: "16M"
+  default-shm-size: "16M"
 
-    builder:
+  builder:
-      gc:
+    gc:
-        enabled: true
+      enabled: true
-        defaultReservedSpace: "10GB"
+      defaultReservedSpace: "10GB"
-        policy:
+      policy:
-          - filter:
+        - filter:
-              - "type=source.local"
+            - "type=source.local"
-            maxUsedSpace: "512MB"
+          maxUsedSpace: "512MB"
-            keepDuration: "48h"
+          keepDuration: "48h"
-          - maxUsedSpace: "100GB"
+        - maxUsedSpace: "100GB"
-            keepDuration: "1440h"
+          keepDuration: "1440h"
-            reservedSpace: "10GB"
+          reservedSpace: "10GB"
-          - all: true
+        - all: true
-            reservedSpace: "50GB"
+          reservedSpace: "50GB"
-            maxUsedSpace: "200GB"
+          maxUsedSpace: "200GB"
-            minFreeSpace: "20GB"
+          minFreeSpace: "20GB"
 
-    log-driver: "json-file"
+  log-driver: "json-file"
-    log-format: "text"
+  log-format: "text"
-    log-level: ""
+  log-level: ""
-    log-opts:
+  log-opts:
-      labels: "local"
+    labels: "local"
-      env: "os,customer"
+    env: "os,customer"
-      max-size: "50m"
+    max-size: "50m"
-      max-file: "5"
+    max-file: "5"
-      cache-disabled: "false"
+    cache-disabled: "false"
-      cache-max-size: "20m"
+    cache-max-size: "20m"
-      cache-max-file: "5"
+    cache-max-file: "5"
-      cache-compress: "true"
+    cache-compress: "true"
 
-    default-ulimits:
+  default-ulimits:
-      nofile:
+    nofile:
-        Name: "nofile"
+      Name: "nofile"
-        Soft: 64000
+      Soft: 64000
-        Hard: 64000
+      Hard: 64000
 
-    registry-mirrors: []
+  registry-mirrors: []
-    insecure-registries: []
+  insecure-registries: []
-    max-download-attempts: 5
+  max-download-attempts: 5
-    max-concurrent-downloads: 3
+  max-concurrent-downloads: 3
-    max-concurrent-uploads: 3
+  max-concurrent-uploads: 3
 
-    experimental: false
+  experimental: false
-    features:
+  features:
-      cdi: true
+    cdi: true
-      containerd-snapshotter: false
+    containerd-snapshotter: false
 
-    labels: []
+  labels: []
 
-    exec-opts: []
+  exec-opts: []

group_vars/all/packages.yaml

@@ -29,13 +29,12 @@ system_packages:
     - gdb
     - gcc
     - cron
-    - just
     - bat
     - sqlite3
   monitoring:
     - htop
     - atop
-    - psmisc # pstree
+    - psmisc  # pstree
     - iotop
     - nethogs
     - nload

group_vars/all/sysctl.yaml

@@ -8,6 +8,9 @@ sysctl_tuning:
   net.ipv4.tcp_keepalive_probes: 5
   net.ipv4.tcp_keepalive_intvl: 15
   net.ipv4.ip_local_port_range: "1024 65535"
+  net.core.default_qdisc: fq
+  net.ipv4.tcp_congestion_control: bbr
+  net.ipv4.tcp_slow_start_after_idle: 0
 
   # Memory tuning
   vm.swappiness: 10