chore(): refactored group vars, added a few handy packages

also borgbackup default retention improvements and docker config
refactoring

group_vars/all/all.yaml

@@ -26,8 +26,8 @@ admin_users:
 # Containers management
 containers:
   docker:
-    enabled: true
+    enabled: false 
-    state: latest
+    state: absent
   k3s:
     enabled: false
     state: absent

group_vars/all/borgbackup.yaml

@@ -12,9 +12,9 @@ borg_source_directories:
 borg_ssh_key_type: "ed25519"
 borg_retention_policy:
   keep_hourly: 1
-  keep_daily: 1
+  keep_daily: 3
-  keep_weekly: 1
+  keep_weekly: 7
-  keep_monthly: 3
+  keep_monthly: 1
 
 borgmatic_timer_cron_name: "borgmatic"
 borgmatic_timer: cron

group_vars/all/docker.yaml

@@ -4,14 +4,95 @@ docker_install_compose_plugin: true
 docker_users:
   - "{{ ansible_user }}"
 docker_daemon_options:
-  storage-driver: "overlay2"
+    debug: false
+    init: false
+    live-restore: true
+    shutdown-timeout: 60
+    default-runtime: "runc"
+    raw-logs: false
 
-  log-driver: "json-file"
+    default-cgroupns-mode: "private"
-  log-opts:
+    containerd-namespace: "docker"
-    max-size: "50m"
+    containerd-plugins-namespace: "docker-plugins"
-    max-file: "5"
 
-  live-restore: false
+    selinux-enabled: false
-  icc: false
+    icc: true
-  userland-proxy: false
+    authorization-plugins: []
-  default-address-pools: [{"base": "10.200.0.0/16", "size": 24}]
+    allow-direct-routing: false
+    no-new-privileges: true
+    # userns-remap: default
+
+    ipv6: true
+    ip-forward: true
+    iptables: true
+    ip6tables: true
+    ip-masq: false
+    userland-proxy: false
+    mtu: 1500
+    default-address-pools:
+      - base: "10.200.0.0/16"
+        size: 24
+    default-network-opts: {}
+
+    dns:
+      - "100.100.100.100"
+      - "1.1.1.1"
+      - "8.8.8.8"
+    dns-search:
+      - "headnet.itqdev.xyz"
+    dns-opts: []
+
+    storage-driver: "overlay2"
+    storage-opts: []
+    default-shm-size: "16M"
+
+    builder:
+      gc:
+        enabled: true
+        defaultReservedSpace: "10GB"
+        policy:
+          - filter:
+              - "type=source.local"
+            maxUsedSpace: "512MB"
+            keepDuration: "48h"
+          - maxUsedSpace: "100GB"
+            keepDuration: "1440h"
+            reservedSpace: "10GB"
+          - all: true
+            reservedSpace: "50GB"
+            maxUsedSpace: "200GB"
+            minFreeSpace: "20GB"
+
+    log-driver: "json-file"
+    log-format: "text"
+    log-level: ""
+    log-opts:
+      labels: "local"
+      env: "os,customer"
+      max-size: "50m"
+      max-file: "5"
+      cache-disabled: "false"
+      cache-max-size: "20m"
+      cache-max-file: "5"
+      cache-compress: "true"
+
+    default-ulimits:
+      nofile:
+        Name: "nofile"
+        Soft: 64000
+        Hard: 64000
+
+    registry-mirrors: []
+    insecure-registries: []
+    max-download-attempts: 5
+    max-concurrent-downloads: 3
+    max-concurrent-uploads: 3
+
+    experimental: false
+    features:
+      cdi: true
+      containerd-snapshotter: false
+
+    labels: []
+
+    exec-opts: []

group_vars/all/packages.yaml

@@ -26,6 +26,11 @@ system_packages:
     - socat
     - netcat-traditional
     - vmtouch
+    - gdb
+    - gcc
+    - cron
+    - just
+    - bat
   monitoring:
     - htop
     - atop