mirror of
https://github.com/rocky-linux/infrastructure
synced 2024-12-28 21:40:56 +00:00
48 lines
1.3 KiB
Text
48 lines
1.3 KiB
Text
[ipaservers]
|
|
ipa001.rockylinux.org ansible_host=10.100.1.110
|
|
ipa002.rockylinux.org ansible_host=10.100.1.111
|
|
|
|
[ipaserver]
|
|
ipa001.rockylinux.org ansible_host=10.100.1.110
|
|
|
|
[ipaserver:vars]
|
|
ipaserver_domain=rockylinux.org
|
|
ipaserver_realm=ROCKYLINUX.ORG
|
|
ipaserver_setup_dns=true
|
|
ipaserver_setup_kra=true
|
|
ipaserver_auto_forwarders=true
|
|
ipaserver_no_host_dns=true
|
|
ipaserver_hostname=ipa001.rockylinux.org
|
|
ipaserver_allow_zone_overlap=true
|
|
ipaserver_setup_firewalld=true
|
|
ipaclient_no_ntp=true
|
|
ipaclient_mkhomedir=true
|
|
ipaserver_reverse_zones=["1.100.10.in-addr.arpa."]
|
|
|
|
[ipareplicas]
|
|
ipa002.rockylinux.org ansible_host=10.100.1.111
|
|
|
|
[ipareplicas:vars]
|
|
ipaadmin_principal=admin
|
|
ipaclient_no_ntp=true
|
|
ipaclient_mkhomedir=true
|
|
ipaserver_realm=ROCKYLINUX.ORG
|
|
ipaserver_hostname=ipa002.rockylinux.org
|
|
ipareplica_domain=rockylinux.org
|
|
ipareplica_auto_forwarders=true
|
|
ipareplica_setup_firewalld=true
|
|
ipareplica_setup_ca=true
|
|
ipareplica_setup_kra=true
|
|
ipareplica_setup_dns=true
|
|
ipa_dns_master=10.100.1.110
|
|
|
|
# This is for example purposes - it is likely we'll use "all" instead of
|
|
# putting everything under an ipaclient
|
|
[ipaclients]
|
|
build-a-box.rockylinux.org ansible_host=10.100.1.112
|
|
|
|
[ipaclients:vars]
|
|
ipaclient_domain=rockylinux.org
|
|
ipaadmin_principal=admin
|
|
ipaclient_no_ntp=true
|
|
ipaclient_mkhomedir=true
|