33 lines
1.1 KiB
YAML
33 lines
1.1 KiB
YAML
---
|
|
# --- Overrides for local Vagrant testing ---
|
|
# Ansible dict vars are REPLACED wholesale by more specific scopes (this
|
|
# file beats group_vars/all/preparing.yaml), so each dict below is
|
|
# restated in full, not merged.
|
|
|
|
# sshd must keep listening on the REAL guest port (22). Vagrant forwards
|
|
# host:2222 -> guest:22, not guest:2222, so reusing ansible_port (2222)
|
|
# here — like group_vars/all/preparing.yaml does — would configure sshd
|
|
# to listen where nothing forwards to, locking you out on the next
|
|
# connection.
|
|
sshd_config:
|
|
Port: 22
|
|
ListenAddress: 0.0.0.0
|
|
PermitRootLogin: without-password
|
|
PasswordAuthentication: "yes"
|
|
# root-only AllowUsers would lock out the 'vagrant' user Ansible/vagrant
|
|
# ssh connect as. Keep both.
|
|
AllowUsers: "root vagrant"
|
|
AllowGroups: "root vagrant"
|
|
|
|
# Teacher's prod trusted IPs (87.247.187.145, 10.60.10.0/24) don't apply
|
|
# to a local box. 10.0.2.0/24 is VirtualBox's default NAT subnet.
|
|
iptables:
|
|
network_adapter_access:
|
|
- lo
|
|
tcp_port_access:
|
|
- 80
|
|
- 443
|
|
trusted_IP: []
|
|
trusted_Range:
|
|
- 10.0.2.0/24
|