150 lines
4.8 KiB
INI
150 lines
4.8 KiB
INI
# config file for ansible -- http://ansible.github.com
|
|
# nearly all parameters can be overridden in ansible-playbook or with command line flags
|
|
# ansible will read ~/.ansible.cfg or /etc/ansible/ansible.cfg, whichever it finds first
|
|
|
|
[defaults]
|
|
|
|
# location of inventory file, eliminates need to specify -i
|
|
|
|
hostfile = /etc/ansible/hosts
|
|
|
|
# location of ansible library, eliminates need to specify --module-path
|
|
|
|
library = /usr/share/ansible
|
|
|
|
# default module name used in /usr/bin/ansible when -m is not specified
|
|
|
|
module_name = command
|
|
|
|
# location for ansible log file. If set, will store output from ansible
|
|
# and ansible-playbook. If enabling, you may wish to configure
|
|
# logrotate.
|
|
|
|
#log_path = /var/log/ansible.log
|
|
|
|
# home directory where temp files are stored on remote systems. Should
|
|
# almost always contain $HOME or be a directory writeable by all users
|
|
|
|
remote_tmp = $HOME/.ansible/tmp
|
|
|
|
# the default pattern for ansible-playbooks ("hosts:")
|
|
|
|
pattern = *
|
|
|
|
# the default number of forks (parallelism) to be used. Usually you
|
|
# can crank this up.
|
|
|
|
forks=5
|
|
|
|
# the timeout used by various connection types. Usually this corresponds
|
|
# to an SSH timeout
|
|
|
|
timeout=10
|
|
|
|
# when using --poll or "poll:" in an ansible playbook, and not specifying
|
|
# an explicit poll interval, use this interval
|
|
|
|
poll_interval=15
|
|
|
|
# when specifying --sudo to /usr/bin/ansible or "sudo:" in a playbook,
|
|
# and not specifying "--sudo-user" or "sudo_user" respectively, sudo
|
|
# to this user account
|
|
|
|
sudo_user=root
|
|
|
|
# the following forces ansible to always ask for the sudo password (instead of having
|
|
# to add -K to the commandline). Or you can use the environment variable (ANSIBLE_ASK_SUDO_PASS)
|
|
|
|
#ask_sudo_pass=True
|
|
|
|
# the following forces ansible to always ask for the ssh-password (-k)
|
|
# can also be set by the environment variable ANSIBLE_ASK_PASS
|
|
|
|
#ask_pass=True
|
|
|
|
# connection to use when -c <connection_type> is not specified
|
|
|
|
transport=paramiko
|
|
|
|
# remote SSH port to be used when --port or "port:" or an equivalent inventory
|
|
# variable is not specified.
|
|
|
|
remote_port=22
|
|
|
|
# if set, always run /usr/bin/ansible commands as this user, and assume this value
|
|
# if "user:" is not set in a playbook. If not set, use the current Unix user
|
|
# as the default
|
|
|
|
#remote_user=root
|
|
|
|
# the default sudo executable. If a sudo alternative with a sudo-compatible interface
|
|
# is used, specify its executable name as the default
|
|
|
|
sudo_exe=sudo
|
|
|
|
# the default flags passed to sudo
|
|
# sudo_flags=-H
|
|
|
|
# all commands executed under sudo are passed as arguments to a shell command
|
|
# This shell command defaults to /bin/sh
|
|
# Changing this helps the situation where a user is only allowed to run
|
|
# e.g. /bin/bash with sudo privileges
|
|
|
|
# executable = /bin/sh
|
|
|
|
# how to handle hash defined in several places
|
|
# hash can be merged, or replaced
|
|
# if you use replace, and have multiple hashes named 'x', the last defined
|
|
# will override the previously defined one
|
|
# if you use merge here, hash will cumulate their keys, but keys will still
|
|
# override each other
|
|
# replace is the default value, and is how ansible always handled hash variables
|
|
#
|
|
# hash_behaviour=replace
|
|
|
|
# if you need to use jinja2 extensions, you can list them here
|
|
# use a coma to separate extensions, e.g. :
|
|
# jinja2_extensions=jinja2.ext.do,jinja2.ext.i18n
|
|
# no extensions are loaded by default
|
|
|
|
#jinja2_extensions=
|
|
|
|
# if set, always use this private key file for authentication, same as if passing
|
|
# --private-key to ansible or ansible-playbook
|
|
|
|
#private_key_file=/path/to/file
|
|
|
|
# format of string $ansible_managed available within Jinja2 templates, replacing
|
|
# {file}, {host} and {uid} with template filename, host and owner respectively.
|
|
# The resulting string is passed through strftime(3) so it may contain any
|
|
# time-formatting specifiers.
|
|
#
|
|
# Example: ansible_managed = DONT TOUCH {file}: call {uid} at {host} for changes
|
|
ansible_managed = Ansible managed: {file} modified on %Y-%m-%d %H:%M:%S by {uid} on {host}
|
|
|
|
# additional plugin paths for non-core plugins
|
|
|
|
action_plugins = /usr/share/ansible_plugins/action_plugins
|
|
callback_plugins = /usr/share/ansible_plugins/callback_plugins
|
|
connection_plugins = /usr/share/ansible_plugins/connection_plugins
|
|
lookup_plugins = /usr/share/ansible_plugins/lookup_plugins
|
|
vars_plugins = /usr/share/ansible_plugins/vars_plugins
|
|
filter_plugins = /usr/share/ansible_plugins/filter_plugins
|
|
|
|
[paramiko_connection]
|
|
|
|
# nothing to configure yet
|
|
|
|
[ssh_connection]
|
|
|
|
# if uncommented, sets the ansible ssh arguments to the following. Leaving off ControlPersist
|
|
# will result in poor performance, so use transport=paramiko on older platforms rather than
|
|
# removing it
|
|
|
|
ssh_args=-o PasswordAuthentication=no -o ControlMaster=auto -o ControlPersist=60s -o ControlPath=/tmp/ansible-ssh-%h-%p-%r
|
|
|
|
# the following makes ansible use scp if the connection type is ssh (default is sftp)
|
|
|
|
#scp_if_ssh=True
|
|
|
|
|