|
@@ -1,116 +1,93 @@
|
|
|
-# config file for ansible -- http://ansible.github.com
|
|
|
-# nearly all parameters can be overridden in ansible-playbook or with command line flags
|
|
|
-# ansible will read ~/.ansible.cfg or /etc/ansible/ansible.cfg, whichever it finds first
|
|
|
+# config file for ansible -- http://ansible.com/
|
|
|
+# ==============================================
|
|
|
|
|
|
-[defaults]
|
|
|
-
|
|
|
-# location of inventory file, eliminates need to specify -i
|
|
|
-
|
|
|
-hostfile = /etc/ansible/hosts
|
|
|
-
|
|
|
-# location of ansible library, eliminates need to specify --module-path
|
|
|
-
|
|
|
-library = /usr/share/ansible
|
|
|
-
|
|
|
-# default module name used in /usr/bin/ansible when -m is not specified
|
|
|
-
|
|
|
-module_name = command
|
|
|
-
|
|
|
-# home directory where temp files are stored on remote systems. Should
|
|
|
-# almost always contain $HOME or be a directory writeable by all users
|
|
|
-
|
|
|
-remote_tmp = $HOME/.ansible/tmp
|
|
|
-
|
|
|
-# the default pattern for ansible-playbooks ("hosts:")
|
|
|
-
|
|
|
-pattern = *
|
|
|
-
|
|
|
-# the default number of forks (parallelism) to be used. Usually you
|
|
|
-# can crank this up.
|
|
|
-
|
|
|
-forks=5
|
|
|
-
|
|
|
-# the timeout used by various connection types. Usually this corresponds
|
|
|
-# to an SSH timeout
|
|
|
-
|
|
|
-timeout=10
|
|
|
-
|
|
|
-# when using --poll or "poll:" in an ansible playbook, and not specifying
|
|
|
-# an explicit poll interval, use this interval
|
|
|
+# nearly all parameters can be overridden in ansible-playbook
|
|
|
+# or with command line flags. ansible will read ANSIBLE_CONFIG,
|
|
|
+# ansible.cfg in the current working directory, .ansible.cfg in
|
|
|
+# the home directory or /etc/ansible/ansible.cfg, whichever it
|
|
|
+# finds first
|
|
|
|
|
|
-poll_interval=15
|
|
|
-
|
|
|
-# when specifying --sudo to /usr/bin/ansible or "sudo:" in a playbook,
|
|
|
-# and not specifying "--sudo-user" or "sudo_user" respectively, sudo
|
|
|
-# to this user account
|
|
|
-
|
|
|
-sudo_user=root
|
|
|
-
|
|
|
-# the following forces ansible to always ask for the sudo password (instead of having
|
|
|
-# to add -K to the commandline). Or you can use the environment variable (ANSIBLE_ASK_SUDO_PASS)
|
|
|
-
|
|
|
-#ask_sudo_pass=True
|
|
|
-
|
|
|
-# the following forces ansible to always ask for the ssh-password (-k)
|
|
|
-# can also be set by the environment variable ANSIBLE_ASK_PASS
|
|
|
+[defaults]
|
|
|
|
|
|
-#ask_pass=True
|
|
|
+# some basic default values...
|
|
|
|
|
|
-# connection to use when -c <connection_type> is not specified
|
|
|
+hostfile = /etc/ansible/hosts
|
|
|
+library = /usr/share/ansible
|
|
|
+remote_tmp = $HOME/.ansible/tmp
|
|
|
+pattern = *
|
|
|
+forks = 5
|
|
|
+poll_interval = 15
|
|
|
+sudo_user = root
|
|
|
+#ask_sudo_pass = True
|
|
|
+#ask_pass = True
|
|
|
+transport = smart
|
|
|
+remote_port = 22
|
|
|
|
|
|
-transport=paramiko
|
|
|
+# additional paths to search for roles in, colon seperated
|
|
|
+#roles_path = /etc/ansible/roles
|
|
|
|
|
|
-# remote SSH port to be used when --port or "port:" or an equivalent inventory
|
|
|
-# variable is not specified.
|
|
|
+# uncomment this to disable SSH key host checking
|
|
|
+#host_key_checking = False
|
|
|
|
|
|
-remote_port=22
|
|
|
+# change this for alternative sudo implementations
|
|
|
+sudo_exe = sudo
|
|
|
|
|
|
-# if set, always run /usr/bin/ansible commands as this user, and assume this value
|
|
|
-# if "user:" is not set in a playbook. If not set, use the current Unix user
|
|
|
-# as the default
|
|
|
+# what flags to pass to sudo
|
|
|
+#sudo_flags = -H
|
|
|
|
|
|
-#remote_user=root
|
|
|
+# SSH timeout
|
|
|
+timeout = 10
|
|
|
|
|
|
-# the default sudo executable. If a sudo alternative with a sudo-compatible interface
|
|
|
-# is used, specify its executable name as the default
|
|
|
+# default user to use for playbooks if user is not specified
|
|
|
+# (/usr/bin/ansible will use current user as default)
|
|
|
+#remote_user = root
|
|
|
|
|
|
-sudo_exe=sudo
|
|
|
+# logging is off by default unless this path is defined
|
|
|
+# if so defined, consider logrotate
|
|
|
+#log_path = /var/log/ansible.log
|
|
|
|
|
|
-# the default flags passed to sudo
|
|
|
-# sudo_flags=-H
|
|
|
+# default module name for /usr/bin/ansible
|
|
|
+#module_name = command
|
|
|
|
|
|
-# how to handle hash defined in several places
|
|
|
-# hash can be merged, or replaced
|
|
|
-# if you use replace, and have multiple hashes named 'x', the last defined
|
|
|
-# will override the previously defined one
|
|
|
-# if you use merge here, hash will cumulate their keys, but keys will still
|
|
|
-# override each other
|
|
|
-# replace is the default value, and is how ansible always handled hash variables
|
|
|
-#
|
|
|
-# hash_behaviour=replace
|
|
|
+# use this shell for commands executed under sudo
|
|
|
+# you may need to change this to bin/bash in rare instances
|
|
|
+# if sudo is constrained
|
|
|
+#executable = /bin/sh
|
|
|
|
|
|
-# if you need to use jinja2 extensions, you can list them here
|
|
|
-# use a coma to separate extensions, e.g. :
|
|
|
-# jinja2_extensions=jinja2.ext.do,jinja2.ext.i18n
|
|
|
-# no extensions are loaded by default
|
|
|
+# if inventory variables overlap, does the higher precedence one win
|
|
|
+# or are hash values merged together? The default is 'replace' but
|
|
|
+# this can also be set to 'merge'.
|
|
|
+#hash_behaviour = replace
|
|
|
|
|
|
-#jinja2_extensions=
|
|
|
+# How to handle variable replacement - as of 1.2, Jinja2 variable syntax is
|
|
|
+# preferred, but we still support the old $variable replacement too.
|
|
|
+# Turn off ${old_style} variables here if you like.
|
|
|
+#legacy_playbook_variables = yes
|
|
|
|
|
|
-# if set, always use this private key file for authentication, same as if passing
|
|
|
-# --private-key to ansible or ansible-playbook
|
|
|
+# list any Jinja2 extensions to enable here:
|
|
|
+#jinja2_extensions = jinja2.ext.do,jinja2.ext.i18n
|
|
|
|
|
|
-#private_key_file=/path/to/file
|
|
|
+# if set, always use this private key file for authentication, same as
|
|
|
+# if passing --private-key to ansible or ansible-playbook
|
|
|
+#private_key_file = /path/to/file
|
|
|
|
|
|
-# format of string $ansible_managed available within Jinja2 templates, replacing
|
|
|
-# {file}, {host} and {uid} with template filename, host and owner respectively.
|
|
|
-# The resulting string is passed through strftime(3) so it may contain any
|
|
|
-# time-formatting specifiers.
|
|
|
-#
|
|
|
-# Example: ansible_managed = DONT TOUCH {file}: call {uid} at {host} for changes
|
|
|
+# format of string {{ ansible_managed }} available within Jinja2
|
|
|
+# templates indicates to users editing templates files will be replaced.
|
|
|
+# replacing {file}, {host} and {uid} and strftime codes with proper values.
|
|
|
ansible_managed = Ansible managed: {file} modified on %Y-%m-%d %H:%M:%S by {uid} on {host}
|
|
|
|
|
|
-# additional plugin paths for non-core plugins
|
|
|
+# by default, ansible-playbook will display "Skipping [host]" if it determines a task
|
|
|
+# should not be run on a host. Set this to "False" if you don't want to see these "Skipping"
|
|
|
+# messages. NOTE: the task header will still be shown regardless of whether or not the
|
|
|
+# task is skipped.
|
|
|
+#display_skipped_hosts = True
|
|
|
|
|
|
+# by default (as of 1.3), Ansible will raise errors when attempting to dereference
|
|
|
+# Jinja2 variables that are not set in templates or action lines. Uncomment this line
|
|
|
+# to revert the behavior to pre-1.3.
|
|
|
+#error_on_undefined_vars = False
|
|
|
+
|
|
|
+# set plugin path directories here, seperate with colons
|
|
|
action_plugins = /usr/share/ansible_plugins/action_plugins
|
|
|
callback_plugins = /usr/share/ansible_plugins/callback_plugins
|
|
|
connection_plugins = /usr/share/ansible_plugins/connection_plugins
|
|
@@ -118,20 +95,58 @@ lookup_plugins = /usr/share/ansible_plugins/lookup_plugins
|
|
|
vars_plugins = /usr/share/ansible_plugins/vars_plugins
|
|
|
filter_plugins = /usr/share/ansible_plugins/filter_plugins
|
|
|
|
|
|
-[paramiko_connection]
|
|
|
-
|
|
|
-# nothing to configure yet
|
|
|
-
|
|
|
-[ssh_connection]
|
|
|
+# don't like cows? that's unfortunate.
|
|
|
+# set to 1 if you don't want cowsay support or export ANSIBLE_NOCOWS=1
|
|
|
+#nocows = 1
|
|
|
|
|
|
-# if uncommented, sets the ansible ssh arguments to the following. Leaving off ControlPersist
|
|
|
-# will result in poor performance, so use transport=paramiko on older platforms rather than
|
|
|
-# removing it
|
|
|
+# don't like colors either?
|
|
|
+# set to 1 if you don't want colors, or export ANSIBLE_NOCOLOR=1
|
|
|
+#nocolor = 1
|
|
|
|
|
|
-ssh_args=-o PasswordAuthentication=no -o ControlMaster=auto -o ControlPersist=60s -o ControlPath=/tmp/ansible-ssh-%h-%p-%r
|
|
|
+[paramiko_connection]
|
|
|
|
|
|
-# the following makes ansible use scp if the connection type is ssh (default is sftp)
|
|
|
+# uncomment this line to cause the paramiko connection plugin to not record new host
|
|
|
+# keys encountered. Increases performance on new host additions. Setting works independently of the
|
|
|
+# host key checking setting above.
|
|
|
+#record_host_keys=False
|
|
|
|
|
|
-#scp_if_ssh=True
|
|
|
+# by default, Ansible requests a pseudo-terminal for commands executed under sudo. Uncomment this
|
|
|
+# line to disable this behaviour.
|
|
|
+#pty=False
|
|
|
|
|
|
+[ssh_connection]
|
|
|
|
|
|
+# ssh arguments to use
|
|
|
+# Leaving off ControlPersist will result in poor performance, so use
|
|
|
+# paramiko on older platforms rather than removing it
|
|
|
+#ssh_args = -o ControlMaster=auto -o ControlPersist=60s
|
|
|
+
|
|
|
+# The path to use for the ControlPath sockets. This defaults to
|
|
|
+# "%(directory)s/ansible-ssh-%%h-%%p-%%r", however on some systems with
|
|
|
+# very long hostnames or very long path names (caused by long user names or
|
|
|
+# deeply nested home directories) this can exceed the character limit on
|
|
|
+# file socket names (108 characters for most platforms). In that case, you
|
|
|
+# may wish to shorten the string below.
|
|
|
+#
|
|
|
+# Example:
|
|
|
+# control_path = %(directory)s/%%h-%%r
|
|
|
+#control_path = %(directory)s/ansible-ssh-%%h-%%p-%%r
|
|
|
+
|
|
|
+# Enabling pipelining reduces the number of SSH operations required to
|
|
|
+# execute a module on the remote server. This can result in a significant
|
|
|
+# performance improvement when enabled, however when using "sudo:" you must
|
|
|
+# first disable 'requiretty' in /etc/sudoers
|
|
|
+#
|
|
|
+# By default, this option is disabled to preserve compatibility with
|
|
|
+# sudoers configurations that have requiretty (the default on many distros).
|
|
|
+#
|
|
|
+#pipelining = False
|
|
|
+
|
|
|
+# if True, make ansible use scp if the connection type is ssh
|
|
|
+# (default is sftp)
|
|
|
+#scp_if_ssh = True
|
|
|
+
|
|
|
+[accelerate]
|
|
|
+accelerate_port = 5099
|
|
|
+accelerate_timeout = 30
|
|
|
+accelerate_connect_timeout = 5.0
|