|  | @@ -1,116 +1,93 @@
 | 
	
		
			
				|  |  | -# config file for ansible -- http://ansible.github.com
 | 
	
		
			
				|  |  | -# nearly all parameters can be overridden in ansible-playbook or with command line flags
 | 
	
		
			
				|  |  | -# ansible will read ~/.ansible.cfg or /etc/ansible/ansible.cfg, whichever it finds first
 | 
	
		
			
				|  |  | +# config file for ansible -- http://ansible.com/
 | 
	
		
			
				|  |  | +# ==============================================
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  | -[defaults]
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -# location of inventory file, eliminates need to specify -i
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -hostfile = /etc/ansible/hosts
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -# location of ansible library, eliminates need to specify --module-path
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -library = /usr/share/ansible
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -# default module name used in /usr/bin/ansible when -m is not specified
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -module_name = command
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -# home directory where temp files are stored on remote systems.  Should
 | 
	
		
			
				|  |  | -# almost always contain $HOME or be a directory writeable by all users
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -remote_tmp = $HOME/.ansible/tmp
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -# the default pattern for ansible-playbooks ("hosts:")
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -pattern = *
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -# the default number of forks (parallelism) to be used.  Usually you
 | 
	
		
			
				|  |  | -# can crank this up.
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -forks=5
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -# the timeout used by various connection types.  Usually this corresponds
 | 
	
		
			
				|  |  | -# to an SSH timeout
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -timeout=10
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -# when using --poll or "poll:" in an ansible playbook, and not specifying
 | 
	
		
			
				|  |  | -# an explicit poll interval, use this interval
 | 
	
		
			
				|  |  | +# nearly all parameters can be overridden in ansible-playbook 
 | 
	
		
			
				|  |  | +# or with command line flags. ansible will read ANSIBLE_CONFIG,
 | 
	
		
			
				|  |  | +# ansible.cfg in the current working directory, .ansible.cfg in
 | 
	
		
			
				|  |  | +# the home directory or /etc/ansible/ansible.cfg, whichever it
 | 
	
		
			
				|  |  | +# finds first
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  | -poll_interval=15
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -# when specifying --sudo to /usr/bin/ansible or "sudo:" in a playbook,
 | 
	
		
			
				|  |  | -# and not specifying "--sudo-user" or "sudo_user" respectively, sudo
 | 
	
		
			
				|  |  | -# to this user account
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -sudo_user=root
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -# the following forces ansible to always ask for the sudo password (instead of having
 | 
	
		
			
				|  |  | -# to add -K to the commandline). Or you can use the environment variable (ANSIBLE_ASK_SUDO_PASS)
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -#ask_sudo_pass=True
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -# the following forces ansible to always ask for the ssh-password (-k)
 | 
	
		
			
				|  |  | -# can also be set by the environment variable ANSIBLE_ASK_PASS
 | 
	
		
			
				|  |  | +[defaults]
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  | -#ask_pass=True
 | 
	
		
			
				|  |  | +# some basic default values...
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  | -# connection to use when -c <connection_type> is not specified
 | 
	
		
			
				|  |  | +hostfile       = /etc/ansible/hosts
 | 
	
		
			
				|  |  | +library        = /usr/share/ansible
 | 
	
		
			
				|  |  | +remote_tmp     = $HOME/.ansible/tmp
 | 
	
		
			
				|  |  | +pattern        = *
 | 
	
		
			
				|  |  | +forks          = 5
 | 
	
		
			
				|  |  | +poll_interval  = 15
 | 
	
		
			
				|  |  | +sudo_user      = root
 | 
	
		
			
				|  |  | +#ask_sudo_pass = True
 | 
	
		
			
				|  |  | +#ask_pass      = True
 | 
	
		
			
				|  |  | +transport      = smart
 | 
	
		
			
				|  |  | +remote_port    = 22
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  | -transport=paramiko
 | 
	
		
			
				|  |  | +# additional paths to search for roles in, colon seperated
 | 
	
		
			
				|  |  | +#roles_path    = /etc/ansible/roles
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  | -# remote SSH port to be used when --port or "port:" or an equivalent inventory
 | 
	
		
			
				|  |  | -# variable is not specified.
 | 
	
		
			
				|  |  | +# uncomment this to disable SSH key host checking
 | 
	
		
			
				|  |  | +#host_key_checking = False
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  | -remote_port=22
 | 
	
		
			
				|  |  | +# change this for alternative sudo implementations
 | 
	
		
			
				|  |  | +sudo_exe = sudo
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  | -# if set, always run /usr/bin/ansible commands as this user, and assume this value
 | 
	
		
			
				|  |  | -# if "user:" is not set in a playbook.  If not set, use the current Unix user
 | 
	
		
			
				|  |  | -# as the default
 | 
	
		
			
				|  |  | +# what flags to pass to sudo
 | 
	
		
			
				|  |  | +#sudo_flags = -H
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  | -#remote_user=root
 | 
	
		
			
				|  |  | +# SSH timeout
 | 
	
		
			
				|  |  | +timeout = 10
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  | -# the default sudo executable. If a sudo alternative with a sudo-compatible interface
 | 
	
		
			
				|  |  | -# is used, specify its executable name as the default
 | 
	
		
			
				|  |  | +# default user to use for playbooks if user is not specified
 | 
	
		
			
				|  |  | +# (/usr/bin/ansible will use current user as default)
 | 
	
		
			
				|  |  | +#remote_user = root
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  | -sudo_exe=sudo
 | 
	
		
			
				|  |  | +# logging is off by default unless this path is defined
 | 
	
		
			
				|  |  | +# if so defined, consider logrotate
 | 
	
		
			
				|  |  | +#log_path = /var/log/ansible.log
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  | -# the default flags passed to sudo
 | 
	
		
			
				|  |  | -# sudo_flags=-H
 | 
	
		
			
				|  |  | +# default module name for /usr/bin/ansible
 | 
	
		
			
				|  |  | +#module_name = command
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  | -# how to handle hash defined in several places
 | 
	
		
			
				|  |  | -# hash can be merged, or replaced
 | 
	
		
			
				|  |  | -# if you use replace, and have multiple hashes named 'x', the last defined
 | 
	
		
			
				|  |  | -# will override the previously defined one
 | 
	
		
			
				|  |  | -# if you use merge here, hash will cumulate their keys, but keys will still
 | 
	
		
			
				|  |  | -# override each other
 | 
	
		
			
				|  |  | -# replace is the default value, and is how ansible always handled hash variables
 | 
	
		
			
				|  |  | -#
 | 
	
		
			
				|  |  | -# hash_behaviour=replace
 | 
	
		
			
				|  |  | +# use this shell for commands executed under sudo
 | 
	
		
			
				|  |  | +# you may need to change this to bin/bash in rare instances
 | 
	
		
			
				|  |  | +# if sudo is constrained
 | 
	
		
			
				|  |  | +#executable = /bin/sh
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  | -# if you need to use jinja2 extensions, you can list them here
 | 
	
		
			
				|  |  | -# use a coma to separate extensions, e.g. :
 | 
	
		
			
				|  |  | -# jinja2_extensions=jinja2.ext.do,jinja2.ext.i18n
 | 
	
		
			
				|  |  | -# no extensions are loaded by default
 | 
	
		
			
				|  |  | +# if inventory variables overlap, does the higher precedence one win
 | 
	
		
			
				|  |  | +# or are hash values merged together?  The default is 'replace' but
 | 
	
		
			
				|  |  | +# this can also be set to 'merge'.
 | 
	
		
			
				|  |  | +#hash_behaviour = replace
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  | -#jinja2_extensions=
 | 
	
		
			
				|  |  | +# How to handle variable replacement - as of 1.2, Jinja2 variable syntax is
 | 
	
		
			
				|  |  | +# preferred, but we still support the old $variable replacement too.
 | 
	
		
			
				|  |  | +# Turn off ${old_style} variables here if you like.
 | 
	
		
			
				|  |  | +#legacy_playbook_variables = yes
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  | -# if set, always use this private key file for authentication, same as if passing
 | 
	
		
			
				|  |  | -# --private-key to ansible or ansible-playbook
 | 
	
		
			
				|  |  | +# list any Jinja2 extensions to enable here:
 | 
	
		
			
				|  |  | +#jinja2_extensions = jinja2.ext.do,jinja2.ext.i18n
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  | -#private_key_file=/path/to/file
 | 
	
		
			
				|  |  | +# if set, always use this private key file for authentication, same as 
 | 
	
		
			
				|  |  | +# if passing --private-key to ansible or ansible-playbook
 | 
	
		
			
				|  |  | +#private_key_file = /path/to/file
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  | -# format of string $ansible_managed available within Jinja2 templates, replacing
 | 
	
		
			
				|  |  | -# {file}, {host} and {uid} with template filename, host and owner respectively.
 | 
	
		
			
				|  |  | -# The resulting string is passed through strftime(3) so it may contain any
 | 
	
		
			
				|  |  | -# time-formatting specifiers.
 | 
	
		
			
				|  |  | -#
 | 
	
		
			
				|  |  | -# Example: ansible_managed = DONT TOUCH {file}: call {uid} at {host} for changes
 | 
	
		
			
				|  |  | +# format of string {{ ansible_managed }} available within Jinja2 
 | 
	
		
			
				|  |  | +# templates indicates to users editing templates files will be replaced.
 | 
	
		
			
				|  |  | +# replacing {file}, {host} and {uid} and strftime codes with proper values.
 | 
	
		
			
				|  |  |  ansible_managed = Ansible managed: {file} modified on %Y-%m-%d %H:%M:%S by {uid} on {host}
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  | -# additional plugin paths for non-core plugins
 | 
	
		
			
				|  |  | +# by default, ansible-playbook will display "Skipping [host]" if it determines a task
 | 
	
		
			
				|  |  | +# should not be run on a host.  Set this to "False" if you don't want to see these "Skipping" 
 | 
	
		
			
				|  |  | +# messages. NOTE: the task header will still be shown regardless of whether or not the 
 | 
	
		
			
				|  |  | +# task is skipped.
 | 
	
		
			
				|  |  | +#display_skipped_hosts = True
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  | +# by default (as of 1.3), Ansible will raise errors when attempting to dereference 
 | 
	
		
			
				|  |  | +# Jinja2 variables that are not set in templates or action lines. Uncomment this line
 | 
	
		
			
				|  |  | +# to revert the behavior to pre-1.3.
 | 
	
		
			
				|  |  | +#error_on_undefined_vars = False
 | 
	
		
			
				|  |  | +
 | 
	
		
			
				|  |  | +# set plugin path directories here, seperate with colons
 | 
	
		
			
				|  |  |  action_plugins     = /usr/share/ansible_plugins/action_plugins
 | 
	
		
			
				|  |  |  callback_plugins   = /usr/share/ansible_plugins/callback_plugins
 | 
	
		
			
				|  |  |  connection_plugins = /usr/share/ansible_plugins/connection_plugins
 | 
	
	
		
			
				|  | @@ -118,20 +95,58 @@ lookup_plugins     = /usr/share/ansible_plugins/lookup_plugins
 | 
	
		
			
				|  |  |  vars_plugins       = /usr/share/ansible_plugins/vars_plugins
 | 
	
		
			
				|  |  |  filter_plugins     = /usr/share/ansible_plugins/filter_plugins
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  | -[paramiko_connection]
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -# nothing to configure yet
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  | -[ssh_connection]
 | 
	
		
			
				|  |  | +# don't like cows?  that's unfortunate.
 | 
	
		
			
				|  |  | +# set to 1 if you don't want cowsay support or export ANSIBLE_NOCOWS=1 
 | 
	
		
			
				|  |  | +#nocows = 1
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  | -# if uncommented, sets the ansible ssh arguments to the following.  Leaving off ControlPersist
 | 
	
		
			
				|  |  | -# will result in poor performance, so use transport=paramiko on older platforms rather than
 | 
	
		
			
				|  |  | -# removing it
 | 
	
		
			
				|  |  | +# don't like colors either?
 | 
	
		
			
				|  |  | +# set to 1 if you don't want colors, or export ANSIBLE_NOCOLOR=1
 | 
	
		
			
				|  |  | +#nocolor = 1
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  | -ssh_args=-o PasswordAuthentication=no -o ControlMaster=auto -o ControlPersist=60s -o ControlPath=/tmp/ansible-ssh-%h-%p-%r
 | 
	
		
			
				|  |  | +[paramiko_connection]
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  | -# the following makes ansible use scp if the connection type is ssh (default is sftp)
 | 
	
		
			
				|  |  | +# uncomment this line to cause the paramiko connection plugin to not record new host
 | 
	
		
			
				|  |  | +# keys encountered.  Increases performance on new host additions.  Setting works independently of the
 | 
	
		
			
				|  |  | +# host key checking setting above.
 | 
	
		
			
				|  |  | +#record_host_keys=False
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  | -#scp_if_ssh=True
 | 
	
		
			
				|  |  | +# by default, Ansible requests a pseudo-terminal for commands executed under sudo. Uncomment this
 | 
	
		
			
				|  |  | +# line to disable this behaviour.
 | 
	
		
			
				|  |  | +#pty=False
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  | +[ssh_connection]
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  | +# ssh arguments to use
 | 
	
		
			
				|  |  | +# Leaving off ControlPersist will result in poor performance, so use 
 | 
	
		
			
				|  |  | +# paramiko on older platforms rather than removing it
 | 
	
		
			
				|  |  | +#ssh_args = -o ControlMaster=auto -o ControlPersist=60s
 | 
	
		
			
				|  |  | +
 | 
	
		
			
				|  |  | +# The path to use for the ControlPath sockets. This defaults to
 | 
	
		
			
				|  |  | +# "%(directory)s/ansible-ssh-%%h-%%p-%%r", however on some systems with
 | 
	
		
			
				|  |  | +# very long hostnames or very long path names (caused by long user names or 
 | 
	
		
			
				|  |  | +# deeply nested home directories) this can exceed the character limit on
 | 
	
		
			
				|  |  | +# file socket names (108 characters for most platforms). In that case, you 
 | 
	
		
			
				|  |  | +# may wish to shorten the string below.
 | 
	
		
			
				|  |  | +# 
 | 
	
		
			
				|  |  | +# Example: 
 | 
	
		
			
				|  |  | +# control_path = %(directory)s/%%h-%%r
 | 
	
		
			
				|  |  | +#control_path = %(directory)s/ansible-ssh-%%h-%%p-%%r
 | 
	
		
			
				|  |  | +
 | 
	
		
			
				|  |  | +# Enabling pipelining reduces the number of SSH operations required to 
 | 
	
		
			
				|  |  | +# execute a module on the remote server. This can result in a significant 
 | 
	
		
			
				|  |  | +# performance improvement when enabled, however when using "sudo:" you must 
 | 
	
		
			
				|  |  | +# first disable 'requiretty' in /etc/sudoers
 | 
	
		
			
				|  |  | +#
 | 
	
		
			
				|  |  | +# By default, this option is disabled to preserve compatibility with
 | 
	
		
			
				|  |  | +# sudoers configurations that have requiretty (the default on many distros).
 | 
	
		
			
				|  |  | +# 
 | 
	
		
			
				|  |  | +#pipelining = False
 | 
	
		
			
				|  |  | +
 | 
	
		
			
				|  |  | +# if True, make ansible use scp if the connection type is ssh 
 | 
	
		
			
				|  |  | +# (default is sftp)
 | 
	
		
			
				|  |  | +#scp_if_ssh = True
 | 
	
		
			
				|  |  | +
 | 
	
		
			
				|  |  | +[accelerate]
 | 
	
		
			
				|  |  | +accelerate_port = 5099
 | 
	
		
			
				|  |  | +accelerate_timeout = 30
 | 
	
		
			
				|  |  | +accelerate_connect_timeout = 5.0
 |