Encryption and major changes

2024-09-28 23:12:19 +02:00
parent 1f060541c3
commit 6248286ad2
159 changed files with 153 additions and 129 deletions
@@ -0,0 +1,5 @@
+# {{ ansible_managed }}
+
+[Coredump]
+Storage=none
+ProcessSizeMax=0
@@ -0,0 +1,6 @@
+# {{ ansible_managed }}
+
+[Journal]
+Storage=persistent
+ForwardToSyslog=yes
+Compress=yes
@@ -0,0 +1,8 @@
+# {{ ansible_managed }}
+
+[Login]
+KillUserProcesses=1
+KillExcludeUsers=root
+IdleAction=lock
+IdleActionSec=15min
+RemoveIPC=yes
@@ -0,0 +1,9 @@
+# {{ ansible_managed }}
+
+[Resolve]
+DNS={{ dns }}
+FallbackDNS={{ fallback_dns }}
+DNSSEC={{ dnssec }}
+{% if ansible_local.systemd.version|int >= 239 %}
+DNSOverTLS={{ dns_over_tls }}
+{% endif %}
@@ -0,0 +1,9 @@
+# {{ ansible_managed }}
+
+[Manager]
+DumpCore=no
+CrashShell=no
+CtrlAltDelBurstAction=none
+DefaultLimitCORE=0
+DefaultLimitNOFILE={{ limit_nofile_hard }}
+DefaultLimitNPROC={{ limit_nproc_hard }}
@@ -0,0 +1,8 @@
+# {{ ansible_managed }}
+
+[Time]
+NTP={{ ntp }}
+FallbackNTP={{ fallback_ntp }}
+{% if ansible_local.systemd.version|int >= 236 %}
+RootDistanceMaxSec=1
+{% endif %}
@@ -0,0 +1,17 @@
+[Unit]
+Description=Temporary Directory /tmp
+Documentation=man:file-hierarchy(7)
+ConditionPathIsSymbolicLink=!/tmp
+DefaultDependencies=no
+Conflicts=umount.target
+Before=local-fs.target umount.target
+After=swap.target
+
+[Mount]
+What=tmpfs
+Where=/tmp
+Type=tmpfs
+Options=mode=1777,strictatime,nodev,noexec,nosuid
+
+[Install]
+WantedBy=multi-user.target
@@ -0,0 +1,6 @@
+# {{ ansible_managed }}
+
+[Manager]
+DefaultLimitCORE=0
+DefaultLimitNOFILE={{ limit_nofile_hard }}
+DefaultLimitNPROC={{ limit_nproc_hard }}