diff --git a/ubuntu-deb-general/defaults/main.yml b/ubuntu-deb-general/defaults/main.yml index a0c6abe..a5659ad 100644 --- a/ubuntu-deb-general/defaults/main.yml +++ b/ubuntu-deb-general/defaults/main.yml @@ -132,10 +132,14 @@ additional_ca_dest_dir: /usr/local/share/ca-certificates # - { file: "local-ca.crt", dest_file: '{{ additional_ca_dest_dir }}/infn-ca.crt' } # -default_security_limits: +root_security_limits: - { domain: 'root', l_item: 'nofile', type: 'soft', value: '8192' } - { domain: 'root', l_item: 'nofile', type: 'hard', value: '8192' } +users_security_limits: [] + +default_security_limits: '{{ root_security_limits }}' + # default_rsyslog_custom_rules: # - ':msg, contains, "icmp6_send: no reply to icmp error" ~' # - ':msg, contains, "[PYTHON] Can\'t call the metric handler function for" ~' diff --git a/ubuntu-deb-general/meta/main.yml b/ubuntu-deb-general/meta/main.yml index efc43e1..8bde601 100644 --- a/ubuntu-deb-general/meta/main.yml +++ b/ubuntu-deb-general/meta/main.yml @@ -5,6 +5,7 @@ dependencies: - role: '../../library/roles/deb-set-hostname' - role: '../../library/roles/deb-set-locale' - role: '../../library/roles/timezone' + - role: '../../library/roles/motd' - role: '../../library/roles/linux-kernel-sysctl' - role: '../../library/roles/sshd_config' - role: '../../library/roles/fail2ban'