diff options
| author | Ahmed Abdelhalim <[email protected]> | 2025-08-11 00:32:07 +0200 |
|---|---|---|
| committer | Ahmed Abdelhalim <[email protected]> | 2025-08-11 00:32:07 +0200 |
| commit | 652734b570bc728f02df99a7c570b119ddc5c4be (patch) | |
| tree | 356460fb60f2d8d13e6e1a8b1a7aaba9d04aa501 /roles/password_policy/README.md | |
| parent | 2d45a9b60a008581672af7a901258f488d3cde16 (diff) | |
Refactor: move password policy to its own role
Diffstat (limited to 'roles/password_policy/README.md')
| -rw-r--r-- | roles/password_policy/README.md | 21 |
1 files changed, 21 insertions, 0 deletions
diff --git a/roles/password_policy/README.md b/roles/password_policy/README.md new file mode 100644 index 00000000..c499dcdc --- /dev/null +++ b/roles/password_policy/README.md @@ -0,0 +1,21 @@ +# Ansible Role: password_policy + +This role configure the machine password quality policy + +## Role Variables + +- `password_policy_enabled` boolean to enable or disable the enforcement of password policy +- `password_policy_difok` the number of differences between new and old password (default 0 - disabled) +- `password_policy_minlen` min password length (default 8) +- `password_policy_dcredit` required digits in password (default 0) +- `password_policy_ucredit` required uppercase chars in password (default 0) +- `password_policy_ocredit` required other chars in password (default 0) +- `password_policy_lcredit` required lowercase chars in password (default 0) +- `password_policy_minclass` required minimum classes in password upper/lower/digit/other (default 0 - disabled) +- `password_policy_maxrepeat` allowed maximum repeats in password (default 0 - disabled) +- `password_policy_maxclassrepeat` maximum allowed consecutive class repeats (default 0 -disabled) +- `password_policy_gecoscheck` (default 0 - disabled) + +## Docs + +- https://linux.die.net/man/8/pam_pwquality |