summaryrefslogtreecommitdiffstats
path: root/roles/password_policy/defaults
diff options
context:
space:
mode:
authorAhmed Abdelhalim <[email protected]>2025-08-11 00:32:07 +0200
committerAhmed Abdelhalim <[email protected]>2025-08-11 00:32:07 +0200
commit652734b570bc728f02df99a7c570b119ddc5c4be (patch)
tree356460fb60f2d8d13e6e1a8b1a7aaba9d04aa501 /roles/password_policy/defaults
parent2d45a9b60a008581672af7a901258f488d3cde16 (diff)
Refactor: move password policy to its own role
Diffstat (limited to 'roles/password_policy/defaults')
-rw-r--r--roles/password_policy/defaults/main.yml14
1 files changed, 14 insertions, 0 deletions
diff --git a/roles/password_policy/defaults/main.yml b/roles/password_policy/defaults/main.yml
new file mode 100644
index 00000000..1c5f7254
--- /dev/null
+++ b/roles/password_policy/defaults/main.yml
@@ -0,0 +1,14 @@
+---
+# Password policy
+# https://linux.die.net/man/8/pam_pwquality
+password_policy_enabled: true
+password_policy_difok: 0
+password_policy_minlen: 8
+password_policy_dcredit: 0
+password_policy_ucredit: 0
+password_policy_ocredit: 0
+password_policy_lcredit: 0
+password_policy_minclass: 0
+password_policy_maxrepeat: 0
+password_policy_maxclassrepeat: 0
+password_policy_gecoscheck: 0