From 652734b570bc728f02df99a7c570b119ddc5c4be Mon Sep 17 00:00:00 2001 From: Ahmed Abdelhalim Date: Mon, 11 Aug 2025 00:32:07 +0200 Subject: Refactor: move password policy to its own role --- roles/password_policy/defaults/main.yml | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 roles/password_policy/defaults/main.yml (limited to 'roles/password_policy/defaults') diff --git a/roles/password_policy/defaults/main.yml b/roles/password_policy/defaults/main.yml new file mode 100644 index 00000000..1c5f7254 --- /dev/null +++ b/roles/password_policy/defaults/main.yml @@ -0,0 +1,14 @@ +--- +# Password policy +# https://linux.die.net/man/8/pam_pwquality +password_policy_enabled: true +password_policy_difok: 0 +password_policy_minlen: 8 +password_policy_dcredit: 0 +password_policy_ucredit: 0 +password_policy_ocredit: 0 +password_policy_lcredit: 0 +password_policy_minclass: 0 +password_policy_maxrepeat: 0 +password_policy_maxclassrepeat: 0 +password_policy_gecoscheck: 0 -- cgit v1.2.3