From 652734b570bc728f02df99a7c570b119ddc5c4be Mon Sep 17 00:00:00 2001 From: Ahmed Abdelhalim Date: Mon, 11 Aug 2025 00:32:07 +0200 Subject: Refactor: move password policy to its own role --- roles/settings/README.md | 23 ----------------------- 1 file changed, 23 deletions(-) delete mode 100644 roles/settings/README.md (limited to 'roles/settings/README.md') diff --git a/roles/settings/README.md b/roles/settings/README.md deleted file mode 100644 index 9f6c7bb9..00000000 --- a/roles/settings/README.md +++ /dev/null @@ -1,23 +0,0 @@ -# Ansible Role: settings - -This role configure the machine settings (locales/timezone/password policy/etc.) - -## Role Variables - -- `settings_timezone` the timezone default `CET` - -- `settings_pw_policy_enabled` boolean to enable or disable the enforcement of password policy -- `settings_pw_policy_difok` the number of differences between new and old password (default 0 - disabled) -- `settings_pw_policy_minlen` min password length (default 8) -- `settings_pw_policy_dcredit` required digits in password (default 0) -- `settings_pw_policy_ucredit` required uppercase chars in password (default 0) -- `settings_pw_policy_ocredit` required other chars in password (default 0) -- `settings_pw_policy_lcredit` required lowercase chars in password (default 0) -- `settings_pw_policy_minclass` required minimum classes in password upper/lower/digit/other (default 0 - disabled) -- `settings_pw_policy_maxrepeat` allowed maximum repeats in password (default 0 - disabled) -- `settings_pw_policy_maxclassrepeat` maximum allowed consecutive class repeats (default 0 -disabled) -- `settings_pw_policy_gecoscheck` (default 0 - disabled) - -## Docs - -- https://linux.die.net/man/8/pam_pwquality -- cgit v1.2.3