81 lines
3.2 KiB
YAML
81 lines
3.2 KiB
YAML
# Secret handling:
|
|
# - put the real password into env var before running Ansible:
|
|
# export AW_WINRM_PASSWORD='...'
|
|
ansible_password: "{{ lookup('env', 'AW_WINRM_PASSWORD') }}"
|
|
|
|
aw_windows_repo_root: "{{ playbook_dir | dirname }}"
|
|
aw_windows_deploy_root: "C:\\Program Files\\AWatch-rus"
|
|
aw_windows_server_scheme: "http"
|
|
# Leave empty to derive from the first host in [aw_server] inventory.
|
|
aw_windows_server_host: ""
|
|
aw_windows_server_port: 5600
|
|
|
|
aw_windows_package_version: "v0.13.2"
|
|
aw_windows_package_url: "https://github.com/ActivityWatch/activitywatch/releases/download/v0.13.2/activitywatch-v0.13.2-windows-x86_64.zip"
|
|
aw_windows_package_zip_path: ""
|
|
|
|
aw_windows_domain: "SHARKON2025"
|
|
aw_windows_users:
|
|
- Администратор
|
|
- user1
|
|
- user2
|
|
- user3
|
|
- user4
|
|
- user5
|
|
aw_windows_extra_users: []
|
|
|
|
aw_windows_install_root: "C:\\Program Files\\AWatch-rus\\bin"
|
|
aw_windows_state_root: "C:\\ProgramData\\AWatch-rus"
|
|
aw_windows_hostname_override: ""
|
|
aw_windows_policy_mode: "server"
|
|
aw_windows_policy_refresh_seconds: 300
|
|
aw_windows_policy_engine_enabled: true
|
|
aw_windows_policy_engine_host: "{{ aw_windows_server_host }}"
|
|
aw_windows_policy_engine_port: 5601
|
|
aw_windows_policy_engine_scheme: "http"
|
|
aw_windows_hayabusa_auto_upload_enabled: true
|
|
aw_windows_hayabusa_auto_upload_interval_hours: 6
|
|
aw_windows_hayabusa_auto_upload_hours_back: 6
|
|
aw_windows_hayabusa_auto_upload_mode: "incident"
|
|
aw_windows_hayabusa_auto_upload_task_name: "ActivityWatch Hayabusa Upload"
|
|
|
|
aw_windows_afk_enabled: true
|
|
aw_windows_window_enabled: true
|
|
aw_windows_file_ops_enabled: true
|
|
aw_windows_email_collector_enabled: true
|
|
aw_windows_email_collector_mode: "both"
|
|
aw_windows_local_agent_logs_enabled: false
|
|
aw_windows_incident_capture_enabled: true
|
|
aw_windows_incident_screenshot_enabled: true
|
|
aw_windows_incident_artifacts_root: "{{ aw_windows_state_root }}\\incident-artifacts"
|
|
aw_windows_forensics_root: "{{ aw_windows_state_root }}\\forensics\\evtx-exports"
|
|
aw_windows_evtx_retention_days: 14
|
|
aw_windows_evtx_channels:
|
|
- Security
|
|
- System
|
|
- Application
|
|
- Microsoft-Windows-PowerShell/Operational
|
|
- Microsoft-Windows-TerminalServices-LocalSessionManager/Operational
|
|
- Microsoft-Windows-TerminalServices-RemoteConnectionManager/Operational
|
|
aw_windows_logon_marker_enabled: true
|
|
aw_windows_skip_hardening: false
|
|
|
|
aw_windows_rules_path: "{{ aw_windows_deploy_root }}\\windows\\web-category-rules.example.json"
|
|
aw_windows_policy_path: "{{ aw_windows_deploy_root }}\\windows\\dlp-policy.example.json"
|
|
|
|
aw_windows_validation_remote_path: "{{ aw_windows_state_root }}\\aw_validate_ansible.json"
|
|
aw_windows_validation_local_dir: "/tmp/aw-rus-validation-{{ lookup('env','USER') | default('ansible', true) }}"
|
|
aw_windows_fail_on_validation_error: true
|
|
|
|
aw_windows_migration_enabled: false
|
|
aw_windows_legacy_install_root: "C:\\Program Files\\ActivityWatch-Phase2"
|
|
aw_windows_legacy_state_root: "C:\\ProgramData\\ActivityWatch-Phase2"
|
|
aw_windows_migration_report_remote_path: "{{ aw_windows_state_root }}\\aw_migration_ansible.json"
|
|
|
|
aw_windows_api_smoke_check_enabled: true
|
|
aw_windows_api_smoke_check_bucket: ""
|
|
aw_windows_api_smoke_check_limit: 10
|
|
|
|
# Integration test settings (backward compatible - defaults to disabled)
|
|
aw_windows_integration_test_enabled: false
|