43 lines
2.2 KiB
YAML
43 lines
2.2 KiB
YAML
# Secret handling:
|
|
# - put the real SSH password into env var before running Ansible:
|
|
# export AW_SSH_PASSWORD='...'
|
|
ansible_password: "{{ lookup('env', 'AW_SSH_PASSWORD') }}"
|
|
|
|
ansible_become: true
|
|
ansible_become_method: sudo
|
|
# If sudo password differs, set AW_SUDO_PASSWORD. Otherwise it will reuse AW_SSH_PASSWORD.
|
|
ansible_become_password: "{{ lookup('env', 'AW_SUDO_PASSWORD') | default(lookup('env', 'AW_SSH_PASSWORD'), true) }}"
|
|
|
|
# Hayabusa IOC refresh settings (backward compatible - defaults to disabled)
|
|
aw_hayabusa_ioc_refresh_enabled: false
|
|
aw_hayabusa_rules_root: "/mnt/usb_hdd1/Projects/hayabusa/rules"
|
|
aw_hayabusa_ioc_output_dir: "{{ aw_server_data_dir }}/dlp-ioc"
|
|
aw_hayabusa_runner_enabled: true
|
|
aw_hayabusa_version: "v3.9.0"
|
|
aw_hayabusa_asset_name: "hayabusa-3.9.0-lin-x64-gnu.zip"
|
|
aw_hayabusa_binary_name: "hayabusa-3.9.0-lin-x64-gnu"
|
|
aw_hayabusa_download_url: "https://github.com/Yamato-Security/hayabusa/releases/download/v3.9.0/hayabusa-3.9.0-lin-x64-gnu.zip"
|
|
aw_hayabusa_root: "/opt/hayabusa"
|
|
aw_hayabusa_release_dir: "{{ aw_hayabusa_root }}/releases/{{ aw_hayabusa_version }}"
|
|
aw_hayabusa_current_link: "{{ aw_hayabusa_root }}/current"
|
|
aw_hayabusa_archive_path: "/tmp/{{ aw_hayabusa_asset_name }}"
|
|
aw_hayabusa_reports_dir: "{{ aw_hayabusa_root }}/reports"
|
|
aw_hayabusa_state_dir: "{{ aw_hayabusa_root }}/state"
|
|
aw_hayabusa_inbox_dir: "{{ aw_hayabusa_root }}/inbox"
|
|
aw_hayabusa_archive_dir: "{{ aw_hayabusa_root }}/archive"
|
|
aw_hayabusa_incoming_dir: "{{ aw_hayabusa_inbox_dir }}/incoming"
|
|
aw_hayabusa_staging_dir: "{{ aw_hayabusa_inbox_dir }}/staging"
|
|
aw_hayabusa_archive_packages_dir: "{{ aw_hayabusa_archive_dir }}/packages"
|
|
aw_hayabusa_archive_extracted_dir: "{{ aw_hayabusa_archive_dir }}/extracted"
|
|
aw_hayabusa_logs_dir: "{{ aw_hayabusa_state_dir }}/logs"
|
|
aw_server_backup_retention_days: 7
|
|
aw_server_backup_keep_last_db: 2
|
|
aw_server_backup_keep_last_json: 2
|
|
aw_server_journal_system_max_use: "100M"
|
|
aw_server_journal_runtime_max_use: "50M"
|
|
aw_server_journal_system_keep_free: "500M"
|
|
aw_dlp_policy_engine_enabled: true
|
|
aw_dlp_policy_engine_bind_host: "0.0.0.0"
|
|
aw_dlp_policy_engine_port: 5601
|
|
aw_dlp_policy_engine_db_path: "{{ aw_server_data_dir }}/dlp-policy-engine.sqlite"
|