2018-08-18 16:37:48 +02:00
|
|
|
---
|
|
|
|
|
pve_nodes:
|
|
|
|
|
- node1
|
|
|
|
|
pve_tls_enabled: False
|
|
|
|
|
pve_tls_cert_source: mycert.pem
|
|
|
|
|
pve_tls_key_source: mykey.pem
|
2018-11-01 23:35:53 +01:00
|
|
|
|
2019-06-15 15:27:03 +02:00
|
|
|
pve_pamd_motd_enabled: True
|
2019-08-28 10:36:26 +02:00
|
|
|
|
|
|
|
|
pve_disk_mount: []
|
|
|
|
|
## Example:
|
|
|
|
|
# pve_disk_mount:
|
2019-06-15 17:14:27 +02:00
|
|
|
# - path: /mnt/backup
|
|
|
|
|
# src: /dev/sdX
|
|
|
|
|
# fstype: ext4
|
|
|
|
|
# opts:
|
|
|
|
|
# state: present
|
2019-06-15 15:27:03 +02:00
|
|
|
|
2018-11-14 22:07:57 +01:00
|
|
|
# Configure pam auth
|
2018-11-12 23:29:24 +01:00
|
|
|
pve_auth_pam_is_default: True
|
|
|
|
|
pve_auth_pam_description: Linux PAM standard authentication
|
|
|
|
|
|
|
|
|
|
pve_auth_pam_tfa_oath_enabled: False
|
|
|
|
|
# pve_auth_pam_tfa_oath_timestep: 30
|
|
|
|
|
# pve_auth_pam_tfa_oath_pwlength: 6
|
|
|
|
|
|
|
|
|
|
pve_auth_pam_tfa_yubico_enabled: False
|
|
|
|
|
# pve_auth_pam_tfa_yubico_api_id: 1a2b3c4d5e6f
|
|
|
|
|
# pve_auth_pam_tfa_yubico_api_key: 123456
|
|
|
|
|
# pve_auth_pam_tfa_yubico_url: http://127.0.0.1:8080
|
|
|
|
|
|
|
|
|
|
pve_auth_pve_is_default: False
|
|
|
|
|
pve_auth_pve_description: Linux pve standard authentication
|
|
|
|
|
|
|
|
|
|
pve_auth_pve_tfa_oath_enabled: False
|
|
|
|
|
# pve_auth_pve_tfa_oath_timestep: 30
|
|
|
|
|
# pve_auth_pve_tfa_oath_pwlength: 6
|
|
|
|
|
|
|
|
|
|
pve_auth_pve_tfa_yubico_enabled: False
|
|
|
|
|
# pve_auth_pve_tfa_yubico_api_id: 1a2b3c4d5e6f
|
|
|
|
|
# pve_auth_pve_tfa_yubico_api_key: 123456
|
|
|
|
|
# pve_auth_pve_tfa_yubico_url: http://127.0.0.1:8080
|
|
|
|
|
|
|
|
|
|
# Enable ldap auth against an external server
|
|
|
|
|
pve_auth_ldap_enabled: False
|
|
|
|
|
# pve_auth_ldap_is_default: False
|
|
|
|
|
# pve_auth_ldap_realm: ldap
|
|
|
|
|
# pve_auth_ldap_description: MyLDAP authentication server
|
|
|
|
|
# pve_auth_ldap_base_dn: dc=example,dc=com
|
|
|
|
|
# pve_auth_ldap_user_attr: uid
|
|
|
|
|
# pve_auth_ldap_primary_server: server1.example.com
|
|
|
|
|
# pve_auth_ldap_secondary_server: server2.example.com (defaults to not set)
|
|
|
|
|
# pve_auth_ldap_bind_dn: uid=proxy-user,cn=users,dc=example,dc=com (defaults to not set)
|
|
|
|
|
# pve_auth_ldap_bind_password: my_secret (defaults to not set)
|
|
|
|
|
# pve_auth_ldap_port: 389
|
|
|
|
|
# pve_auth_ldap_tls_enabled: False
|
|
|
|
|
|
|
|
|
|
pve_auth_ldap_tfa_oath_enabled: False
|
2019-06-16 16:24:29 +02:00
|
|
|
pve_auth_ldap_tfa_oath_timestep: 30
|
|
|
|
|
pve_auth_ldap_tfa_oath_pwlength: 6
|
2018-11-12 23:29:24 +01:00
|
|
|
|
|
|
|
|
pve_auth_ldap_tfa_yubico_enabled: False
|
|
|
|
|
# pve_auth_ldap_tfa_yubico_api_id: 1a2b3c4d5e6f
|
|
|
|
|
# pve_auth_ldap_tfa_yubico_api_key: 123456
|
|
|
|
|
# pve_auth_ldap_tfa_yubico_url: http://127.0.0.1:8080
|
