infra-v1/applications/roles/authsec.pihole/defaults/main.yml

65 lines
2.6 KiB
YAML

---
# tasks file for pihole
# Generate a secure default password
riv_pihole_admin_password_generated: "{{ lookup('password', '/dev/null length=15 chars=ascii_letters') }}"
riv_pihole_docker_network: "host"
riv_pihole_docker_purge_networks: "yes"
# If you are using tags to assign multiple DNS servers to an IP address,
# you can use this option to set a default, where you do not want to define
# a specific IP address to name mapping.
riv_pihole_dns_default_tag: ""
riv_pihole_show_summary: false
riv_pihole_dhcp_active: "false"
# 1 day lease
riv_pihole_dhcp_leasetime: "24h"
riv_pihole_dhcp_start: "192.168.1.2"
riv_pihole_dhcp_end: "192.168.1.253"
riv_pihole_dhcp_router: "192.168.1.1"
riv_pihole_domain: "example.net"
riv_pihole_interface: "eth0"
riv_pihole_dhcp_ipv6: "false"
riv_pihole_dhcp_rapid_commit: "false"
riv_pihole_dnsmasq_listening: "all"
riv_pihole_query_logging: "true"
riv_pihole_install_web_server: "true"
riv_pihole_install_web_interface: "true"
riv_pihole_lighttpd_enabled: ""
riv_pihole_ipv4_address: "{{ hostvars[inventory_hostname]['ansible_default_ipv4']['address'] | default(ansible_host) }}"
riv_pihole_ipv6_address: ""
riv_pihole_dns_bogus_priv: "false"
riv_pihole_dns_fqdn_required: "false"
riv_pihole_dnssec: "false"
riv_pihole_rev_server_enabled: "false" # previously conditional forwarding (riv_pihole_conditional_forwarding)
riv_pihole_rev_server_cidr: "" # previously conditional forwarding IP (riv_pihole_conditional_forwarding_ip)
riv_pihole_rev_server_domain: "" # previously conditional forwarding domain (riv_pihole_conditional_forwarding_domain)
riv_pihole_rev_server_target: "" # previously conditional forwarding host (riv_pihole_conditional_forwarding_reverse)
riv_pihole_docker_image: "pihole/pihole:latest"
riv_pihole_configuration_base_folder: "/opt/pihole"
riv_pihole_etc_pihole_folder: "{{ riv_pihole_configuration_base_folder }}/pihole"
riv_pihole_etc_dnsmasq_folder: "{{ riv_pihole_configuration_base_folder }}/dnsmasq.d"
# These are the DNS servers for the docker system
# The first one MUST be 127.0.0.1
riv_pihole_sys_dns_server1: "127.0.0.1"
riv_pihole_sys_dns_server2: "8.8.8.8"
# These are the DNS servers that Pi-hole uses to resolve
riv_pihole_dns_server1: "1.1.1.1"
riv_pihole_dns_server2: "8.8.8.8"
riv_pihole_serverip: "{{ hostvars[inventory_hostname]['ansible_default_ipv4']['address'] | default(ansible_host) }}"
riv_pihole_timezone: "Europe/Berlin"
# Photon OS e.g. has the firewall locked by default, if this is enabled
# the necessary ports will be opened
riv_pihole_open_firewall_ports: true
riv_pihole_dns_db_configuration_file: "{{ role_path }}/files/mappings.csv"