ansible-freebsd-jailhost-tools/defaults/main.yml

---
zroot_name: tank/root
template_dataset_name: >-
  {{ zroot_name }}/templatejail
template_dataset_root_name: >-
  {{ template_dataset_name }}/root

jail_path: /usr/jails
template_jail_path: >-
  {{ jail_path|quote }}/template
template_jail_root_path: >-
  {{ template_jail_path }}/root

latest_snapshot: >-
  {{
    lookup(
      'pipe', '/usr/sbin/chroot "{{ template_jail_root_path|quote }}" /bin/freebsd-version -u'
    )
  }}

dynamic_jails_dataset_name: >-
  {{ zroot_name }}/dynamic-jails-root
dynamic_jails_path: >-
  {{ jail_path }}/dynamic-jails
pf_include_macros_path: '{{ dynamic_jails_path }}/configs/pf-include-macros.conf'
pf_include_translation_path: '{{ dynamic_jails_path }}/configs/pf-include-translation.conf'
pf_include_filtering_path: '{{ dynamic_jails_path }}/configs/pf-include-filtering.conf'

valid_jail_ips: "{{ lookup('pipe', 'seq -f 127.0.0.%g 2 254').split() }}"
used_jail_ips: >-
  {{ lookup('pipe', 'jls -q ip4.addr').split() }}
available_jail_ip: >-
  {{ valid_jail_ips|difference(used_jail_ips)|first }}
running_jail_ids: >-
  {{ lookup('pipe', '/usr/sbin/jls -q name').split() }}

ansible_roles_path: /usr/local/etc/ansible/roles

default_timezone: Europe/Budapest

jail_default_config_opts:
  devfs_ruleset: 4
  enforce_statfs: 2
  host: new
  ip4: disable
  ip6: disable
  securelevel: -1
  sysvmsg: disable
  sysvsem: disable
  sysvshm: disable
  allow.chflags: false
  allow.mount: false
  allow.mount.devfs: false
  allow.mount.fdescfs: false
  allow.mount.linprocfs: false
  allow.mount.linsysfs: false
  allow.mount.nullfs: false
  allow.mount.procfs: false
  allow.mount.tmpfs: false
  allow.mount.zfs: false
  allow.quotas: false
  allow.raw_sockets: false
  allow.set_hostname: false
  allow.socket_af: false
  allow.sysvipc: false
  children.max: 0
  exec.clean: true
  host.domainname: ''
  host.hostid: 0
  ip4.saddrsel: ''
  ip6.addr: ''
  ip6.saddrsel: ''
  mount.devfs: true
  exec.start: /bin/sh /etc/rc
  exec.stop: /bin/sh /etc/rc.shutdown


# DONT'T USE JAIL SPECIFIC VARIABLE VARIABLE ASSIGNMENTS HERE !!! ANSIBLE CAN'T RESOLVE THEM
jail_name: MODIFY_ME
jail_prefix: MODIFY-ME-
jail_MODIFY_ME_force_recreate: false
jail_MODIFY_ME_timezone: Europe/Budapest

# Include file places, override in your role config with absolute paths to your tasks
jail_include_noop: '{{ vars["ansible_roles_path"] }}/karolyi.ansible-freebsd-jailhost-tools/tasks/noop.yml'