Put sysctl to common

2018-07-13 13:33:01 +02:00
parent 97bc91894f
commit 44bfc1367f
5 changed files with 25 additions and 39 deletions
--- a/group_vars/fet_hosts
+++ b/group_vars/fet_hosts
@@ -28,3 +28,27 @@ common_basic_packages:
  - gdisk
  - cryptsetup
  - nvme-cli
+
+common_sysctl: True
+common_sysctls:
+#- key: net.ipv6.conf.all.disable_ipv6
+#  val: 1
+- key: net.ipv4.conf.default.rp_filter
+  val: 1
+- key: net.ipv4.conf.all.rp_filter
+  val: 1
+
+- key: net.ipv4.conf.all.accept_redirects
+  val: 0
+- key: net.ipv4.conf.default.accept_redirects
+  val: 0
+- key: net.ipv6.conf.all.accept_redirects
+  val: 0
+- key: net.ipv6.conf.default.accept_redirects
+  val: 0
+
+- key: net.ipv4.conf.all.send_redirects
+  val: 0
+
+- key: net.ipv4.conf.default.accept_source_route
+  val: 0