Ansible Role: crypto_policy

This Ansible Role installs and sets up crypto_policy on RHEL/CentOS, Fedora, and Debian/Ubuntu systems.

Requirements

No requirements.

Role Variables

Here are the available variables with their default values (see defaults/main.yml):

• enable_crypto_policy: "{{ _enable_crypto_policy }}"

  If set to true/yes, it will install and configure the crypto policy on the system. The default settings will only apply the crypto policy on RedHat/CentOS/Fedora.

• crypto_policy: DEFAULT

  This sets the crypto policy. You can see available policies during the role execution. The variable system_crypto_available_policies lists the available policies.

• crypto_policies_reload: no

  This specifies whether to run the command to reload the crypto policy after an update.

• crypto_reboot_after_update: yes

  Determines if the target device should reboot after the policy is updated.

The variables below do not need changes for most systems (see vars/main.yml):

• crypto_policy_packages:

  These are the packages needed to install crypto_policy.

Dependencies

No dependencies.

Example Playbook

- hosts: servers
  roles:
     - { role: guidugli.crypto_policy }

License

MIT / BSD

Author Information

This role was created in 2020 by Carlos Guidugli.