iiab/roles/network/defaults/main.yml

# Defaults for network detection
wireless_lan_present: False
strict_networking: False
iiab_demo_mode: False
gui_static_wan: False
wan_cidr:

# Set defaults for discovery process as strings
wifi1: "not found-1"
wifi2: "not found-2"
ap_device: "none"
device_gw: "none"
device_gw2: ""

iiab_wan_iface: "none"
iiab_lan_iface: "none"
discovered_lan_iface: "none"
discovered_wired_iface: "none"
discovered_wireless_iface: "none"

# Red Hat
#iiab_wired_lan_iface: "none"
#iiab_wireless_lan_iface: "none"
has_WAN: False
has_ifcfg_gw: "none"
has_wifi_gw: "none"

# Debian
dhcpcd_result: ""
wan_in_interfaces: False
network_manager_active: False
systemd_networkd_active: False

# The values here are default local variables.
gui_wan_iface: "unset"
gui_static_wan_ip: "unset"
gui_desired_network_role: Gateway
wondershaper_dspeed: "4096"
wondershaper_upspeed: "1024"

# Wi-Fi
host_ssid: IIAB
hostapd_wait: 1
host_wifi_mode: g
host_channel: 6
host_wireless_n: False
# Below moved to /etc/iiab/local_vars.yml: (so implementer sets this)
#host_country_code: US
hostapd_secure: True
hostapd_password: "iiab2017"
driver_name: nl80211
hostapd_enabled: True
# Above is forcibly set to False (in roles/network/tasks/main.yml) if IIAB is
# being WiFi-installed (run "iiab-hotspot-on" AFTER ./iiab-install completes
# and content is downloaded, to enable the internal WiFi Access Point / AP!)
reboot_to_AP: False
# For those installing IIAB over WiFi: "reboot_to_AP: True" overrides the above
# detection of WiFi-as-gateway, forcing "hostapd_enabled: True" regardless.

network_config_dir: /etc/network/interfaces.d
#iiab_network_mode: "Gateway"
dns_jail_enabled: False
services_externally_visible: False

# DNS / name resolution
dhcpd_install: True
dhcpd_enabled: False
#dhcp_service: ????                 # Set in individual OS's /opt/iiab/iiab/vars/<OS>.yml for use in roles/network/tasks/dhcpd.yml
#dhcp_service2: "dhcpd disabled"    # Moved to roles/network/tasks/computed_services.yml as community transitions from named/BIND to dnsmasq (PR #1202)
named_install: True
named_enabled: False
dnsmasq_enabled: True
dnsmasq_install: True

# Python-based Captive Portal, that @m-anish & @jvonau experimented with in
# July 2018 (https://github.com/iiab/iiab/pull/870) and that @georgejhunt
# extensively refined in Sept 2018 (https://github.com/iiab/iiab/pull/1179)
captive_portal_install: True
captive_portal_enabled: True
captive_portal_port: "9090"
py_captive_portal_port: "9090"
py_captive_portal_username: "Admin"
py_captive_portal_password: "changeme"
# In a pinch, disable it by running: systemctl disable captive-portal

# For @tim-moody's Nodogsplash approach to Captive Portal?
# Highly experimental as of June 2018: https://github.com/iiab/iiab/issues/608
# captive_portal_install: False
# captive_portal_enabled: False
move network detection to network -- adjused for hostname 2017-09-23 07:03:58 +00:00			`# Defaults for network detection`
			`wireless_lan_present: False`
			`strict_networking: False`
			`iiab_demo_mode: False`
			`gui_static_wan: False`
get rid of the stall with 'dhcp' 2018-05-13 04:10:41 +00:00			`wan_cidr:`
move network detection to network -- adjused for hostname 2017-09-23 07:03:58 +00:00
			`# Set defaults for discovery process as strings`
			`wifi1: "not found-1"`
			`wifi2: "not found-2"`
running - double check after rebase 2017-11-01 12:45:55 +00:00			`ap_device: "none"`
			`device_gw: "none"`
			`device_gw2: ""`

			`iiab_wan_iface: "none"`
			`iiab_lan_iface: "none"`
wifi really is turned off by rfkill until wpa_supplicant has country= 2018-03-29 20:39:20 +00:00			`discovered_lan_iface: "none"`
running - double check after rebase 2017-11-01 12:45:55 +00:00			`discovered_wired_iface: "none"`
move network detection to network -- adjused for hostname 2017-09-23 07:03:58 +00:00			`discovered_wireless_iface: "none"`
running - double check after rebase 2017-11-01 12:45:55 +00:00
Understandability/Context for outsiders 2018-07-12 17:36:09 +00:00			`# Red Hat`
fix detection 2018-05-02 17:38:24 +00:00			`#iiab_wired_lan_iface: "none"`
			`#iiab_wireless_lan_iface: "none"`
move network detection to network -- adjused for hostname 2017-09-23 07:03:58 +00:00			`has_WAN: False`
			`has_ifcfg_gw: "none"`
			`has_wifi_gw: "none"`
running - double check after rebase 2017-11-01 12:45:55 +00:00
Understandability/Context for outsiders 2018-07-12 17:36:09 +00:00			`# Debian`
move network detection to network -- adjused for hostname 2017-09-23 07:03:58 +00:00			`dhcpcd_result: ""`
			`wan_in_interfaces: False`
use results to set_facts 2017-11-23 06:24:44 +00:00			`network_manager_active: False`
			`systemd_networkd_active: False`
move network detection to network -- adjused for hostname 2017-09-23 07:03:58 +00:00
initial checkin -- May 27, 2017 2017-05-27 18:09:50 +00:00			`# The values here are default local variables.`
			`gui_wan_iface: "unset"`
			`gui_static_wan_ip: "unset"`
			`gui_desired_network_role: Gateway`
			`wondershaper_dspeed: "4096"`
			`wondershaper_upspeed: "1024"`
move network detection to network -- adjused for hostname 2017-09-23 07:03:58 +00:00
Understandability/Context for outsiders 2018-07-12 17:36:09 +00:00			`# Wi-Fi`
typo eth0 (#251) correct service name lets shut-up systemd keep wifi variables with networking - remove unused variable 2017-09-18 15:19:46 +00:00			`host_ssid: IIAB`
reduce hostapd wait time 2017-10-16 01:34:37 +00:00			`hostapd_wait: 1`
initial checkin -- May 27, 2017 2017-05-27 18:09:50 +00:00			`host_wifi_mode: g`
			`host_channel: 6`
			`host_wireless_n: False`
Update main.yml 2018-07-20 02:09:15 +00:00			`# Below moved to /etc/iiab/local_vars.yml: (so implementer sets this)`
move "host_country_code: US" from roles/network/defaults to local_vars.yml 2018-05-10 16:12:28 +00:00			`#host_country_code: US`
initial checkin -- May 27, 2017 2017-05-27 18:09:50 +00:00			`hostapd_secure: True`
Test (#20) * change apache_data to apache_user in all * no libapach2 in centos. just php. no php-magick in centos * remove redundant vars entries * do not create apache user * missed one pound sign * soft code all references to apache_user * centos requires older setuptools * revert ansible_lsb.id in xsce.yml * try getting recent pip * move pip download to 2prep so that kalite success is not dependent on iiab coming first * still need to replace setuptools in kalite * add curl -- needed in debian * massivly substitue iiab for xsce, and rename files * completed runansible * centos fixes,install pip * appliance means no iptables rules * change to earlier version of setuptools for centos * delete file duplicate, hopefully unnecessary. generate the offline docs * wiki docs errors * create the admin group -- deleted earlier * use the --yes option with pip uninstall * base of repo moved from schoolserver to iiab, unleashkids.org->iiab.io * network detection broken due to tupo 2017-06-09 23:25:56 +00:00			`hostapd_password: "iiab2017"`
initial checkin -- May 27, 2017 2017-05-27 18:09:50 +00:00			`driver_name: nl80211`
manually_toggle_AP: false -> hostapd_enabled: True 2018-01-01 15:48:24 +00:00			`hostapd_enabled: True`
			`# Above is forcibly set to False (in roles/network/tasks/main.yml) if IIAB is`
			`# being WiFi-installed (run "iiab-hotspot-on" AFTER ./iiab-install completes`
			`# and content is downloaded, to enable the internal WiFi Access Point / AP!)`
			`reboot_to_AP: False`
			`# For those installing IIAB over WiFi: "reboot_to_AP: True" overrides the above`
Explain hostapd_enabled: & reboot_to_AP: 2018-01-01 16:30:02 +00:00			`# detection of WiFi-as-gateway, forcing "hostapd_enabled: True" regardless.`
move network detection to network -- adjused for hostname 2017-09-23 07:03:58 +00:00
initial checkin -- May 27, 2017 2017-05-27 18:09:50 +00:00			`network_config_dir: /etc/network/interfaces.d`
adjust for 'is defined' 2017-11-05 00:57:49 +00:00			`#iiab_network_mode: "Gateway"`
initial checkin -- May 27, 2017 2017-05-27 18:09:50 +00:00			`dns_jail_enabled: False`
			`services_externally_visible: False`
port dnsmasq over from nginx-rebase-eth0 - rebased edits 2017-09-13 11:07:25 +00:00
Update main.yml 2018-10-08 21:20:00 +00:00			`# DNS / name resolution`
port dnsmasq over from nginx-rebase-eth0 - rebased edits 2017-09-13 11:07:25 +00:00			`dhcpd_install: True`
Update main.yml 2018-10-09 20:40:54 +00:00			`dhcpd_enabled: False`
			`#dhcp_service: ???? # Set in individual OS's /opt/iiab/iiab/vars/<OS>.yml for use in roles/network/tasks/dhcpd.yml`
			`#dhcp_service2: "dhcpd disabled" # Moved to roles/network/tasks/computed_services.yml as community transitions from named/BIND to dnsmasq (PR #1202)`
port dnsmasq over from nginx-rebase-eth0 - rebased edits 2017-09-13 11:07:25 +00:00			`named_install: True`
Update main.yml 2018-10-08 19:45:35 +00:00			`named_enabled: False`
			`dnsmasq_enabled: True`
			`dnsmasq_install: True`
Initial working copy of the captive portal 2018-07-04 12:42:10 +00:00
Update main.yml 2018-10-08 19:45:35 +00:00			`# Python-based Captive Portal, that @m-anish & @jvonau experimented with in`
			`# July 2018 (https://github.com/iiab/iiab/pull/870) and that @georgejhunt`
			`# extensively refined in Sept 2018 (https://github.com/iiab/iiab/pull/1179)`
Cap2 (#1300) * move captive portal to its own role * runrole still not working * make apache name consistent, define py_captive_portal_port * record android fixes * some progress -- windows8.1 works but detectportal.firefox active for both mac and windows * works all platforms * one captive_portal_install not changed to py_captive... * port into defaults * windows 7,8,10,mac,ios,android 5,7 * add # to dnsmasq.d/captive * guess what android 8 might need * move captive portal to its own role * runrole still not working * make apache name consistent, define py_captive_portal_port * record android fixes * some progress -- windows8.1 works but detectportal.firefox active for both mac and windows * works all platforms * one captive_portal_install not changed to py_captive... * port into defaults * windows 7,8,10,mac,ios,android 5,7 * add # to dnsmasq.d/captive * guess what android 8 might need * restart apache2 and dnsmasq in role * do not hard code apache name * cut out disfunctional experiments * variable py_captive_portal_port misspelled * add wildcard serveralias to box.lan vhost to fix default * add in STDOUT to log * remove the py_ * add in msn to urls to capture * missed a few py_ 2018-11-18 04:09:40 +00:00			`captive_portal_install: True`
			`captive_portal_enabled: True`
			`captive_portal_port: "9090"`
use py_ for new captive_portal variables 2018-07-05 17:24:20 +00:00			`py_captive_portal_port: "9090"`
			`py_captive_portal_username: "Admin"`
			`py_captive_portal_password: "changeme"`
Cap2 (#1300) * move captive portal to its own role * runrole still not working * make apache name consistent, define py_captive_portal_port * record android fixes * some progress -- windows8.1 works but detectportal.firefox active for both mac and windows * works all platforms * one captive_portal_install not changed to py_captive... * port into defaults * windows 7,8,10,mac,ios,android 5,7 * add # to dnsmasq.d/captive * guess what android 8 might need * move captive portal to its own role * runrole still not working * make apache name consistent, define py_captive_portal_port * record android fixes * some progress -- windows8.1 works but detectportal.firefox active for both mac and windows * works all platforms * one captive_portal_install not changed to py_captive... * port into defaults * windows 7,8,10,mac,ios,android 5,7 * add # to dnsmasq.d/captive * guess what android 8 might need * restart apache2 and dnsmasq in role * do not hard code apache name * cut out disfunctional experiments * variable py_captive_portal_port misspelled * add wildcard serveralias to box.lan vhost to fix default * add in STDOUT to log * remove the py_ * add in msn to urls to capture * missed a few py_ 2018-11-18 04:09:40 +00:00			`# In a pinch, disable it by running: systemctl disable captive-portal`
Update main.yml 2018-10-08 21:20:00 +00:00
			`# For @tim-moody's Nodogsplash approach to Captive Portal?`
			`# Highly experimental as of June 2018: https://github.com/iiab/iiab/issues/608`
			`# captive_portal_install: False`
			`# captive_portal_enabled: False`