# -*- mode: yaml; indent-tabs-mode: nil; tab-width: 2; coding: utf-8-unix -*-

# man  wget: Using --ca-directory is more efficient than --ca-certificate when many certificates are installed
# --ca-certificate={{PLAY_CA_CERT}} --ca-directory=/etc/ssl/certs/
BASE_WGET_ARGS: "--no-hsts --tries=1 --ca-certificate={{PLAY_CA_CERT|default('/usr/local/etc/ssl/cacert-testforge.pem')}}"

BASE_TIME_DAEMON: ntp

#PROXY_INSTALL_INSECURE

# does have export
base_etc_env_d: "profile.d"
# im confused between default and conf.d
ETC_CONF_D: "default"
# definitely need export in profile.d
etc_env_export: "export "

base_sudo_group: "sudo"

base_system_users: ['{{BASE_USER_NAME}}']

base_gpg_keys_system: []