main.yml

---

import_users:
  - name: "{{ envsetup_mediaimport_user | d() }}"
    passwd: "{{ envsetup_mediaimport_password | d() }}"

import_packages:
  - clamav
  - mysecureshell
  - openssh-server
  - openssl
  - pure-ftpd
  - python3-unidecode
  - ubicast-mediaimport
  # required by ansible tasks
  - python3-openssl

import_pureftpd_config:
  - key: AllowDotFiles
    value: "no"
  - key: CallUploadScript
    value: "yes"
  - key: ChrootEveryone
    value: "yes"
  - key: DontResolve
    value: "yes"
  - key: PAMAuthentication
    value: "yes"
  - key: TLS
    value: "1"

import_virus_scan_on_upload: false

import_ms_api_key: "{{ envsetup_ms_api_key | d() }}"
import_ms_server_name: "{{ envsetup_ms_server_name | d() }}"

import_fail2ban_enabled: "{{ envsetup_fail2ban_enabled | d(true) }}"
import_f2b_jail:
  name: pure-ftpd
  content: |
    [pure-ftpd]
    enabled = {% if import_fail2ban_enabled | bool %}true{% else %}false{% endif %}

import_firewall_enabled: true
import_ferm_rules_filename: import
import_ferm_input_rules:
  - proto:
      - tcp
    dport:
      - 21
      - 22
  - mod: helper
    helper: ftp
import_ferm_output_rules: []
import_ferm_global_settings:

...