aboutsummaryrefslogtreecommitdiff
path: root/vars/hostclass/idm_server
diff options
context:
space:
mode:
Diffstat (limited to 'vars/hostclass/idm_server')
-rw-r--r--vars/hostclass/idm_server9
1 files changed, 9 insertions, 0 deletions
diff --git a/vars/hostclass/idm_server b/vars/hostclass/idm_server
new file mode 100644
index 0000000..eec6d1c
--- /dev/null
+++ b/vars/hostclass/idm_server
@@ -0,0 +1,9 @@
+#!/bin/sh
+
+allowed_tcp_ports='ssh ldap ldaps domain kerberos-sec kerberos-adm'
+allowed_udp_ports='domain kerberos-sec kpasswd'
+
+ssh_authorized_keys_user=nobody
+
+unbound_blocklists="\
+https://raw.githubusercontent.com/hagezi/dns-blocklists/main/unbound/pro.plus.blacklist.conf"