Files
pxe-server/site-vars.example.yml
cproudlock 7572692b84 Docs for share passwords and pxe_admin_password; Upload-Image.ps1 back to CRLF
KB: Part 4 step 5 (Tools > Share accounts), the Upload-Image password
prompt, the new site-vars rows and example, share sign-in without the
shipped password, and that a re-run keeps the webapp's share passwords.
site-vars examples and SITE-CUSTOMIZATION.md list the new keys.
Upload-Image.ps1 lost its CRLF line endings in fa79f76; restored.
2026-10-17 12:31:29 -04:00

38 lines
1.8 KiB
YAML

# Copy to site-vars.yml in this folder (C:\pxe-usb) and keep only the lines you need.
# Build-PxeUsb.cmd puts site-vars.yml on the stick. Full list of settings:
# playbook\site-vars.example.yml
# Name on Blancco erasure reports and the monthly evidence packs.
# Not set: "Unnamed site". Letters, digits, spaces and . , - ( ) & / only.
site_name: "Example Site"
# Time zone of the server clock and the web interface (default
# America/New_York), e.g. America/Chicago, America/Los_Angeles.
site_timezone: "America/New_York"
# Who may reach the web interface (9009) and SSH from the GE network.
# Not set = all of GE (the setup warns). To restrict it, remove the #
# and put your admin desks' subnet(s), e.g. ["10.12.34.0/24"]:
# corp_admin_cidrs: ["<admin subnet>/24"]
# Password of the server's own login, pxe (console, SSH, sudo). Required:
# the install stops while the server still has the shipped password "pxe".
pxe_admin_password: "<a long site password>"
# Passwords of the share logins pxe-upload (WinPE and Shop Floor setup,
# Upload-Image.ps1) and blancco (erasure reports), 8-64 characters from
# A-Z a-z 0-9 . _ ~ -. Used at the install; change them later on the web
# interface, Tools > Share accounts.
pxe_upload_password: "change-me-per-site"
blancco_smb_password: "change-me-per-site"
# Password of the Clonezilla backup share (8-64 characters from
# A-Z a-z 0-9 . _ ~ -). The PXE boot menu carries it: an imaging-LAN
# secret, not a real one. Default: clonezilla-backup
clonezilla_smb_password: "change-me-per-site"
# Optional: pin the NICs by MAC instead of picking the imaging port at
# install (then both cables may be plugged in from the start).
# pxe_nic_mac: "aa:bb:cc:dd:ee:01" # port to the imaging switch
# corp_nic_mac: "aa:bb:cc:dd:ee:02" # port to the GE network