# SPDX-License-Identifier: MIT
---
# defaults file for password-policy
pam_pwd_minlen: "12"
pam_pwd_history: "10"
pam_pwd_dcredit: "-1"
pam_pwd_ucredit: "-1"
pam_pwd_lcredit: "-1"
pam_pwd_ocredit: "-1"
pam_pwd_minclass: "4"
pam_pwd_enforce_root: "enforce_for_root"
pam_pwd_policy_name: "password-policy"
pam_pwd_deny: "5"
pam_pwd_unlock_time: "300"

# BEGIN - DO NOT EDIT THIS BLOCK - rh distros variables
# Ansible distribution identifiers that the role treats like RHEL
__pam_pwd_rh_distros:
  - AlmaLinux
  - CentOS
  - RedHat
  - Rocky

# Same as above but includes Fedora
__pam_pwd_rh_distros_fedora: "{{ __pam_pwd_rh_distros + ['Fedora'] }}"

# Use this in conditionals to check if distro is Red Hat or clone
__pam_pwd_is_rh_distro: "{{ ansible_distribution in __pam_pwd_rh_distros }}"

# Use this in conditionals to check if distro is Red Hat or clone, or Fedora
__pam_pwd_is_rh_distro_fedora: "{{ ansible_distribution in __pam_pwd_rh_distros_fedora }}"
# END - DO NOT EDIT THIS BLOCK - rh distros variables
