system/linux/system/single.yml

classes:
- service.linux.system
- service.salt.minion.master
- system.openssh.server.single
- system.ntp.client.single
- system.linux.system.repo.tcp_base
parameters:
  linux:
    system:
      package:
        python-msgpack:
          version: latest
        cloud-init:
          version: purged
      kernel:
        sysctl:
          net.ipv4.tcp_keepalive_intvl: 3
          net.ipv4.tcp_keepalive_time: 30
          net.ipv4.tcp_keepalive_probes: 8
          fs.file-max: 124165
          net.core.somaxconn: 4096
          vm.swappiness: 10
          net.nf_conntrack_max: 1048576
          net.ipv4.tcp_retries2: 5
          net.ipv4.tcp_max_syn_backlog: 8192
          net.ipv4.neigh.default.gc_thresh1: 4096
          net.ipv4.neigh.default.gc_thresh2: 8192
          net.ipv4.neigh.default.gc_thresh3: 16384
          net.core.netdev_max_backlog: 261144
          kernel.panic: 60
      timezone: UTC
      locale:
        en_US.UTF-8:
          enabled: true
          default: true
        cs_CZ.UTF-8:
          enabled: true
      limit:
        default:
          enabled: true
          domain: "*"
          limits:
            - type: hard
              item: nofile
              value: 102400
            - type: soft
              item: nofile
              value: 102400
            - type: soft
              item: noproc
              value: 102400
            - type: hard
              item: noproc
              value: 102400