linux/system/single/init.yml

classes:
- service.linux.system
- service.salt.minion.master
- system.openssh.server.single
- system.ntp.client.single
parameters:
  _param:
    local_package_repos: false
  linux:
    system:
      local_package_repos: ${_param:local_package_repos}
      user:
        root:
          enabled: true
          name: root
          home: /root
      kernel:
        modules:
          - nf_conntrack
        sysctl:
          net.ipv4.tcp_keepalive_intvl: 3
          net.ipv4.tcp_keepalive_time: 30
          net.ipv4.tcp_keepalive_probes: 8
          fs.file-max: 124165
          net.core.somaxconn: 4096
          vm.swappiness: 10
          net.nf_conntrack_max: 1048576
          net.ipv4.tcp_retries2: 5
          net.ipv4.tcp_max_syn_backlog: 8192
          net.ipv4.neigh.default.gc_thresh1: 4096
          net.ipv4.neigh.default.gc_thresh2: 8192
          net.ipv4.neigh.default.gc_thresh3: 16384
          net.core.netdev_max_backlog: 261144
          net.ipv4.tcp_tw_reuse: 1
          kernel.panic: 60
      cpu:
        governor: performance
      timezone: UTC
      locale:
        en_US.UTF-8:
          enabled: true
          default: true
        cs_CZ.UTF-8:
          enabled: true
      limit:
        default:
          enabled: true
          domain: "*"
          limits:
            - type: hard
              item: nofile
              value: 307200
            - type: soft
              item: nofile
              value: 307200
            - type: soft
              item: nproc
              value: 307200
            - type: hard
              item: nproc
              value: 307200
      systemd:
        system:
          Manager:
            DefaultLimitNOFILE: 307200
            DefaultLimitNPROC: 307200