---
sudo::configs:
  ceph-smartctl:
    priority: 20
    content: |
      ceph ALL=NOPASSWD: /usr/sbin/smartctl -x --json=o /dev/*
      ceph ALL=NOPASSWD: /usr/sbin/nvme * smart-log-add --json /dev/*

hiera_exclude:
  - networking

# proxmox tools use root to authenticate against each other
ssh::server::options:
  PermitRootLogin: yes
  AcceptEnv:
    - LANG LC_*
    - LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT
    - LC_IDENTIFICATION LC_ALL LANGUAGE
    - XMODIFIERS