1
[defaults]
2
# (boolean) By default, Ansible will issue a warning when received from a task action (module or action plugin).
3
# These warnings can be silenced by adjusting this setting to False.
4
;action_warnings=True
5

6
# (boolean) When enabled, this option allows conditionals with non-boolean results to be used.
7
# A deprecation warning will be emitted in these cases.
8
# By default, non-boolean conditionals result in an error.
9
# Such results often indicate unintentional use of templates where they are not supported, resulting in a conditional that is always true.
10
# When this option is enabled, conditional expressions which are a literal ``None`` or empty string will evaluate as true for backwards compatibility.
11
;allow_broken_conditionals=False
12

13
# (boolean) When enabled, this option allows embedded templates to be used for specific backward compatibility scenarios.
14
# A deprecation warning will be emitted in these cases.
15
# First, conditionals (for example, ``failed_when``, ``until``, ``assert.that``) fully enclosed in template delimiters.
16
# Second, string constants in conditionals (for example, ``when: some_var == '{{ some_other_var }}'``).
17
# Finally, positional arguments to lookups (for example, ``lookup('pipe', 'echo {{ some_var }}')``).
18
# This feature is deprecated, since embedded templates are unnecessary in these cases.
19
# When disabled, use of embedded templates will result in an error.
20
# A future release will disable this feature by default.
21
;allow_embedded_templates=True
22

23
# (list) Accept a list of cowsay templates that are 'safe' to use, set to an empty list if you want to enable all installed templates.
24
;cowsay_enabled_stencils=bud-frogs, bunny, cheese, daemon, default, dragon, elephant-in-snake, elephant, eyes, hellokitty, kitty, luke-koala, meow, milk, moofasa, moose, ren, sheep, small, stegosaurus, stimpy, supermilker, three-eyes, turkey, turtle, tux, udder, vader-koala, vader, www
25

26
# (string) Specify a custom cowsay path or swap in your cowsay implementation of choice.
27
;cowpath=
28

29
# (string) This allows you to choose a specific cowsay stencil for the banners or use 'random' to cycle through them.
30
;cow_selection=default
31

32
# (boolean) This option forces color mode even when running without a TTY or the "nocolor" setting is True.
33
;force_color=False
34

35
# (path) The default root path for Ansible config files on the controller.
36
;home=~/.ansible
37

38
# (boolean) This setting allows suppressing colorizing output, which is used to give a better indication of failure and status information.
39
;nocolor=False
40

41
# (boolean) If you have cowsay installed but want to avoid the 'cows' (why????), use this.
42
;nocows=False
43

44
# (boolean) Sets the default value for the any_errors_fatal keyword, if True, Task failures will be considered fatal errors.
45
;any_errors_fatal=False
46

47
# (path) The password file to use for the become plugin. ``--become-password-file``.
48
# If executable, it will be run and the resulting stdout will be used as the password.
49
;become_password_file=
50

51
# (pathspec) Colon-separated paths in which Ansible will search for Become Plugins.
52
;become_plugins=/home/lcaohoanq/.ansible/plugins/become:/usr/share/ansible/plugins/become
53

54
# (string) Chooses which fact cache plugin to use. By default, no cache is used and facts do not persist between runs.
55
;fact_caching=memory
56

57
# (string) Defines connection or path information for the fact cache plugin.
58
;fact_caching_connection=
59

60
# (string) Prefix to use for fact cache plugin files/tables.
61
;fact_caching_prefix=ansible_facts
62

63
# (integer) Expiration timeout for the fact cache plugin data.
64
;fact_caching_timeout=86400
65

66
# (list) List of enabled callbacks, not all callbacks need enabling, but many of those shipped with Ansible do as we don't want them activated by default.
67
;callbacks_enabled=
68

69
# (string) When a collection is loaded that does not support the running Ansible version (with the collection metadata key `requires_ansible`).
70
;collections_on_ansible_version_mismatch=warning
71

72
# (pathspec) Colon-separated paths in which Ansible will search for collections content. Collections must be in nested *subdirectories*, not directly in these directories. For example, if ``COLLECTIONS_PATHS`` includes ``'{{ ANSIBLE_HOME ~ "/collections" }}'``, and you want to add ``my.collection`` to that directory, it must be saved as ``'{{ ANSIBLE_HOME} ~ "/collections/ansible_collections/my/collection" }}'``.
73

74
;collections_path=/home/lcaohoanq/.ansible/collections:/usr/share/ansible/collections
75

76
# (boolean) A boolean to enable or disable scanning the sys.path for installed collections.
77
;collections_scan_sys_path=True
78

79
# (path) The password file to use for the connection plugin. ``--connection-password-file``.
80
;connection_password_file=
81

82
# (pathspec) Colon-separated paths in which Ansible will search for Action Plugins.
83
;action_plugins=/home/lcaohoanq/.ansible/plugins/action:/usr/share/ansible/plugins/action
84

85
# (boolean) When enabled, this option allows lookup plugins (whether used in variables as ``{{lookup('foo')}}`` or as a loop as with_foo) to return data that is not marked 'unsafe'.
86
# By default, such data is marked as unsafe to prevent the templating engine from evaluating any jinja2 templating language, as this could represent a security risk. This option is provided to allow for backward compatibility, however, users should first consider adding allow_unsafe=True to any lookups that may be expected to contain data that may be run through the templating engine late.
87
;allow_unsafe_lookups=False
88

89
# (boolean) This controls whether an Ansible playbook should prompt for a login password. If using SSH keys for authentication, you probably do not need to change this setting.
90
;ask_pass=False
91

92
# (boolean) This controls whether an Ansible playbook should prompt for a vault password.
93
;ask_vault_pass=False
94

95
# (pathspec) Colon-separated paths in which Ansible will search for Cache Plugins.
96
;cache_plugins=/home/lcaohoanq/.ansible/plugins/cache:/usr/share/ansible/plugins/cache
97

98
# (pathspec) Colon-separated paths in which Ansible will search for Callback Plugins.
99
;callback_plugins=/home/lcaohoanq/.ansible/plugins/callback:/usr/share/ansible/plugins/callback
100

101
# (pathspec) Colon-separated paths in which Ansible will search for Cliconf Plugins.
102
;cliconf_plugins=/home/lcaohoanq/.ansible/plugins/cliconf:/usr/share/ansible/plugins/cliconf
103

104
# (pathspec) Colon-separated paths in which Ansible will search for Connection Plugins.
105
;connection_plugins=/home/lcaohoanq/.ansible/plugins/connection:/usr/share/ansible/plugins/connection
106

107
# (boolean) Toggles debug output in Ansible. This is *very* verbose and can hinder multiprocessing. Debug output can also include secret information despite no_log settings being enabled, which means debug mode should not be used in production.
108
;debug=False
109

110
# (string) This indicates the command to use to spawn a shell under, which is required for Ansible's execution needs on a target. Users may need to change this in rare instances when shell usage is constrained, but in most cases, it may be left as is.
111
;executable=/bin/sh
112

113
# (pathspec) Colon-separated paths in which Ansible will search for Jinja2 Filter Plugins.
114
;filter_plugins=/home/lcaohoanq/.ansible/plugins/filter:/usr/share/ansible/plugins/filter
115

116
# (boolean) This option controls if notified handlers run on a host even if a failure occurs on that host.
117
# When false, the handlers will not run if a failure has occurred on a host.
118
# This can also be set per play or on the command line. See Handlers and Failure for more details.
119
;force_handlers=False
120

121
# (integer) Maximum number of forks Ansible will use to execute tasks on target hosts.
122
;forks=5
123

124
# (string) This setting controls the default policy of fact gathering (facts discovered about remote systems).
125
# This option can be useful for those wishing to save fact gathering time. Both 'smart' and 'explicit' will use the cache plugin.
126
;gathering=implicit
127

128
# (string) This setting controls how duplicate definitions of dictionary variables (aka hash, map, associative array) are handled in Ansible.
129
# This does not affect variables whose values are scalars (integers, strings) or arrays.
130
# **WARNING**, changing this setting is not recommended as this is fragile and makes your content (plays, roles, collections) nonportable, leading to continual confusion and misuse. Don't change this setting unless you think you have an absolute need for it.
131
# We recommend avoiding reusing variable names and relying on the ``combine`` filter and ``vars`` and ``varnames`` lookups to create merged versions of the individual variables. In our experience, this is rarely needed and is a sign that too much complexity has been introduced into the data structures and plays.
132
# For some uses you can also look into custom vars_plugins to merge on input, even substituting the default ``host_group_vars`` that is in charge of parsing the ``host_vars/`` and ``group_vars/`` directories. Most users of this setting are only interested in inventory scope, but the setting itself affects all sources and makes debugging even harder.
133
# All playbooks and roles in the official examples repos assume the default for this setting.
134
# Changing the setting to ``merge`` applies across variable sources, but many sources will internally still overwrite the variables. For example ``include_vars`` will dedupe variables internally before updating Ansible, with 'last defined' overwriting previous definitions in same file.
135
# The Ansible project recommends you **avoid ``merge`` for new projects.**
136
# It is the intention of the Ansible developers to eventually deprecate and remove this setting, but it is being kept as some users do heavily rely on it. New projects should **avoid 'merge'**.
137
;hash_behaviour=replace
138

139
# (pathlist) Comma-separated list of Ansible inventory sources
140
;inventory=['/etc/ansible/hosts']
141

142
# (pathspec) Colon-separated paths in which Ansible will search for HttpApi Plugins.
143
;httpapi_plugins=/home/lcaohoanq/.ansible/plugins/httpapi:/usr/share/ansible/plugins/httpapi
144

145
# (float) This sets the interval (in seconds) of Ansible internal processes polling each other. Lower values improve performance with large playbooks at the expense of extra CPU load. Higher values are more suitable for Ansible usage in automation scenarios when UI responsiveness is not required but CPU usage might be a concern.
146
# The default corresponds to the value hardcoded in Ansible <= 2.1
147
;internal_poll_interval=0.001
148

149
# (pathspec) Colon-separated paths in which Ansible will search for Inventory Plugins.
150
;inventory_plugins=/home/lcaohoanq/.ansible/plugins/inventory:/usr/share/ansible/plugins/inventory
151

152
# (list) This is a developer-specific feature that allows enabling additional Jinja2 extensions.
153
# See the Jinja2 documentation for details. If you do not know what these do, you probably don't need to change this setting :)
154
;jinja2_extensions=
155

156
# (boolean) This option preserves variable types during template operations.
157
;jinja2_native=True
158

159
# (boolean) Enables/disables the cleaning up of the temporary files Ansible used to execute the tasks on the remote.
160
# If this option is enabled it will disable ``ANSIBLE_PIPELINING``.
161
;keep_remote_files=False
162

163
# (boolean) Controls whether callback plugins are loaded when running /usr/bin/ansible. This may be used to log activity from the command line, send notifications, and so on. Callback plugins are always loaded for ``ansible-playbook``.
164
;bin_ansible_callbacks=False
165

166
# (tmppath) Temporary directory for Ansible to use on the controller.
167
;local_tmp=/home/lcaohoanq/.ansible/tmp
168

169
# (list) List of logger names to filter out of the log file.
170
;log_filter=
171

172
# (path) File to which Ansible will log on the controller.
173
# When not set the logging is disabled.
174
;log_path=
175

176
# (pathspec) Colon-separated paths in which Ansible will search for Lookup Plugins.
177
;lookup_plugins=/home/lcaohoanq/.ansible/plugins/lookup:/usr/share/ansible/plugins/lookup
178

179
# (string) Sets the macro for the 'ansible_managed' variable available for :ref:`ansible_collections.ansible.builtin.template_module` and :ref:`ansible_collections.ansible.windows.win_template_module`.  This is only relevant to those two modules.
180
;ansible_managed=Ansible managed
181

182
# (string) This sets the default arguments to pass to the ``ansible`` adhoc binary if no ``-a`` is specified.
183
;module_args=
184

185
# (string) Compression scheme to use when transferring Python modules to the target.
186
;module_compression=ZIP_DEFLATED
187

188
# (string) Module to use with the ``ansible`` AdHoc command, if none is specified via ``-m``.
189
;module_name=command
190

191
# (pathspec) Colon-separated paths in which Ansible will search for Modules.
192
;library=/home/lcaohoanq/.ansible/plugins/modules:/usr/share/ansible/plugins/modules
193

194
# (pathspec) Colon-separated paths in which Ansible will search for Module utils files, which are shared by modules.
195
;module_utils=/home/lcaohoanq/.ansible/plugins/module_utils:/usr/share/ansible/plugins/module_utils
196

197
# (pathspec) Colon-separated paths in which Ansible will search for Netconf Plugins.
198
;netconf_plugins=/home/lcaohoanq/.ansible/plugins/netconf:/usr/share/ansible/plugins/netconf
199

200
# (boolean) Toggle Ansible's display and logging of task details, mainly used to avoid security disclosures.
201
;no_log=False
202

203
# (boolean) Toggle Ansible logging to syslog on the target when it executes tasks. On Windows hosts, this will disable a newer style PowerShell modules from writing to the event log.
204
;no_target_syslog=False
205

206
# (raw) What templating should return as a 'null' value. When not set it will let Jinja2 decide.
207
;null_representation=
208

209
# (integer) For asynchronous tasks in Ansible (covered in Asynchronous Actions and Polling), this is how often to check back on the status of those tasks when an explicit poll interval is not supplied. The default is a reasonably moderate 15 seconds which is a tradeoff between checking in frequently and providing a quick turnaround when something may have completed.
210
;poll_interval=15
211

212
# (path) Option for connections using a certificate or key file to authenticate, rather than an agent or passwords, you can set the default value here to avoid re-specifying ``--private-key`` with every invocation.
213
;private_key_file=
214

215
# (boolean) By default, imported roles publish their variables to the play and other roles, this setting can avoid that.
216
# This was introduced as a way to reset role variables to default values if a role is used more than once in a playbook.
217
# Starting in version '2.17' M(ansible.builtin.include_roles) and M(ansible.builtin.import_roles) can individually override this via the C(public) parameter.
218
# Included roles only make their variables public at execution, unlike imported roles which happen at playbook compile time.
219
;private_role_vars=False
220

221
# (integer) Port to use in remote connections, when blank it will use the connection plugin default.
222
;remote_port=
223

224
# (string) Sets the login user for the target machines
225
# When blank it uses the connection plugin's default, normally the user currently executing Ansible.
226
;remote_user=
227

228
# (pathspec) Colon-separated paths in which Ansible will search for Roles.
229
;roles_path=/home/lcaohoanq/.ansible/roles:/usr/share/ansible/roles:/etc/ansible/roles
230

231
# (string) Set the main callback used to display Ansible output. You can only have one at a time.
232
# You can have many other callbacks, but just one can be in charge of stdout.
233
# See :ref:`callback_plugins` for a list of available options.
234
;stdout_callback=default
235

236
# (string) Set the default strategy used for plays.
237
;strategy=linear
238

239
# (pathspec) Colon-separated paths in which Ansible will search for Strategy Plugins.
240
;strategy_plugins=/home/lcaohoanq/.ansible/plugins/strategy:/usr/share/ansible/plugins/strategy
241

242
# (boolean) Toggle the use of "su" for tasks.
243
;su=False
244

245
# (string) Syslog facility to use when Ansible logs to the remote target.
246
;syslog_facility=LOG_USER
247

248
# (pathspec) Colon-separated paths in which Ansible will search for Terminal Plugins.
249
;terminal_plugins=/home/lcaohoanq/.ansible/plugins/terminal:/usr/share/ansible/plugins/terminal
250

251
# (pathspec) Colon-separated paths in which Ansible will search for Jinja2 Test Plugins.
252
;test_plugins=/home/lcaohoanq/.ansible/plugins/test:/usr/share/ansible/plugins/test
253

254
# (integer) This is the default timeout for connection plugins to use.
255
;timeout=10
256

257
# (string) Can be any connection plugin available to your ansible installation.
258
# There is also a (DEPRECATED) special 'smart' option, that will toggle between 'ssh' and 'paramiko' depending on controller OS and ssh versions.
259
;transport=ssh
260

261
# (boolean) When True, this causes ansible templating to fail steps that reference variable names that are likely typoed.
262
# Otherwise, any '{{ template_expression }}' that contains undefined variables will be rendered in a template or ansible action line exactly as written.
263
;error_on_undefined_vars=True
264

265
# (pathspec) Colon-separated paths in which Ansible will search for Vars Plugins.
266
;vars_plugins=/home/lcaohoanq/.ansible/plugins/vars:/usr/share/ansible/plugins/vars
267

268
# (string) The vault_id to use for encrypting by default. If multiple vault_ids are provided, this specifies which to use for encryption. The ``--encrypt-vault-id`` CLI option overrides the configured value.
269
;vault_encrypt_identity=
270

271
# (string) The label to use for the default vault id label in cases where a vault id label is not provided.
272
;vault_identity=default
273

274
# (list) A list of vault-ids to use by default. Equivalent to multiple ``--vault-id`` args. Vault-ids are tried in order.
275
;vault_identity_list=
276

277
# (string) If true, decrypting vaults with a vault id will only try the password from the matching vault-id.
278
;vault_id_match=False
279

280
# (path) The vault password file to use. Equivalent to ``--vault-password-file`` or ``--vault-id``.
281
# If executable, it will be run and the resulting stdout will be used as the password.
282
;vault_password_file=
283

284
# (integer) Sets the default verbosity, equivalent to the number of ``-v`` passed in the command line.
285
;verbosity=0
286

287
# (boolean) Toggle to control the showing of deprecation warnings
288
;deprecation_warnings=True
289

290
# (boolean) Toggle to control showing warnings related to running devel.
291
;devel_warning=True
292

293
# (boolean) Normally ``ansible-playbook`` will print a header for each task that is run. These headers will contain the name: field from the task if you specified one. If you didn't then ``ansible-playbook`` uses the task's action to help you tell which task is presently running. Sometimes you run many of the same action and so you want more information about the task to differentiate it from others of the same action. If you set this variable to True in the config then ``ansible-playbook`` will also include the task's arguments in the header.
294
# This setting defaults to False because there is a chance that you have sensitive values in your parameters and you do not want those to be printed.
295
# If you set this to True you should be sure that you have secured your environment's stdout (no one can shoulder surf your screen and you aren't saving stdout to an insecure file) or made sure that all of your playbooks explicitly added the ``no_log: True`` parameter to tasks that have sensitive values :ref:`keep_secret_data` for more information.
296
;display_args_to_stdout=False
297

298
# (boolean) Toggle to control displaying skipped task/host entries in a task in the default callback.
299
;display_skipped_hosts=True
300

301
# (list) When to include tracebacks in extended error messages
302
;display_traceback=never
303

304
# (string) Root docsite URL used to generate docs URLs in warning/error text; must be an absolute URL with a valid scheme and trailing slash.
305
;docsite_root_url=https://docs.ansible.com/ansible-core/
306

307
# (pathspec) Colon-separated paths in which Ansible will search for Documentation Fragments Plugins.
308
;doc_fragment_plugins=/home/lcaohoanq/.ansible/plugins/doc_fragments:/usr/share/ansible/plugins/doc_fragments
309

310
# (string) By default, Ansible will issue a warning when a duplicate dict key is encountered in YAML.
311
# These warnings can be silenced by adjusting this setting to False.
312
;duplicate_dict_key=warn
313

314
# (string) for the cases in which Ansible needs to return a file within an editor, this chooses the application to use.
315
;editor=vi
316

317
# (boolean) Whether or not to enable the task debugger, this previously was done as a strategy plugin.
318
# Now all strategy plugins can inherit this behavior. The debugger defaults to activating when
319
# a task is failed on unreachable. Use the debugger keyword for more flexibility.
320
;enable_task_debugger=False
321

322
# (boolean) Toggle to allow missing handlers to become a warning instead of an error when notifying.
323
;error_on_missing_handler=True
324

325
# (list) Which modules to run during a play's fact gathering stage, using the default of 'smart' will try to figure it out based on connection type.
326
# If adding your own modules but you still want to use the default Ansible facts, you will want to include 'setup' or corresponding network module to the list (if you add 'smart', Ansible will also figure it out).
327
# This does not affect explicit calls to the 'setup' module, but does always affect the 'gather_facts' action (implicit or explicit).
328
;facts_modules=smart
329

330
# (boolean) Set this to "False" if you want to avoid host key checking by the underlying connection plugin Ansible uses to connect to the host.
331
# Please read the documentation of the specific connection plugin used for details.
332
;host_key_checking=True
333

334
# (boolean) Facts are available inside the `ansible_facts` variable, this setting also pushes them as their own vars in the main namespace.
335
# Unlike inside the `ansible_facts` dictionary where the prefix `ansible_` is removed from fact names, these will have the exact names that are returned by the module.
336
;inject_facts_as_vars=True
337

338
# (string) Path to the Python interpreter to be used for module execution on remote targets, or an automatic discovery mode. Supported discovery modes are ``auto`` (the default), ``auto_silent``, ``auto_legacy``, and ``auto_legacy_silent``. All discovery modes match against an ordered list of well-known Python interpreter locations. The fallback behavior will issue a warning that the interpreter should be set explicitly (since interpreters installed later may change which one is used). This warning behavior can be disabled by setting ``auto_silent``. The ``auto_legacy`` modes are deprecated and behave the same as their respective ``auto`` modes. They exist for backward-compatibility with older Ansible releases that always defaulted to ``/usr/bin/python3``, which will use that interpreter if present.
339
;interpreter_python=auto
340

341
# (boolean) If 'false', invalid attributes for a task will result in warnings instead of errors.
342
;invalid_task_attribute_failed=True
343

344
# (boolean) By default, Ansible will issue a warning when there are no hosts in the inventory.
345
# These warnings can be silenced by adjusting this setting to False.
346
;localhost_warning=True
347

348
# (int) This will set log verbosity if higher than the normal display verbosity, otherwise it will match that.
349
;log_verbosity=
350

351
# (int) Maximum size of files to be considered for diff display.
352
;max_diff_size=104448
353

354
# (list) List of extensions to ignore when looking for modules to load.
355
# This is for rejecting script and binary module fallback extensions.
356
;module_ignore_exts=.pyc, .pyo, .swp, .bak, ~, .rpm, .md, .txt, .rst, .yaml, .yml, .ini
357

358
# (bool) Enables whether module responses are evaluated for containing non-UTF-8 data.
359
# Disabling this may result in unexpected behavior.
360
# Only ansible-core should evaluate this configuration.
361
;module_strict_utf8_response=True
362

363
# (list) TODO: write it
364
;network_group_modules=eos, nxos, ios, iosxr, junos, enos, ce, vyos, sros, dellos9, dellos10, dellos6, asa, aruba, aireos, bigip, ironware, onyx, netconf, exos, voss, slxos
365

366
# (boolean) Previously Ansible would only clear some of the plugin loading caches when loading new roles, this led to some behaviors in which a plugin loaded in previous plays would be unexpectedly 'sticky'. This setting allows the user to return to that behavior.
367
;old_plugin_cache_clear=False
368

369
# (string) for the cases in which Ansible needs to return output in a pageable fashion, this chooses the application to use.
370
;pager=less
371

372
# (path) A number of non-playbook CLIs have a ``--playbook-dir`` argument; this sets the default value for it.
373
;playbook_dir=
374

375
# (string) This sets which playbook dirs will be used as a root to process vars plugins, which includes finding host_vars/group_vars.
376
;playbook_vars_root=top
377

378
# (path) A path to configuration for filtering which plugins installed on the system are allowed to be used.
379
# See :ref:`plugin_filtering_config` for details of the filter file's format.
380
#  The default is /etc/ansible/plugin_filters.yml
381
;plugin_filters_cfg=
382

383
# (string) Attempts to set RLIMIT_NOFILE soft limit to the specified value when executing Python modules (can speed up subprocess usage on Python 2.x. See https://bugs.python.org/issue11284). The value will be limited by the existing hard limit. Default value of 0 does not attempt to adjust existing system-defined limits.
384
;python_module_rlimit_nofile=0
385

386
# (bool) This controls whether a failed Ansible playbook should create a .retry file.
387
;retry_files_enabled=False
388

389
# (path) This sets the path in which Ansible will save .retry files when a playbook fails and retry files are enabled.
390
# This file will be overwritten after each run with the list of failed hosts from all plays.
391
;retry_files_save_path=
392

393
# (str) This setting can be used to optimize vars_plugin usage depending on the user's inventory size and play selection.
394
;run_vars_plugins=demand
395

396
# (bool) This adds the custom stats set via the set_stats plugin to the default output.
397
;show_custom_stats=False
398

399
# (boolean) Allows disabling of warnings related to potential issues on the system running Ansible itself (not on the managed hosts).
400
# These may include warnings about third-party packages or other conditions that should be resolved if possible.
401
;system_warnings=True
402

403
# (string) A string to insert into target logging for tracking purposes
404
;target_log_info=
405

406
# (boolean) This option defines whether the task debugger will be invoked on a failed task when ignore_errors=True is specified.
407
# True specifies that the debugger will honor ignore_errors, and False will not honor ignore_errors.
408
;task_debugger_ignore_errors=True
409

410
# (integer) Set the maximum time (in seconds) for a task action to execute in.
411
# Timeout runs independently from templating or looping. It applies per each attempt of executing the task's action and remains unchanged by the total time spent on a task.
412
# When the action execution exceeds the timeout, Ansible interrupts the process. This is registered as a failure due to outside circumstances, not a task failure, to receive appropriate response and recovery process.
413
# If set to 0 (the default) there is no timeout.
414
;task_timeout=0
415

416
# (string) Make ansible transform invalid characters in group names supplied by inventory sources.
417
;force_valid_group_names=never
418

419
# (boolean) Toggles the use of persistence for connections.
420
;use_persistent_connections=False
421

422
# (bool) A toggle to disable validating a collection's 'metadata' entry for a module_defaults action group. Metadata containing unexpected fields or value types will produce a warning when this is True.
423
;validate_action_group_metadata=True
424

425
# (list) Accept list for variable plugins that require it.
426
;vars_plugins_enabled=host_group_vars
427

428
# (list) Allows to change the group variable precedence merge order.
429
;precedence=all_inventory, groups_inventory, all_plugins_inventory, all_plugins_play, groups_plugins_inventory, groups_plugins_play
430

431
# (string) The salt to use for the vault encryption. If it is not provided, a random salt will be used.
432
;vault_encrypt_salt=
433

434
# (bool) Force 'verbose' option to use stderr instead of stdout
435
;verbose_to_stderr=False
436

437
# (integer) For asynchronous tasks in Ansible (covered in Asynchronous Actions and Polling), this is how long, in seconds, to wait for the task spawned by Ansible to connect back to the named pipe used on Windows systems. The default is 5 seconds. This can be too low on slower systems, or systems under heavy load.
438
# This is not the total time an async command can run for, but is a separate timeout to wait for an async command to start. The task will only start to be timed against its async_timeout once it has connected to the pipe, so the overall maximum duration the task can take will be extended by the amount specified here.
439
;win_async_startup_timeout=5
440

441
# (list) Check all of these extensions when looking for 'variable' files which should be YAML or JSON or vaulted versions of these.
442
# This affects vars_files, include_vars, inventory and vars plugins among others.
443
;yaml_valid_extensions=.yml, .yaml, .json
444

445

446
[privilege_escalation]
447
# (boolean) Display an agnostic become prompt instead of displaying a prompt containing the command line supplied become method.
448
;agnostic_become_prompt=True
449

450
# (boolean) When ``False``(default), Ansible will skip using become if the remote user is the same as the become user, as this is normally a redundant operation. In other words root sudo to root.
451
# If ``True``, this forces Ansible to use the become plugin anyways as there are cases in which this is needed.
452
;become_allow_same_user=False
453

454
# (boolean) Toggles the use of privilege escalation, allowing you to 'become' another user after login.
455
;become=False
456

457
# (boolean) Toggle to prompt for privilege escalation password.
458
;become_ask_pass=False
459

460
# (string) executable to use for privilege escalation, otherwise Ansible will depend on PATH.
461
;become_exe=
462

463
# (string) Flags to pass to the privilege escalation executable.
464
;become_flags=
465

466
# (string) Privilege escalation method to use when `become` is enabled.
467
;become_method=sudo
468

469
# (string) The user your login/remote user 'becomes' when using privilege escalation, most systems will use 'root' when no user is specified.
470
;become_user=root
471

472

473
[persistent_connection]
474
# (path) Specify where to look for the ansible-connection script. This location will be checked before searching $PATH.
475
# If null, ansible will start with the same directory as the ansible script.
476
;ansible_connection_path=
477

478
# (int) This controls the amount of time to wait for a response from a remote device before timing out a persistent connection.
479
;command_timeout=30
480

481
# (integer) This controls the retry timeout for persistent connection to connect to the local domain socket.
482
;connect_retry_timeout=15
483

484
# (integer) This controls how long the persistent connection will remain idle before it is destroyed.
485
;connect_timeout=30
486

487
# (path) Path to the socket to be used by the connection persistence system.
488
;control_path_dir=/home/lcaohoanq/.ansible/pc
489

490

491
[connection]
492
# (boolean) This is a global option, each connection plugin can override either by having more specific options or not supporting pipelining at all.
493
# Pipelining, if supported by the connection plugin, reduces the number of network operations required to execute a module on the remote server, by executing many Ansible modules without actual file transfer.
494
# It can result in a very significant performance improvement when enabled.
495
# However this conflicts with privilege escalation (become). For example, when using 'sudo:' operations you must first disable 'requiretty' in /etc/sudoers on all managed hosts, which is why it is disabled by default.
496
# This setting will be disabled if ``ANSIBLE_KEEP_REMOTE_FILES`` is enabled.
497
;pipelining=False
498

499
# (string) Manage an SSH Agent via Ansible. A configuration of ``none`` will not interact with an agent, ``auto`` will start and destroy an agent via ``ssh-agent`` binary during the run, and a path to an SSH_AUTH_SOCK will allow interaction with a pre-existing agent.
500
;ssh_agent=none
501

502
# (str) When ``SSH_AGENT`` is ``auto``, the path or name of the ssh agent executable to start.
503
;ssh_agent_executable=ssh-agent
504

505
# (int) For keys inserted into an agent defined by ``SSH_AGENT``, define a lifetime, in seconds, that the key may remain in the agent.
506
;ssh_agent_key_lifetime=
507

508

509
[colors]
510
# (string) Defines the color to use on 'Changed' task status.
511
;changed=yellow
512

513
# (string) Defines the default color to use for ansible-console.
514
;console_prompt=white
515

516
# (string) Defines the color to use when emitting debug messages.
517
;debug=dark gray
518

519
# (string) Defines the color to use when emitting deprecation messages.
520
;deprecate=purple
521

522
# (string) Defines the color to use when showing added lines in diffs.
523
;diff_add=green
524

525
# (string) Defines the color to use when showing diffs.
526
;diff_lines=cyan
527

528
# (string) Defines the color to use when showing removed lines in diffs.
529
;diff_remove=red
530

531
# (string) Defines the color to use when emitting a constant in the ansible-doc output.
532
;doc_constant=dark gray
533

534
# (string) Defines the color to use when emitting a deprecated value in the ansible-doc output.
535
;doc_deprecated=magenta
536

537
# (string) Defines the color to use when emitting a link in the ansible-doc output.
538
;doc_link=cyan
539

540
# (string) Defines the color to use when emitting a module name in the ansible-doc output.
541
;doc_module=yellow
542

543
# (string) Defines the color to use when emitting a plugin name in the ansible-doc output.
544
;doc_plugin=yellow
545

546
# (string) Defines the color to use when emitting cross-reference in the ansible-doc output.
547
;doc_reference=magenta
548

549
# (string) Defines the color to use when emitting error messages.
550
;error=red
551

552
# (string) Defines the color to use for highlighting.
553
;highlight=white
554

555
# (string) Defines the color to use when showing 'Included' task status.
556
;included=cyan
557

558
# (string) Defines the color to use when showing 'OK' task status.
559
;ok=green
560

561
# (string) Defines the color to use when showing 'Skipped' task status.
562
;skip=cyan
563

564
# (string) Defines the color to use on 'Unreachable' status.
565
;unreachable=bright red
566

567
# (string) Defines the color to use when emitting verbose messages. In other words, those that show with '-v's.
568
;verbose=blue
569

570
# (string) Defines the color to use when emitting warning messages.
571
;warn=bright purple
572

573

574
[selinux]
575
# (boolean) This setting causes libvirt to connect to LXC containers by passing ``--noseclabel`` parameter to ``virsh`` command. This is necessary when running on systems which do not have SELinux.
576
;libvirt_lxc_noseclabel=False
577

578
# (list) Some filesystems do not support safe operations and/or return inconsistent errors, this setting makes Ansible 'tolerate' those in the list without causing fatal errors.
579
# Data corruption may occur and writes are not always verified when a filesystem is in the list.
580
;special_context_filesystems=fuse, nfs, vboxsf, ramfs, 9p, vfat
581

582

583
[diff]
584
# (bool) Configuration toggle to tell modules to show differences when in 'changed' status, equivalent to ``--diff``.
585
;always=False
586

587
# (integer) Number of lines of context to show when displaying the differences between files.
588
;context=3
589

590

591
[galaxy]
592
# (path) The directory that stores cached responses from a Galaxy server.
593
# This is only used by the ``ansible-galaxy collection install`` and ``download`` commands.
594
# Cache files inside this dir will be ignored if they are world writable.
595
;cache_dir=/home/lcaohoanq/.ansible/galaxy_cache
596

597
# (bool) whether ``ansible-galaxy collection install`` should warn about ``--collections-path`` missing from configured :ref:`collections_paths`.
598
;collections_path_warning=True
599

600
# (path) Collection skeleton directory to use as a template for the ``init`` action in ``ansible-galaxy collection``, same as ``--collection-skeleton``.
601
;collection_skeleton=
602

603
# (list) patterns of files to ignore inside a Galaxy collection skeleton directory.
604
;collection_skeleton_ignore=^.git$, ^.*/.git_keep$
605

606
# (bool) Disable GPG signature verification during collection installation.
607
;disable_gpg_verify=False
608

609
# (bool) Some steps in ``ansible-galaxy`` display a progress wheel which can cause issues on certain displays or when outputting the stdout to a file.
610
# This config option controls whether the display wheel is shown or not.
611
# The default is to show the display wheel if stdout has a tty.
612
;display_progress=
613

614
# (path) Configure the keyring used for GPG signature verification during collection installation and verification.
615
;gpg_keyring=
616

617
# (boolean) If set to yes, ansible-galaxy will not validate TLS certificates. This can be useful for testing against a server with a self-signed certificate.
618
;ignore_certs=
619

620
# (list) A list of GPG status codes to ignore during GPG signature verification. See L(https://github.com/gpg/gnupg/blob/master/doc/DETAILS#general-status-codes) for status code descriptions.
621
# If fewer signatures successfully verify the collection than `GALAXY_REQUIRED_VALID_SIGNATURE_COUNT`, signature verification will fail even if all error codes are ignored.
622
;ignore_signature_status_codes=
623

624
# (str) The number of signatures that must be successful during GPG signature verification while installing or verifying collections.
625
# This should be a positive integer or all to indicate all signatures must successfully validate the collection.
626
# Prepend + to the value to fail if no valid signatures are found for the collection.
627
;required_valid_signature_count=1
628

629
# (path) Role skeleton directory to use as a template for the ``init`` action in ``ansible-galaxy``/``ansible-galaxy role``, same as ``--role-skeleton``.
630
;role_skeleton=
631

632
# (list) patterns of files to ignore inside a Galaxy role or collection skeleton directory.
633
;role_skeleton_ignore=^.git$, ^.*/.git_keep$
634

635
# (string) URL to prepend when roles don't specify the full URI, assume they are referencing this server as the source.
636
;server=https://galaxy.ansible.com
637

638
# (list) A list of Galaxy servers to use when installing a collection.
639
# The value corresponds to the config ini header ``[galaxy_server.{{item}}]`` which defines the server details.
640
# See :ref:`galaxy_server_config` for more details on how to define a Galaxy server.
641
# The order of servers in this list is used as the order in which a collection is resolved.
642
# Setting this config option will ignore the :ref:`galaxy_server` config option.
643
;server_list=
644

645
# (int) The default timeout for Galaxy API calls. Galaxy servers that don't configure a specific timeout will fall back to this value.
646
;server_timeout=60
647

648
# (path) Local path to galaxy access token file
649
;token_path=/home/lcaohoanq/.ansible/galaxy_token
650

651

652
[inventory]
653
# (string) This setting changes the behaviour of mismatched host patterns, it allows you to force a fatal error, a warning or just ignore it.
654
;host_pattern_mismatch=warning
655

656
# (boolean) If 'true', it is a fatal error when any given inventory source cannot be successfully parsed by any available inventory plugin; otherwise, this situation only attracts a warning.
657

658
;any_unparsed_is_failed=False
659

660
# (list) List of enabled inventory plugins, it also determines the order in which they are used.
661
;enable_plugins=host_list, script, auto, yaml, ini, toml
662

663
# (bool) Controls if ansible-inventory will accurately reflect Ansible's view into inventory or its optimized for exporting.
664
;export=False
665

666
# (list) List of extensions to ignore when using a directory as an inventory source.
667
;ignore_extensions=.pyc, .pyo, .swp, .bak, ~, .rpm, .md, .txt, .rst, .orig, .cfg, .retry
668

669
# (list) List of patterns to ignore when using a directory as an inventory source.
670
;ignore_patterns=
671

672
# (bool) If 'true' it is a fatal error if every single potential inventory source fails to parse, otherwise, this situation will only attract a warning.
673

674
;unparsed_is_failed=False
675

676
# (boolean) By default, Ansible will issue a warning when no inventory was loaded and notes that it will use an implicit localhost-only inventory.
677
# These warnings can be silenced by adjusting this setting to False.
678
;inventory_unparsed_warning=True
679

680

681
[netconf_connection]
682
# (string) This variable is used to enable bastion/jump host with netconf connection. If set to True the bastion/jump host ssh settings should be present in ~/.ssh/config file, alternatively it can be set to custom ssh configuration file path to read the bastion/jump host settings.
683
;ssh_config=
684

685

686
[paramiko_connection]
687
# (boolean) TODO: write it
688
;host_key_auto_add=False
689

690
# (boolean) TODO: write it
691
;look_for_keys=True
692

693

694
[jinja2]
695
# (list) This list of filters avoids 'type conversion' when templating variables.
696
# Useful when you want to avoid conversion into lists or dictionaries for JSON strings, for example.
697
;dont_type_filters=string, to_json, to_nice_json, to_yaml, to_nice_yaml, ppretty, json
698

699

700
[tags]
701
# (list) default list of tags to run in your plays, Skip Tags has precedence.
702
;run=
703

704
# (list) default list of tags to skip in your plays, has precedence over Run Tags
705
;skip=