---
  ### geerlingguy.jenkins
  jenkins_package_state: latest
  jenkins_http_port: 8080
  jenkins_admin_username: jadmin
  jenkins_admin_password: "{{ lookup('keepass', 'jenkins_admin_password', 'password') }}"
  jenkins_plugins_install_dependencies: true
  jenkins_plugins_state: latest
  jenkins_java_options: "-Djenkins.install.runSetupWizard=true"
  ### oefenweb.ufw
  ufw_rules:
    - rule: allow
      to_port: 22
      protocol: tcp
      comment: 'ssh'
      from_ip: 192.168.2.0/24
    - rule: allow
      to_port: 8080
      comment: 'jenkins'
      from_ip: 192.168.2.0/24
    - rule: allow
      to_port: 4949
      protocol: tcp
      comment: 'munin'
      from_ip: 192.168.2.144/24
  ### mgrote.restic
  restic_folders_to_backup: /usr/local /etc /root /home /var/lib/jenkins
  ### geerlingguy.pip
  pip_package: python3-pip
  pip_install_packages:
    - name: pykeepass==3.2.1
    - name: jinja2>=2.11.2
    - name: markupsafe
    - name: ansible-playbook-grapher
  ### geerlingguy.ansible
  ansible_install_method: pip
  ansible_install_version_pip: '2.10'
  ### mgrote.apt_install_packages
  programs_extra:
    - graphviz # für ansible-playbook-grapher
    - sshpass