---
  ### geerlingguy.jenkins
  jenkins_package_state: latest
  jenkins_http_port: 8080
  jenkins_admin_username: "{{ lookup('keepass', 'jenkins_admin_name', 'password') }}"
  jenkins_admin_password: "{{ lookup('keepass', 'jenkins_admin_password', 'password') }}"
  jenkins_plugins_install_dependencies: true
  jenkins_plugins_state: latest
  jenkins_java_options: "-Djenkins.install.runSetupWizard=true"
  ### geerlingguy.pip
  pip_package: python3-pip
  pip_install_packages:
    - name: pykeepass
    - name: Jinja2
    - name: markupsafe
  ### geerlingguy.ansible
  ansible_install_method: pip
  ansible_install_version_pip: '2.10'
  ### oefenweb.ufw
  ufw_rules:
    - rule: allow
      to_port: 22
      protocol: tcp
      comment: 'ssh'
      from_ip: 192.168.2.0/24
    - rule: allow
      to_port: 8080
      comment: 'jenkins'
      from_ip: 192.168.2.0/24
  ### mgrote.restic
  restic_folders_to_backup: /usr/local /etc /root /home /var/lib/jenkins
  ### mgrote.install_packages
  programs_extra:
    - sshpass