From 606bf07003b8544f1de675196d5bfbd34cdc15f1 Mon Sep 17 00:00:00 2001
From: Someone <someone@somenet.org>
Date: Thu, 8 Jan 2026 21:27:49 +0100
Subject: [PATCH] [roles/base/sysctl] Set system settings - TODO: move to
 systemd subrole?

---
 .../files/default/sysctl.d-90somecustom.conf  | 23 +++++++++++++++++++
 roles/base/sysctl/handlers/main.yml           | 10 ++++++++
 roles/base/sysctl/tasks/main.yml              | 17 ++++++++++++++
 3 files changed, 50 insertions(+)
 create mode 100644 roles/base/sysctl/files/default/sysctl.d-90somecustom.conf
 create mode 100644 roles/base/sysctl/handlers/main.yml
 create mode 100644 roles/base/sysctl/tasks/main.yml

diff --git a/roles/base/sysctl/files/default/sysctl.d-90somecustom.conf b/roles/base/sysctl/files/default/sysctl.d-90somecustom.conf
new file mode 100644
index 0000000..a87393b
--- /dev/null
+++ b/roles/base/sysctl/files/default/sysctl.d-90somecustom.conf
@@ -0,0 +1,23 @@
+#
+################################################
+### Managed by someone's ansible provisioner ###
+################################################
+# Part of: https://git.somenet.org/root/pub/somesible.git
+# 2017-2026 by someone <someone@somenet.org>
+#
+
+# reboot after 5 sec
+kernel.panic = 5
+
+# spam consoles
+#kernel.printk=7
+
+# more shared mem
+# kernel.shmmax=268435456
+
+# reduce swapping
+vm.swappiness = 2
+
+# slow raid resync from 200000 to... (only applies to md-raid)
+#dev.raid.speed_limit_min=40000
+#dev.raid.speed_limit_max=40000
diff --git a/roles/base/sysctl/handlers/main.yml b/roles/base/sysctl/handlers/main.yml
new file mode 100644
index 0000000..373b240
--- /dev/null
+++ b/roles/base/sysctl/handlers/main.yml
@@ -0,0 +1,10 @@
+#####################################
+### someone's ansible provisioner ###
+#####################################
+# Part of: https://git.somenet.org/root/pub/somesible.git
+# 2017-2026 by someone <someone@somenet.org>
+#
+---
+- name: reload sysctl settings
+  command: sysctl --system
+  ignore_errors: yes
diff --git a/roles/base/sysctl/tasks/main.yml b/roles/base/sysctl/tasks/main.yml
new file mode 100644
index 0000000..e6803fb
--- /dev/null
+++ b/roles/base/sysctl/tasks/main.yml
@@ -0,0 +1,17 @@
+#####################################
+### someone's ansible provisioner ###
+#####################################
+# Part of: https://git.somenet.org/root/pub/somesible.git
+# 2017-2026 by someone <someone@somenet.org>
+#
+---
+- name: copy/overwrite /etc/sysctl.d/90somecustom.conf
+  copy:
+    src: "{{item}}"
+    dest: "/etc/sysctl.d/90somecustom.conf"
+  with_first_found:
+    - "{{lookup('env','PWD')}}/host_files/{{inventory_hostname}}/{{role_name}}/sysctl.d-90somecustom.conf"
+    - "{{lookup('env','PWD')}}/group_files/{{group_files_group}}/{{role_name}}/sysctl.d-90somecustom.conf"
+    - "{{lookup('env','PWD')}}/group_files/all/{{role_name}}/sysctl.d-90somecustom.conf"
+    - "default/sysctl.d-90somecustom.conf"
+  notify: reload sysctl settings
-- 
2.47.3