Refacted by moving variable declarations into distinct per-app files under 'options' subdirectory

roles/bootstrap/defaults/main/general.yml

@@ -1,16 +1,11 @@
 ---
+# defaults file for bootstrap
 admins: ~
 guests: ~
 users: ~
 roots: ~
-pubkeys: ~
-root_acct: ~
-nonlogin_method: ~
-extra_packages: ~
-official_name: ~
-official_email: ~
-gpg_sign_id: ~
-homedir: ~
-cimages: ~
 enrollment_key: ~
-gcfs_password: ~
+gcfs_password: ~
+gpg_sign_id: ~
+official_name: ~
+official_email: ~

roles/bootstrap/defaults/options/certbot.yml

@@ -0,0 +1,3 @@
+---
+dns_secret: ~
+dns_key: ~

roles/bootstrap/defaults/options/crowdsec.yml

@@ -0,0 +1,2 @@
+---
+enrollment_key: ~

roles/bootstrap/defaults/options/git.yml

@@ -0,0 +1,4 @@
+---
+gpg_sign_id: ~
+official_name: ~
+official_email: ~

roles/bootstrap/defaults/options/gpg.yml

@@ -0,0 +1,2 @@
+---
+gcfs_password: ~

roles/bootstrap/defaults/options/proftpd.yml

@@ -0,0 +1,16 @@
+---
+welcome_msg_path: /etc/proftpd/welcome.msg
+goodbye_msg_path: /etc/proftpd/bye.msg
+transfer_msg_path: /etc/proftpd/transfer.msg
+default_umask: 0022 0022
+users_allowed: root
+servername: ~
+admin_email: ~
+serveralias: localhost
+ftp_protocols: ftps
+ftp_port: 990
+sec_cert_path: /etc/srv/domain.cert.pem
+sca_cert_path: /etc/srv/domain.cert.pem
+key_cert_path: /etc/srv/private.key.pem
+ftp_auth_user_path: /etc/proftpd/ftp.passwd
+ftp_auth_group_path: /etc/proftpd/ftpd.group

roles/bootstrap/defaults/options/ssh.yml

@@ -0,0 +1,5 @@
+---
+pubkeys: ~
+primary_root_acct: ~
+nonlogin_method: ~
+roots: ~