From dc05e752fd036c63f0cc0ffc278d5197ef3a1445 Mon Sep 17 00:00:00 2001 From: Eric Meehan Date: Fri, 23 Oct 2026 12:54:01 -0400 Subject: [PATCH] Defaults --- defaults/main.yml | 75 +++++++++++++++-------------------------------- 1 file changed, 24 insertions(+), 51 deletions(-) diff --git a/defaults/main.yml b/defaults/main.yml index 857f64c..61f1da8 100644 --- a/defaults/main.yml +++ b/defaults/main.yml @@ -3,29 +3,31 @@ # defaults file for ansible-role-www www_cron_schedule: "*/15 * * * *" www_username: test@example.com -www_password: changeme +www_password: "" www_imap_server: imap.example.com www_save_dir: /data -www_ftp_user: changeme -www_ftp_password: changeme +www_ftp_user: "" +www_ftp_password: "" www_ftp_pasv_address: example.com -www_repo_url: https://gitea.eom.dev/DevOps/www +www_repo_url: https://git.example.com/organization/www.git # Kubernetes deployment (existing archive, Prometheus and Tor are retained). www_namespace: www -www_hostname: www.eom.dev +www_hostname: www.example.com www_ingress_class: nginx -www_cluster_issuer: ca-issuer -www_httpd_image: ericomeehan/www:latest +www_cluster_issuer: letsencrypt-prod +# Set to your published website image, including any required metrics exporter. +www_httpd_image: registry.example.com/organization/www:release www_source_image: debian:trixie www_repo_version: HEAD www_rollout_revision: "" -www_archive_storage_size: 8Ti -www_onion_enabled: true +www_archive_storage_size: 10Gi +# Enable only when the Tor controller and OnionService CRD are installed. +www_onion_enabled: false www_wait_timeout: 600 www_image_pull_secrets: [] -www_membership_enabled: true +www_membership_enabled: false # Build/push www/membership/Dockerfile first. Use an immutable release/digest. www_membership_image: "" www_membership_image_pull_policy: IfNotPresent @@ -49,7 +51,7 @@ www_membership_postgres_storage_class: "" www_membership_postgres_resources: requests: {cpu: 100m, memory: 256Mi} limits: {cpu: "2", memory: 1Gi} -www_membership_stripe_enabled: true +www_membership_stripe_enabled: false www_membership_shkeeper_enabled: false www_membership_environment_overrides: {} @@ -64,57 +66,28 @@ www_membership_environment: POSTGRES_DB: membership POSTGRES_USER: membership POSTGRES_SSLMODE: prefer - DEX_ISSUER: https://dex.eom.dev + DEX_ISSUER: https://dex.example.com DEX_CLIENT_ID: www-membership DEX_CONNECTOR_ID: www-ldap - LDAP_URL: ldaps://ldap.eom.dev + LDAP_URL: ldaps://ldap.example.com LDAP_BIND_DN: "" - LDAP_ACCOUNT_BASE_DN: ou=www,ou=people,dc=eom,dc=dev - LDAP_SEARCH_BASE_DN: ou=people,dc=eom,dc=dev + LDAP_ACCOUNT_BASE_DN: ou=www,ou=people,dc=example,dc=com + LDAP_SEARCH_BASE_DN: ou=people,dc=example,dc=com LDAP_PASSWORD_SCHEME: "" - LDAP_GROUP_PLACEHOLDER_DN: cn=membership-sentinel,ou=system,dc=eom,dc=dev + LDAP_GROUP_PLACEHOLDER_DN: cn=membership-sentinel,ou=system,dc=example,dc=com LDAP_CA_CERT_FILE: "" EMAIL_HOST: "" EMAIL_PORT: "587" EMAIL_HOST_USER: "" EMAIL_USE_TLS: "1" - DEFAULT_FROM_EMAIL: accounts@eom.dev - STRIPE_LIVE_MODE: "1" + DEFAULT_FROM_EMAIL: accounts@example.com + STRIPE_LIVE_MODE: "0" STRIPE_PORTAL_CONFIGURATION: "" SHKEEPER_URL: "" SHKEEPER_CURRENCIES: "" SHKEEPER_CA_CERT_FILE: "" -# Existing LIVE Stripe prices. Provision the dedicated group DNs separately. -# Override with {} to disable paid tiers, or test-mode prices for a sandbox. -www_membership_tiers: - level-0: - label: Level 0 - price_id: price_1Rgv4xC5KPXqTvVLfMd6z7wn - price_label: $4 USD / month - usd_amount: "4.00" - group_dn: cn=www-level-0,ou=groups,dc=eom,dc=dev - level-1: - label: Level 1 - price_id: price_1Rgv5QC5KPXqTvVLv1PaHWb5 - price_label: $8 USD / month - usd_amount: "8.00" - group_dn: cn=www-level-1,ou=groups,dc=eom,dc=dev - level-2: - label: Level 2 - price_id: price_1Rgv5rC5KPXqTvVL8Ol8sMUf - price_label: $16 USD / month - usd_amount: "16.00" - group_dn: cn=www-level-2,ou=groups,dc=eom,dc=dev - level-3: - label: Level 3 - price_id: price_1Rgv6FC5KPXqTvVL39mAxYjm - price_label: $32 USD / month - usd_amount: "32.00" - group_dn: cn=www-level-3,ou=groups,dc=eom,dc=dev - level-4: - label: Level 4 - price_id: price_1Rgv6mC5KPXqTvVLkcmznWZa - price_label: $64 USD / month - usd_amount: "64.00" - group_dn: cn=www-level-4,ou=groups,dc=eom,dc=dev +# Configure your own tiers in inventory with label, price_id, price_label, +# usd_amount and group_dn. Use your own Stripe prices and precreated LDAP groups. +# An empty mapping disables paid tiers; no live prices are included by default. +www_membership_tiers: {}