Defaults

defaults/main.yml

@@ -3,29 +3,31 @@
 # defaults file for ansible-role-www
 www_cron_schedule: "*/15 * * * *"
 www_username: test@example.com
-www_password: changeme
+www_password: ""
 www_imap_server: imap.example.com
 www_save_dir: /data
-www_ftp_user: changeme
-www_ftp_password: changeme
+www_ftp_user: ""
+www_ftp_password: ""
 www_ftp_pasv_address: example.com
-www_repo_url: https://gitea.eom.dev/DevOps/www
+www_repo_url: https://git.example.com/organization/www.git
 
 # Kubernetes deployment (existing archive, Prometheus and Tor are retained).
 www_namespace: www
-www_hostname: www.eom.dev
+www_hostname: www.example.com
 www_ingress_class: nginx
-www_cluster_issuer: ca-issuer
-www_httpd_image: ericomeehan/www:latest
+www_cluster_issuer: letsencrypt-prod
+# Set to your published website image, including any required metrics exporter.
+www_httpd_image: registry.example.com/organization/www:release
 www_source_image: debian:trixie
 www_repo_version: HEAD
 www_rollout_revision: ""
-www_archive_storage_size: 8Ti
-www_onion_enabled: true
+www_archive_storage_size: 10Gi
+# Enable only when the Tor controller and OnionService CRD are installed.
+www_onion_enabled: false
 www_wait_timeout: 600
 www_image_pull_secrets: []
 
-www_membership_enabled: true
+www_membership_enabled: false
 # Build/push www/membership/Dockerfile first. Use an immutable release/digest.
 www_membership_image: ""
 www_membership_image_pull_policy: IfNotPresent
@@ -49,7 +51,7 @@ www_membership_postgres_storage_class: ""
 www_membership_postgres_resources:
   requests: {cpu: 100m, memory: 256Mi}
   limits: {cpu: "2", memory: 1Gi}
-www_membership_stripe_enabled: true
+www_membership_stripe_enabled: false
 www_membership_shkeeper_enabled: false
 www_membership_environment_overrides: {}
 
@@ -64,57 +66,28 @@ www_membership_environment:
   POSTGRES_DB: membership
   POSTGRES_USER: membership
   POSTGRES_SSLMODE: prefer
-  DEX_ISSUER: https://dex.eom.dev
+  DEX_ISSUER: https://dex.example.com
   DEX_CLIENT_ID: www-membership
   DEX_CONNECTOR_ID: www-ldap
-  LDAP_URL: ldaps://ldap.eom.dev
+  LDAP_URL: ldaps://ldap.example.com
   LDAP_BIND_DN: ""
-  LDAP_ACCOUNT_BASE_DN: ou=www,ou=people,dc=eom,dc=dev
-  LDAP_SEARCH_BASE_DN: ou=people,dc=eom,dc=dev
+  LDAP_ACCOUNT_BASE_DN: ou=www,ou=people,dc=example,dc=com
+  LDAP_SEARCH_BASE_DN: ou=people,dc=example,dc=com
   LDAP_PASSWORD_SCHEME: ""
-  LDAP_GROUP_PLACEHOLDER_DN: cn=membership-sentinel,ou=system,dc=eom,dc=dev
+  LDAP_GROUP_PLACEHOLDER_DN: cn=membership-sentinel,ou=system,dc=example,dc=com
   LDAP_CA_CERT_FILE: ""
   EMAIL_HOST: ""
   EMAIL_PORT: "587"
   EMAIL_HOST_USER: ""
   EMAIL_USE_TLS: "1"
-  DEFAULT_FROM_EMAIL: accounts@eom.dev
-  STRIPE_LIVE_MODE: "1"
+  DEFAULT_FROM_EMAIL: accounts@example.com
+  STRIPE_LIVE_MODE: "0"
   STRIPE_PORTAL_CONFIGURATION: ""
   SHKEEPER_URL: ""
   SHKEEPER_CURRENCIES: ""
   SHKEEPER_CA_CERT_FILE: ""
 
-# Existing LIVE Stripe prices. Provision the dedicated group DNs separately.
-# Override with {} to disable paid tiers, or test-mode prices for a sandbox.
-www_membership_tiers:
-  level-0:
-    label: Level 0
-    price_id: price_1Rgv4xC5KPXqTvVLfMd6z7wn
-    price_label: $4 USD / month
-    usd_amount: "4.00"
-    group_dn: cn=www-level-0,ou=groups,dc=eom,dc=dev
-  level-1:
-    label: Level 1
-    price_id: price_1Rgv5QC5KPXqTvVLv1PaHWb5
-    price_label: $8 USD / month
-    usd_amount: "8.00"
-    group_dn: cn=www-level-1,ou=groups,dc=eom,dc=dev
-  level-2:
-    label: Level 2
-    price_id: price_1Rgv5rC5KPXqTvVL8Ol8sMUf
-    price_label: $16 USD / month
-    usd_amount: "16.00"
-    group_dn: cn=www-level-2,ou=groups,dc=eom,dc=dev
-  level-3:
-    label: Level 3
-    price_id: price_1Rgv6FC5KPXqTvVL39mAxYjm
-    price_label: $32 USD / month
-    usd_amount: "32.00"
-    group_dn: cn=www-level-3,ou=groups,dc=eom,dc=dev
-  level-4:
-    label: Level 4
-    price_id: price_1Rgv6mC5KPXqTvVLkcmznWZa
-    price_label: $64 USD / month
-    usd_amount: "64.00"
-    group_dn: cn=www-level-4,ou=groups,dc=eom,dc=dev
+# Configure your own tiers in inventory with label, price_id, price_label,
+# usd_amount and group_dn. Use your own Stripe prices and precreated LDAP groups.
+# An empty mapping disables paid tiers; no live prices are included by default.
+www_membership_tiers: {}