DevOps/ansible-role-www
2
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

Defaults

Browse Source
This commit is contained in:
eric
2026-10-23 12:54:01 -04:00
parent b4db1a0182
commit dc05e752fd
1 changed files with 24 additions and 51 deletions
Download Patch File Download Diff File Expand all files Collapse all files
defaults/main.yml
+24 -51
View File
@@ -3,29 +3,31 @@
# defaults file for ansible-role-www # defaults file for ansible-role-www
www_cron_schedule: "*/15 * * * *" www_cron_schedule: "*/15 * * * *"
www_username: test@example.com www_username: test@example.com
www_password: changeme www_password: ""
www_imap_server: imap.example.com www_imap_server: imap.example.com
www_save_dir: /data www_save_dir: /data
www_ftp_user: changeme www_ftp_user: ""
www_ftp_password: changeme www_ftp_password: ""
www_ftp_pasv_address: example.com www_ftp_pasv_address: example.com
www_repo_url: https://gitea.eom.dev/DevOps/www www_repo_url: https://git.example.com/organization/www.git
# Kubernetes deployment (existing archive, Prometheus and Tor are retained). # Kubernetes deployment (existing archive, Prometheus and Tor are retained).
www_namespace: www www_namespace: www
www_hostname: www.eom.dev www_hostname: www.example.com
www_ingress_class: nginx www_ingress_class: nginx
www_cluster_issuer: ca-issuer www_cluster_issuer: letsencrypt-prod
www_httpd_image: ericomeehan/www:latest # Set to your published website image, including any required metrics exporter.
www_httpd_image: registry.example.com/organization/www:release
www_source_image: debian:trixie www_source_image: debian:trixie
www_repo_version: HEAD www_repo_version: HEAD
www_rollout_revision: "" www_rollout_revision: ""
www_archive_storage_size: 8Ti www_archive_storage_size: 10Gi
www_onion_enabled: true # Enable only when the Tor controller and OnionService CRD are installed.
www_onion_enabled: false
www_wait_timeout: 600 www_wait_timeout: 600
www_image_pull_secrets: [] www_image_pull_secrets: []
www_membership_enabled: true www_membership_enabled: false
# Build/push www/membership/Dockerfile first. Use an immutable release/digest. # Build/push www/membership/Dockerfile first. Use an immutable release/digest.
www_membership_image: "" www_membership_image: ""
www_membership_image_pull_policy: IfNotPresent www_membership_image_pull_policy: IfNotPresent
@@ -49,7 +51,7 @@ www_membership_postgres_storage_class: ""
www_membership_postgres_resources: www_membership_postgres_resources:
requests: {cpu: 100m, memory: 256Mi} requests: {cpu: 100m, memory: 256Mi}
limits: {cpu: "2", memory: 1Gi} limits: {cpu: "2", memory: 1Gi}
www_membership_stripe_enabled: true www_membership_stripe_enabled: false
www_membership_shkeeper_enabled: false www_membership_shkeeper_enabled: false
www_membership_environment_overrides: {} www_membership_environment_overrides: {}
@@ -64,57 +66,28 @@ www_membership_environment:
POSTGRES_DB: membership POSTGRES_DB: membership
POSTGRES_USER: membership POSTGRES_USER: membership
POSTGRES_SSLMODE: prefer POSTGRES_SSLMODE: prefer
DEX_ISSUER: https://dex.eom.dev DEX_ISSUER: https://dex.example.com
DEX_CLIENT_ID: www-membership DEX_CLIENT_ID: www-membership
DEX_CONNECTOR_ID: www-ldap DEX_CONNECTOR_ID: www-ldap
LDAP_URL: ldaps://ldap.eom.dev LDAP_URL: ldaps://ldap.example.com
LDAP_BIND_DN: "" LDAP_BIND_DN: ""
LDAP_ACCOUNT_BASE_DN: ou=www,ou=people,dc=eom,dc=dev LDAP_ACCOUNT_BASE_DN: ou=www,ou=people,dc=example,dc=com
LDAP_SEARCH_BASE_DN: ou=people,dc=eom,dc=dev LDAP_SEARCH_BASE_DN: ou=people,dc=example,dc=com
LDAP_PASSWORD_SCHEME: "" LDAP_PASSWORD_SCHEME: ""
LDAP_GROUP_PLACEHOLDER_DN: cn=membership-sentinel,ou=system,dc=eom,dc=dev LDAP_GROUP_PLACEHOLDER_DN: cn=membership-sentinel,ou=system,dc=example,dc=com
LDAP_CA_CERT_FILE: "" LDAP_CA_CERT_FILE: ""
EMAIL_HOST: "" EMAIL_HOST: ""
EMAIL_PORT: "587" EMAIL_PORT: "587"
EMAIL_HOST_USER: "" EMAIL_HOST_USER: ""
EMAIL_USE_TLS: "1" EMAIL_USE_TLS: "1"
DEFAULT_FROM_EMAIL: accounts@eom.dev DEFAULT_FROM_EMAIL: accounts@example.com
STRIPE_LIVE_MODE: "1" STRIPE_LIVE_MODE: "0"
STRIPE_PORTAL_CONFIGURATION: "" STRIPE_PORTAL_CONFIGURATION: ""
SHKEEPER_URL: "" SHKEEPER_URL: ""
SHKEEPER_CURRENCIES: "" SHKEEPER_CURRENCIES: ""
SHKEEPER_CA_CERT_FILE: "" SHKEEPER_CA_CERT_FILE: ""
# Existing LIVE Stripe prices. Provision the dedicated group DNs separately. # Configure your own tiers in inventory with label, price_id, price_label,
# Override with {} to disable paid tiers, or test-mode prices for a sandbox. # usd_amount and group_dn. Use your own Stripe prices and precreated LDAP groups.
www_membership_tiers: # An empty mapping disables paid tiers; no live prices are included by default.
level-0: www_membership_tiers: {}
label: Level 0
price_id: price_1Rgv4xC5KPXqTvVLfMd6z7wn
price_label: $4 USD / month
usd_amount: "4.00"
group_dn: cn=www-level-0,ou=groups,dc=eom,dc=dev
level-1:
label: Level 1
price_id: price_1Rgv5QC5KPXqTvVLv1PaHWb5
price_label: $8 USD / month
usd_amount: "8.00"
group_dn: cn=www-level-1,ou=groups,dc=eom,dc=dev
level-2:
label: Level 2
price_id: price_1Rgv5rC5KPXqTvVL8Ol8sMUf
price_label: $16 USD / month
usd_amount: "16.00"
group_dn: cn=www-level-2,ou=groups,dc=eom,dc=dev
level-3:
label: Level 3
price_id: price_1Rgv6FC5KPXqTvVL39mAxYjm
price_label: $32 USD / month
usd_amount: "32.00"
group_dn: cn=www-level-3,ou=groups,dc=eom,dc=dev
level-4:
label: Level 4
price_id: price_1Rgv6mC5KPXqTvVLkcmznWZa
price_label: $64 USD / month
usd_amount: "64.00"
group_dn: cn=www-level-4,ou=groups,dc=eom,dc=dev