- name: Execute test
  hosts: alpha-control-plane
  become: true
  vars_files:
    - ../secrets.yaml
  roles:
    - role: ericomeehan.www
      vars:
        www_repo_url: https://gitea.eom.dev/DevOps/www.git
        www_hostname: www.eom.dev
        www_cluster_issuer: ca-issuer
        www_httpd_image: ericomeehan/www:latest
        www_onion_enabled: true
        www_membership_enabled: true
        www_membership_image: ericomeehan/www-members:latest
        www_membership_image_pull_policy: Always
        www_archive_storage_size: 2Ti
        www_membership_postgres_storage_size: 2Ti
        www_membership_postgres_storage_class: nfs-client
        www_membership_stripe_enabled: true
        www_membership_shkeeper_enabled: true
        www_membership_environment_overrides:
          MEMBERSHIP_PUBLIC_URL: "https://{{ www_hostname }}"
          MEMBERSHIP_ALLOW_HTTP: "0"
          MEMBERSHIP_TRUST_PROXY: "1"
          MEMBERSHIP_TIERS_FILE: /etc/membership/tiers/tiers.json
          POSTGRES_HOST: membership-db
          POSTGRES_PORT: "5432"
          POSTGRES_DB: membership
          POSTGRES_USER: membership
          POSTGRES_SSLMODE: prefer
          DEX_ISSUER: https://dex.eom.dev/
          DEX_CLIENT_ID: www-membership
          DEX_CONNECTOR_ID: ldap
          LDAP_URL: ldap://openldap.openldap.svc.cluster.local
          LDAP_BIND_DN: "cn=admin,dc=eom,dc=dev"
          LDAP_ACCOUNT_BASE_DN: ou=People,dc=eom,dc=dev
          LDAP_SEARCH_BASE_DN: dc=eom,dc=dev
          LDAP_PASSWORD_SCHEME: "{ARGON2}"
          LDAP_GROUP_PLACEHOLDER_DN: cn=placeholder,ou=Memberships,dc=eom,dc=dev
          LDAP_CA_CERT_FILE: ""
          LDAP_ALLOW_INSECURE: "1"
          EMAIL_HOST: "postfix.eom.dev"
          EMAIL_PORT: "587"
          EMAIL_HOST_USER: "accounts@eom.dev"
          EMAIL_USE_TLS: "1"
          DEFAULT_FROM_EMAIL: accounts@eom.dev
          STRIPE_LIVE_MODE: "0"
          STRIPE_PORTAL_CONFIGURATION: "pk_live_51RXqTsC5KPXqTvVLWl5bzCxoaZivWceeLGMNURUmxzQMwaM5pUUl4VabywrjCQvgKopGFvUBqPLxRMF3eALsiDst00tR59vRhN"
          SHKEEPER_URL: "https://shkeeper.eom.dev/"
          SHKEEPER_CURRENCIES: "BTC"
          SHKEEPER_CA_CERT_FILE: ""