55 lines
2.2 KiB
YAML
55 lines
2.2 KiB
YAML
- name: Execute test
|
|
hosts: alpha-control-plane
|
|
become: true
|
|
vars_files:
|
|
- ../secrets.yaml
|
|
roles:
|
|
- role: ericomeehan.www
|
|
vars:
|
|
www_repo_url: https://gitea.eom.dev/DevOps/www.git
|
|
www_hostname: www.eom.dev
|
|
www_cluster_issuer: ca-issuer
|
|
www_httpd_image: ericomeehan/www:latest
|
|
www_onion_enabled: true
|
|
www_membership_enabled: true
|
|
www_membership_image: ericomeehan/www-members:latest
|
|
www_membership_image_pull_policy: Always
|
|
www_archive_storage_size: 2Ti
|
|
www_membership_postgres_storage_size: 2Ti
|
|
www_membership_postgres_storage_class: nfs-client
|
|
www_membership_stripe_enabled: true
|
|
www_membership_shkeeper_enabled: true
|
|
www_membership_ldap_ensure_groups: true
|
|
www_membership_environment_overrides:
|
|
MEMBERSHIP_PUBLIC_URL: "https://{{ www_hostname }}"
|
|
MEMBERSHIP_ALLOW_HTTP: "0"
|
|
MEMBERSHIP_TRUST_PROXY: "1"
|
|
MEMBERSHIP_TIERS_FILE: /etc/membership/tiers/tiers.json
|
|
POSTGRES_HOST: membership-db
|
|
POSTGRES_PORT: "5432"
|
|
POSTGRES_DB: membership
|
|
POSTGRES_USER: membership
|
|
POSTGRES_SSLMODE: prefer
|
|
DEX_ISSUER: https://dex.eom.dev/
|
|
DEX_CLIENT_ID: www-membership
|
|
DEX_CONNECTOR_ID: ldap
|
|
LDAP_URL: ldap://openldap.openldap.svc.cluster.local
|
|
LDAP_BIND_DN: "cn=admin,dc=eom,dc=dev"
|
|
LDAP_ACCOUNT_BASE_DN: ou=People,dc=eom,dc=dev
|
|
LDAP_SEARCH_BASE_DN: dc=eom,dc=dev
|
|
LDAP_PASSWORD_SCHEME: "{ARGON2}"
|
|
LDAP_GROUP_PLACEHOLDER_DN: cn=placeholder,ou=Memberships,dc=eom,dc=dev
|
|
LDAP_CA_CERT_FILE: ""
|
|
LDAP_ALLOW_INSECURE: "1"
|
|
EMAIL_HOST: "postfix.eom.dev"
|
|
EMAIL_PORT: "587"
|
|
EMAIL_HOST_USER: "accounts@eom.dev"
|
|
EMAIL_USE_TLS: "1"
|
|
DEFAULT_FROM_EMAIL: accounts@eom.dev
|
|
STRIPE_LIVE_MODE: "0"
|
|
STRIPE_PORTAL_CONFIGURATION: "pk_live_51RXqTsC5KPXqTvVLWl5bzCxoaZivWceeLGMNURUmxzQMwaM5pUUl4VabywrjCQvgKopGFvUBqPLxRMF3eALsiDst00tR59vRhN"
|
|
SHKEEPER_URL: "https://shkeeper.eom.dev/"
|
|
SHKEEPER_CURRENCIES: "BTC"
|
|
SHKEEPER_CA_CERT_FILE: ""
|
|
|