source: darkpeak-services/prod-playbook.yml @ 70dc0fdf

ansiblekeycloakmatrixpleroma
Last change on this file since 70dc0fdf was 70dc0fdf, checked in by Mat Booth <mat.booth@…>, 2 years ago

Fixes #15 - Fix deprecation warnings in ansible deployment

Keep our ansible scripts compatible with the future...

  • Property mode set to 100644
File size: 4.3 KB
Line 
1---
2- hosts: all
3
4  roles:
5    - git
6    - ipsilon
7    # - mastodon
8    - mediawiki
9    - trac
10    - sabredav
11    - ttrss
12    - znc
13
14  become: yes
15  become_user: root
16  become_method: sudo
17
18  pre_tasks:
19    - name: Verify Ansible version
20      assert:
21        that: "ansible_version.full is version_compare('2.4', '>=')"
22        msg: "You must update Ansible to at least 2.4 to use this playbook"
23
24  vars:
25    # Setting this will install self-signed TLS certificates for local testing
26    # with Vagrant
27    development_mode: false
28
29    # Setting this will initialise the TTRSS and SABREDAV databases, DESTROYING
30    # any existing data in the process!
31    first_run: false
32
33    domain_name: darkpeak.org
34    default_web_root: /var/www
35    php_fpm_config_path: /etc/php/7.0/fpm
36    php_session_path: /var/lib/php/sessions
37    postgresql_user: postgres
38    postgresql_group: postgres
39    postgresql_locales:
40      - en_GB.UTF-8
41      - en_US.UTF-8
42
43    ldap_auth_domain: "darkpeak.org"
44    ldap_server: "id.{{ ldap_auth_domain }}"
45    ldap_port: 389
46    ldap_port_ssl: 636
47    ldap_uri: "ldap://{{ ldap_server }}/"
48    ldap_uri_ssl: "ldaps://{{ ldap_server }}/"
49    ldap_basedn: "dc=darkpeak,dc=org"
50    ldap_user_basedn: "cn=users,cn=accounts,{{ ldap_basedn }}"
51    ldap_group_basedn: "cn=groups,cn=accounts,{{ ldap_basedn }}"
52
53    ttrss_postgresql_password: !vault |
54      $ANSIBLE_VAULT;1.1;AES256
55      30306238393464653733343463343865333339393930376461376237616339353336326666616537
56      3531343965353839346361393337636535383962386639370a616132323937373739366339333536
57      61613730313261386238396661346461303066323435653937643536663735623837343339386662
58      3534613136643766620a363834376633316565656436666162366365613364666139613732643262
59      64353637373161343738346166313133656333336165616138636335633264396564343332393734
60      3137623139356464653533353435333139373565303466346335
61
62    sabredav_mysql_password: !vault |
63      $ANSIBLE_VAULT;1.1;AES256
64      30323938306338323032363835616564666534653164313436383965663432653533396134643566
65      3563643338313765346236373262356535346635653563610a633331613336646666636166376561
66      38653438616163333135393263353963356338666362623834616133363332616639636535666533
67      3962616662643139300a663531666630363939363232303564613539386266636538333931613237
68      63306634326664613233323963343930623230393236346261333961326663613431656338316261
69      3761323261646538393536616261613862396162616330343465
70
71    trac_postgresql_password: !vault |
72      $ANSIBLE_VAULT;1.1;AES256
73      62393631373263303130373331356635646565663330656363666363653965363037613361316566
74      3866383232326236616331353332623039656562376539360a623637313832613936333639313437
75      64303332303335613431623630373063323261626533383232613164633165623266616564346331
76      3834663736653662660a623333633764353563353235666636623533613262313363373434396537
77      30373464393362636634323163663065316661316135343932376338346465336461336564613362
78      6563353332633166393435326233376230666336313062663363
79
80    mediawiki_admin_pass: !vault |
81      $ANSIBLE_VAULT;1.1;AES256
82      38653238656364653761656562386130636164303765373039313361646638373465343736366133
83      3136316666336361633164636637323636346662613032340a323536393032626134306237346536
84      38646636323135646437663534623163313463316535353036386638393033376435663261663637
85      3265623666386336310a313161313637346239623435353537336436633633396632636531346166
86      32623436613431386461646330656462636230623737393961363033356461653232303063336364
87      3531336563363265653530363033383762656133643734623461
88
89    # before deploying to production, make encrypted versions of these
90    mastodon_postgresql_password: "Tahgoh3vAmoo8EXooghoh2iy"
91    mastodon_paperclip_secret: "59c571efc27215e088195f9df1b0cbbd6a11fcc0268d08daa05b6a7b847da5d46425709b2c80c0a98701916c447b223ecea5e3cb13e54562cf2223a0bcc7ca3c"
92    mastodon_secret_key_base: "f07b4325dc3579002d123b413753e7d23c1089d4512f3416e21371e19816da68aecb7e2cf7803ca4e322e6c824c50ce9e881a26943cea15325cce8d3777971b0"
93    mastodon_otp_secret: "55529853e78ab27547601064e0f34bef510cffb699b516abc34085e929b9edf00eb8f6ee7ede87123c005508e4e788033e6b86312fafab97940b54f6a1449a70"
94    mastodon_vapid_private_key: "gAvUv0js5f3cFOxNqvc3V7pwlW8rJLCM91eC3KJqnNc="
95    mastodon_vapid_public_key: "BIAEFqq5cAKpVpt6D53dEF5cBy4RJ8cpZx7EU_n4n3izLG0fLDOVdJGHyzL1aevo9x7EcszjTaWFyhgPkeNuZ1Y="
Note: See TracBrowser for help on using the repository browser.