ansible-taler-exchange

Ansible playbook to deploy a production Taler Exchange
Log | Files | Refs | README | LICENSE

commit 7cb97359e002ac82b7b5ed653d8a7dae7917589d
parent 3a6f20a0fe241cfcc97111252b261489c6a67f30
Author: Florian Dold <florian@dold.me>
Date:   Tue,  8 Sep 2026 00:31:48 +0200

enable rusty monitoring

Diffstat:
Ainventories/host_vars/rusty/monitoring-client-secrets.yml | 42++++++++++++++++++++++++++++++++++++++++++
Ainventories/host_vars/rusty/monitoring-client.yml | 56++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Minventories/host_vars/rusty/vars.yml | 13+++++++++++++
3 files changed, 111 insertions(+), 0 deletions(-)

diff --git a/inventories/host_vars/rusty/monitoring-client-secrets.yml b/inventories/host_vars/rusty/monitoring-client-secrets.yml @@ -0,0 +1,42 @@ +$ANSIBLE_VAULT;1.1;AES256 +65326235623033343463626435356538306231373438383563306561386463393664623762636562 +6139656664306664393033613961666534616661616235350a363932663366646532613837633963 +35316466333435396433353036343039346535616630373339373531396336343362656139653233 +6365386437643635370a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diff --git a/inventories/host_vars/rusty/monitoring-client.yml b/inventories/host_vars/rusty/monitoring-client.yml @@ -0,0 +1,56 @@ +--- +monitoring_client: + identity: "rusty.taler-ops.ch" + monitoring_ca_certificate: |- + -----BEGIN CERTIFICATE----- + MIIB3zCCAWSgAwIBAgIUctc5Aj4zGT6CVoXagendwnOifBQwCgYIKoZIzj0EAwMw + HjEcMBoGA1UEAwwTVGFsZXIgbW9uaXRvcmluZyBDQTAeFw0yNjA4MjMxMTE0MTla + Fw0zNjA4MjAxMTE0MTlaMB4xHDAaBgNVBAMME1RhbGVyIG1vbml0b3JpbmcgQ0Ew + djAQBgcqhkjOPQIBBgUrgQQAIgNiAATMaIsEm4L24Z3zjXXjSg+qjN76K3+Ur2b9 + 1zJLenIYzM261qMxTgKKFGLm0XRl6Xig3WXJU/jxCxRXU6xaLd6J2dB8x+Ns0xkT + jREpvB6vfgc3L/Ir4lJMU2ejJCDgYUajYzBhMA8GA1UdEwEB/wQFMAMBAf8wDgYD + VR0PAQH/BAQDAgEGMB0GA1UdDgQWBBQVcLAkGftfPLXqeBYqY76/EQEEWTAfBgNV + HSMEGDAWgBQVcLAkGftfPLXqeBYqY76/EQEEWTAKBggqhkjOPQQDAwNpADBmAjEA + 5ciCjccuuO4c3kJEea2Tk7cx+W+gNJLR+VcYfDAmqRORE9g5AKvo8mYJLnpdTjWf + AjEAnIJG7HLswvAZPll9JbiDNdgSjMc0HPA9ayi8x8vGYNEaPWyKgv/PfSnF1KCj + RP8h + -----END CERTIFICATE----- + client_certificate: |- + -----BEGIN CERTIFICATE----- + MIICEDCCAZagAwIBAgIUOicsGTf3MODNrEsMZnVOSCiQQ4cwCgYIKoZIzj0EAwMw + HjEcMBoGA1UEAwwTVGFsZXIgbW9uaXRvcmluZyBDQTAeFw0yNjA5MDcyMjI1Mzha + Fw0yNzA5MDcyMjI1MzhaMB0xGzAZBgNVBAMMEnJ1c3R5LnRhbGVyLW9wcy5jaDB2 + MBAGByqGSM49AgEGBSuBBAAiA2IABO/dWw88/5NfBUGSj0scy1i8i35DMv76KrRV + ThmqkFLTIf2RWUi8x+b+qoG/vc80U6kheHM6YE/ssQhS9nN6t41ylC5dFZOBgEqt + KveA/D0OXTEPSGVPuy8R0fJClheUt6OBlTCBkjAMBgNVHRMBAf8EAjAAMA4GA1Ud + DwEB/wQEAwIDiDATBgNVHSUEDDAKBggrBgEFBQcDAjAdBgNVHREEFjAUghJydXN0 + eS50YWxlci1vcHMuY2gwHQYDVR0OBBYEFNp0c9UYpbb+bYeFlludKv0IF7xbMB8G + A1UdIwQYMBaAFBVwsCQZ+188tep4Fipjvr8RAQRZMAoGCCqGSM49BAMDA2gAMGUC + MD3airVBt1BuKAhaCbkLPR9TOKfw20qvaK5Y+6d17k9SiVp/TqSoB8ZO/OSP9DO9 + HwIxAM5arSwuwiR+vHeoWphyVidnl8UuEcWyaH1lE39XgKYujL5qgR/YjGGjoz5e + ERA4Jw== + -----END CERTIFICATE----- + server_certificate: |- + -----BEGIN CERTIFICATE----- + MIICDzCCAZagAwIBAgIUOicsGTf3MODNrEsMZnVOSCiQQ4kwCgYIKoZIzj0EAwMw + HjEcMBoGA1UEAwwTVGFsZXIgbW9uaXRvcmluZyBDQTAeFw0yNjA5MDcyMjI1NTRa + Fw0yNzA5MDcyMjI1NTRaMB0xGzAZBgNVBAMMEnJ1c3R5LnRhbGVyLW9wcy5jaDB2 + MBAGByqGSM49AgEGBSuBBAAiA2IABDfEjnaGbzNXgwiA582z714pfeE27CCM61jp + a4xHrfvsGcJ8kKR3oFLqrYaeKTFYM8rsxVYU7xRtqwxyVkLqBzQ7zdYilvEA7dcu + nPD3GRD/O9DiDk1wDMjJecQr7vvKNqOBlTCBkjAMBgNVHRMBAf8EAjAAMA4GA1Ud + DwEB/wQEAwIDiDATBgNVHSUEDDAKBggrBgEFBQcDATAdBgNVHREEFjAUghJydXN0 + eS50YWxlci1vcHMuY2gwHQYDVR0OBBYEFCjGVuo2AGimEneHmW7F8Sft0wzdMB8G + A1UdIwQYMBaAFBVwsCQZ+188tep4Fipjvr8RAQRZMAoGCCqGSM49BAMDA2cAMGQC + MGQb1yKFuHanoUvP9m7avjH3VawwSm15XlRrmtEFYboHMBJAtgs47q1g0RLU1SpY + eAIwPMv0cswAz+fGmqSZGabdyvDdvhiPdkR9E6FENTA+R191e1fyLibsShl10h4K + a74M + -----END CERTIFICATE----- + relp: + server_address: "46.225.94.164" + server_port: 2514 + server_name: "monitoring.taler.net" + node_exporter: + backend_listen_address: "127.0.0.1:9101" + proxy_bind_address: "rusty.taler-ops.ch" + proxy_port: 9100 + prometheus_client_identity: "sentol" diff --git a/inventories/host_vars/rusty/vars.yml b/inventories/host_vars/rusty/vars.yml @@ -1,24 +1,37 @@ # What environment are we deploying? deployment_kind: "tops" + # Public variables for a "test" deployment # Deploy challenger? deploy_challenger: true + # Main external domain name. domain_name: "stage.taler-ops.ch" + # Suite for taler packages. taler_repo_suites: trixie-testing + # Deploy EBICS configuration (true/false). use_ebics: false + # Our currency. currency: CHF + +# Host is monitored by sentol +enable_monitoring: true + # Smallest unit of the currency for wire transfers. currency_round_unit: "CHF:0.01" + # Sanction list to use, comment out to disable sanction_list: sanctions-swiss.json + # Base URL of the exchange REST API exchange_base_url: "https://exchange.{{ domain_name }}/" + # Base URL of the auditor REST API auditor_base_url: "https://auditor.{{ domain_name }}/" + # Exchange offline master public key. exchange_master_pub: GT1ZRF6DT4RAETDEGW3KTWRH15RAKH9T0TK6ZJEYFGRX18B54AK0 # Auditor offline public key.