ansible-taler-exchange

Ansible playbook to deploy a production Taler Exchange
Log | Files | Refs | README | LICENSE

commit b183e3a195cc301431577f52fa6aa365ab757bad
parent 8cb4f255525f7ad45b72c6578715dae75e4c78b0
Author: Florian Dold <florian@dold.me>
Date:   Tue,  8 Sep 2026 23:56:08 +0200

enable monitoring for spec

Diffstat:
Minventories/host_vars/spec/vars.yml | 25+++++++++++++++++++++++++
1 file changed, 25 insertions(+), 0 deletions(-)

diff --git a/inventories/host_vars/spec/vars.yml b/inventories/host_vars/spec/vars.yml @@ -1,41 +1,62 @@ # Public variables for the Taler Operations AG (TOPS) deployment # Deploy challenger? deploy_challenger: true + # What kind of environment are we deploying? deployment_kind: "tops" + # Write EBICS configuration (with values in secret config) configure_ebics: true + +# Enable sentol monitoring +enable_monitoring: true + # Main domain name. domain_name: "taler-ops.ch" exchange_domain: "exchange.{{ domain_name }}" + # Suite for taler packages. taler_repo_suites: trixie + # Deploy EBICS configuration (true/false). use_ebics: true + # Our currency. currency: CHF + # Smallest unit of the currency for wire transfers. currency_round_unit: "CHF:0.01" + # Sanction list to use, comment out to disable # sanction_list: sanctions-swiss.json + # Base URL of the exchange REST API exchange_base_url: "https://exchange.{{ domain_name }}/" + # Base URL of the auditor REST API auditor_base_url: "https://auditor.{{ domain_name }}/" + # Exchange offline master public key. exchange_master_pub: 9V0G82S7JQW2ZRYF7BMGKKQ1TNR1VNVXZJSNQ2VSDGWC80D9W0YG + # Auditor offline public key. auditor_pub: P6B7ZS7Y1Y12S0VP0PAJ1GQGSHW8RE4NSBTP8PR254J18SK24MH0 + # URL with merchants accepting this exchange. exchange_shopping_url: "https://map.taler-ops.ch/" + # Name of Terms of service resource file exchange_terms_etag: "exchange-tos-tops-v0" + # Name of Privacy policy resource file exchange_pp_etag: "exchange-pp-v0" + # Full BIC of exchange account exchange_bank_account_bic: "POFICHBEXXX" + # Full Payto URI of exchange account (for credit and debit) exchange_bank_account_iban: "CH9709000000166556130" + # Full Payto URI of exchange account (for credit and debit) exchange_bank_account_payto: "payto://iban/{{ exchange_bank_account_iban }}?receiver-name=Taler+Operations+AG" # Port to be used by libeufin-nexus for the taler-exchange-wire-gateway @@ -52,14 +73,17 @@ kyc_thank_you_url: https://taler-ops.ch/en/thank-you-kyc.html kycaid_template_individual: tmpl_xxx # Template to use for identification of businesses with KYCAID kycaid_template_business: tmpl_xxx + # Regex specifying allowed phone numbers for the SMS check exchange_aml_program_tops_sms_hint: "Swiss mobile number (+417...) required" exchange_aml_program_tops_sms_example: "+41748224521" exchange_aml_program_tops_sms_regex: "\\\\+417[0-9]+" + # Regex specifying allowed country names for the postal address check exchange_aml_program_tops_postal_country_hint: "Swiss address required" exchange_aml_program_tops_postal_example: "Max Mustermann\\nBahnhofsplatz 1\\n4201 Biel/Bienne" exchange_aml_program_tops_postal_country_regex: "CH|Ch|ch" + # Tool to use for sanction list checking exchange_sanction_helper: taler-exchange-helper-sanctions-dummy @@ -71,6 +95,7 @@ exchange_sanction_helper: taler-exchange-helper-sanctions-dummy # to decrease the likelihood of unencrypted secrets ending up in git. # Symmetric encryption secret for KYC attribute encryption. exchange_attribute_encryption_key: "{{ vault_exchange_attribute_encryption_key }}" + # EBICS access details libeufin_nexus_ebics_host_base_url: https://ebics.postfinance.ch/ebics/ebics.aspx libeufin_nexus_ebics_host_id: PFEBICS