defaults.yml (2068B)
1 # (Public) config defaults. 2 3 # Deploy auditor? 4 deploy_auditor: true 5 6 # Deploy challenger? 7 deploy_challenger: false 8 9 # Deploy monitoring? 10 deploy_monitoring: true 11 12 # If true, use EBICS keys from that were externally created. 13 ebics_keys_external: false 14 15 # If set to true, set up an additional user to allow faking wire transfers and 16 # inspecting challenger auth codes. 17 # This setting MUST NOT be enabled in production 18 # deployments under any circumstance. 19 dangerously_enable_devtesting: false 20 21 # Configure EBICS. 22 # When only this setting is enabled, 23 # the EBICS config is only deployed, 24 # but EBICS services are not started 25 # and key setup isn't attempted. 26 configure_ebics: false 27 28 # Use EBICS to talk to the bank. When false, the manual import/export 29 # path with its two technical users is set up instead. 30 use_ebics: false 31 32 # Clicksend defaults that should be overridden by the host config. 33 sms_challenger_clicksend_username: anonymous 34 sms_challenger_clicksend_api_key: anonymous 35 36 # Domain name of the Taler exchange 37 exchange_domain: "exchange.{{ domain_name }}" 38 # Domain name of the libeufin-nexus service 39 nexus_domain: "nexus.{{ domain_name }}" 40 41 # Suite to use for the Taler package repository. On deb.taler.net the 42 # suites are named after the distribution release, so the release we are 43 # running on is the right default. Override per host to pick a different 44 # one (for example "trixie-testing"). 45 taler_repo_suites: "{{ ansible_facts['distribution_release'] }}" 46 47 # Name identifying this host towards the monitoring backends. 48 target_host_name: "{{ inventory_hostname }}" 49 50 # Use letsencrypt by default 51 exchange_use_letsencrypt: true 52 nexus_use_letsencrypt: true 53 54 # Enable restore from backup? MUST be set to "false" in production, 55 # unless restoring from backup. 56 # Note that we do not restore backups if a database already exists at 57 # the target server. 58 # If no database exists on the target system and this option is 'true', 59 # then a backup must have been provided at the originating host 60 # (you get get it using the 'restore.sh' script). 61 enable_restore_backup: false