ansible-taler-exchange

Ansible playbook to deploy a production Taler Exchange
Log | Files | Refs | README | LICENSE

defaults.yml (2162B)

      1 # (Public) config defaults.
      2 
      3 # Deploy auditor?
      4 deploy_auditor: true
      5 
      6 # Deploy challenger?
      7 deploy_challenger: false
      8 
      9 # Provision the external monitoring bundle enrolled in tsys-infra/monitoring.
     10 # False skips management; it does not stop previously installed monitoring.
     11 enable_monitoring: false
     12 
     13 # If true, use EBICS keys from that were externally created.
     14 ebics_keys_external: false
     15 
     16 # If set to true, set up an additional user to allow faking wire transfers and
     17 # inspecting challenger auth codes.
     18 # This setting MUST NOT be enabled in production
     19 # deployments under any circumstance.
     20 dangerously_enable_devtesting: false
     21 
     22 # Publish MFA challenge messages for development testing.  This is intentionally
     23 # disabled by default and additionally guarded in playbooks/setup.yml so it can
     24 # only run on the Rusty staging host.
     25 devtesting_mock_mfa: false
     26 
     27 # Configure EBICS.
     28 # When only this setting is enabled,
     29 # the EBICS config is only deployed,
     30 # but EBICS services are not started
     31 # and key setup isn't attempted.
     32 configure_ebics: false
     33 
     34 # Use EBICS to talk to the bank. When false, the manual import/export
     35 # path with its two technical users is set up instead.
     36 use_ebics: false
     37 
     38 # Clicksend defaults that should be overridden by the host config.
     39 sms_challenger_clicksend_username: anonymous
     40 sms_challenger_clicksend_api_key: anonymous
     41 
     42 # Domain name of the Taler exchange
     43 exchange_domain: "exchange.{{ domain_name }}"
     44 # Domain name of the libeufin-nexus service
     45 nexus_domain: "nexus.{{ domain_name }}"
     46 
     47 # Suite to use for the Taler package repository. On deb.taler.net the
     48 # suites are named after the distribution release, so the release we are
     49 # running on is the right default. Override per host to pick a different
     50 # one (for example "trixie-testing").
     51 taler_repo_suites: "{{ ansible_facts['distribution_release'] }}"
     52 
     53 # Use letsencrypt by default
     54 exchange_use_letsencrypt: true
     55 nexus_use_letsencrypt: true
     56 
     57 # Shared backup/restore location. Preserve the repository used by existing
     58 # backup scripts; override borg_repo per host for independently provisioned repos.
     59 borg_host: pixel.taler-systems.com
     60 borg_repo: "ssh://borg@{{ borg_host }}/~/spec-backup"