ansible-taler-exchange

Ansible playbook to deploy a production Taler Exchange
Log | Files | Refs | README | LICENSE

defaults.yml (2295B)

      1 # (Public) config defaults.
      2 
      3 # Deploy auditor?
      4 deploy_auditor: true
      5 
      6 # Deploy challenger?
      7 deploy_challenger: false
      8 
      9 # Deploy monitoring?
     10 deploy_monitoring: true
     11 
     12 # If true, use EBICS keys from that were externally created.
     13 ebics_keys_external: false
     14 
     15 # If set to true, set up an additional user to allow faking wire transfers and
     16 # inspecting challenger auth codes.
     17 # This setting MUST NOT be enabled in production
     18 # deployments under any circumstance.
     19 dangerously_enable_devtesting: false
     20 
     21 # Publish MFA challenge messages for development testing.  This is intentionally
     22 # disabled by default and additionally guarded in playbooks/setup.yml so it can
     23 # only run on the Rusty staging host.
     24 devtesting_mock_mfa: false
     25 
     26 # Configure EBICS.
     27 # When only this setting is enabled,
     28 # the EBICS config is only deployed,
     29 # but EBICS services are not started
     30 # and key setup isn't attempted.
     31 configure_ebics: false
     32 
     33 # Use EBICS to talk to the bank. When false, the manual import/export
     34 # path with its two technical users is set up instead.
     35 use_ebics: false
     36 
     37 # Clicksend defaults that should be overridden by the host config.
     38 sms_challenger_clicksend_username: anonymous
     39 sms_challenger_clicksend_api_key: anonymous
     40 
     41 # Domain name of the Taler exchange
     42 exchange_domain: "exchange.{{ domain_name }}"
     43 # Domain name of the libeufin-nexus service
     44 nexus_domain: "nexus.{{ domain_name }}"
     45 
     46 # Suite to use for the Taler package repository. On deb.taler.net the
     47 # suites are named after the distribution release, so the release we are
     48 # running on is the right default. Override per host to pick a different
     49 # one (for example "trixie-testing").
     50 taler_repo_suites: "{{ ansible_facts['distribution_release'] }}"
     51 
     52 # Name identifying this host towards the monitoring backends.
     53 target_host_name: "{{ inventory_hostname }}"
     54 
     55 # Use letsencrypt by default
     56 exchange_use_letsencrypt: true
     57 nexus_use_letsencrypt: true
     58 
     59 # Enable restore from backup? MUST be set to "false" in production,
     60 # unless restoring from backup.
     61 # Note that we do not restore backups if a database already exists at
     62 # the target server.
     63 # If no database exists on the target system and this option is 'true',
     64 # then a backup must have been provided at the originating host
     65 # (you get get it using the 'restore.sh' script).
     66 enable_restore_backup: false