ansible-taler-exchange

Ansible playbook to deploy a production Taler Exchange
Log | Files | Refs | Submodules | README | LICENSE

test-public.yml (2586B)

      1 ---
      2 # Pregenerated dhparam.pem is less secure
      3 # but significantly faster.
      4 USE_PREGENERATED_DHPARAM: true
      5 # No auditor (yet)
      6 deploy_auditor: false
      7 deploy_monitoring: false
      8 # We use EBICS to talk to the bank.
      9 use_ebics: false
     10 # Use externally created EBICS keys.
     11 ebics_keys_external: false
     12 # Main domain name.
     13 domain_name: "glsint.fdold.eu"
     14 exchange_domain: "exchange.{{ domain_name }}"
     15 # High-level kind of deployment.
     16 # Other customizations depend on this.
     17 # Can be "gls" or "tops" (later: "magnet")
     18 DEPLOYMENT_KIND: "gls"
     19 # Our internal hostname
     20 TARGET_HOST_NAME: "guava.box.fdold.eu"
     21 # Use nightly Taler distro (true/false).
     22 USE_NIGHTLY: false
     23 # Our currency.
     24 CURRENCY: EUR
     25 # Smallest unit of the currency for wire transfers.
     26 CURRENCY_ROUND_UNIT: "EUR:0.01"
     27 # Base URL of the exchange REST API
     28 EXCHANGE_BASE_URL: "https://exchange.{{ domain_name }}/"
     29 # Exchange offline master public key.
     30 EXCHANGE_MASTER_PUB: GW875YV09RZ743X045DNSQC7SFNF0G66707H7PT3TP0RWPAPR340
     31 # URL with merchants accepting this exchange.
     32 EXCHANGE_SHOPPING_URL: "https://shops.taler.gls.de/"
     33 # Name of Terms of service resource file
     34 EXCHANGE_TERMS_ETAG: "exchange-gls-tos-test-v3"
     35 # Name of Privacy policy resource file
     36 EXCHANGE_PP_ETAG: "exchange-pp-v0"
     37 # Full BIC of exchange account
     38 EXCHANGE_BANK_ACCOUNT_BIC: "GENODEM1GLS"
     39 # Full Payto URI of exchange account (for credit and debit)
     40 EXCHANGE_BANK_ACCOUNT_IBAN: "DE04601202004238636548"
     41 # Full Payto URI of exchange account (for credit and debit)
     42 EXCHANGE_BANK_ACCOUNT_PAYTO: "payto://iban/{{ EXCHANGE_BANK_ACCOUNT_IBAN }}?receiver-name=GLS+Taler+Internal"
     43 # Port to be used by libeufin-nexus for the taler-exchange-wire-gateway
     44 LIBEUFIN_PORT: 8082
     45 # Name of the exchange account at libeufin-nexus
     46 LIBEUFIN_EXCHANGE_ACCOUNT: "exchange"
     47 # Which KYC/AML rules to set up.
     48 # Name of the bank dialect
     49 LIBEUFIN_NEXUS_BANK_DIALECT: "gls"
     50 # SPA dialect (tops, gls, magnet, ...)
     51 EXCHANGE_SPA_DIALECT: "gls"
     52 # Business name of the exchange operator
     53 EXCHANGE_OPERATOR_LEGAL_NAME: "GLS Taler Internal"
     54 # Where to send people after they passed KYC.
     55 KYC_THANK_YOU_URL: https://taler.gls.de/thank-you-kyc
     56 # Tool to use for sanction list checking
     57 EXCHANGE_SANCTION_HELPER: taler-exchange-helper-sanctions-dummy
     58 
     59 # If set to true, set up an additional user to allow faking wire transfers and
     60 # inspecting challenger auth codes.
     61 # This setting MUST NOT be enabled in production
     62 # deployments under any circumstance.
     63 dangerously_enable_devtesting: true
     64 
     65 devtesting_ssh_keys:
     66   - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINHSjJ/zPwQnqBrKp0qK+OdsZYfQ8DHY2dyJakNozBi7 fdold-work@sapota"