ansible-taler-exchange

Ansible playbook to deploy a production Taler Exchange
Log | Files | Refs | README | LICENSE

vars.yml (4877B)

      1 # Public variables for the Taler Operations AG (TOPS) deployment
      2 # Deploy challenger?
      3 deploy_challenger: true
      4 
      5 # What kind of environment are we deploying?
      6 deployment_kind: "tops"
      7 
      8 # Write EBICS configuration (with values in secret config)
      9 configure_ebics: true
     10 
     11 # Enable sentol monitoring
     12 enable_monitoring: true
     13 
     14 # Main domain name.
     15 domain_name: "taler-ops.ch"
     16 exchange_domain: "exchange.{{ domain_name }}"
     17 
     18 # Suite for taler packages.
     19 taler_repo_suites: trixie
     20 
     21 # Deploy EBICS configuration (true/false).
     22 use_ebics: true
     23 
     24 # Our currency.
     25 currency: CHF
     26 
     27 # Smallest unit of the currency for wire transfers.
     28 currency_round_unit: "CHF:0.01"
     29 
     30 # Sanction list to use, comment out to disable
     31 # sanction_list: sanctions-swiss.json
     32 
     33 # Base URL of the exchange REST API
     34 exchange_base_url: "https://exchange.{{ domain_name }}/"
     35 
     36 # Base URL of the auditor REST API
     37 auditor_base_url: "https://auditor.{{ domain_name }}/"
     38 
     39 # Exchange offline master public key.
     40 exchange_master_pub: 9V0G82S7JQW2ZRYF7BMGKKQ1TNR1VNVXZJSNQ2VSDGWC80D9W0YG
     41 
     42 # Auditor offline public key.
     43 auditor_pub: P6B7ZS7Y1Y12S0VP0PAJ1GQGSHW8RE4NSBTP8PR254J18SK24MH0
     44 
     45 # URL with merchants accepting this exchange.
     46 exchange_shopping_url: "https://map.taler-ops.ch/"
     47 
     48 # Name of Terms of service resource file
     49 exchange_terms_etag: "exchange-tos-tops-v0"
     50 
     51 # Name of Privacy policy resource file
     52 exchange_pp_etag: "exchange-pp-v0"
     53 
     54 # Full BIC of exchange account
     55 exchange_bank_account_bic: "POFICHBEXXX"
     56 
     57 # Full Payto URI of exchange account (for credit and debit)
     58 exchange_bank_account_iban: "CH9709000000166556130"
     59 
     60 # Full Payto URI of exchange account (for credit and debit)
     61 exchange_bank_account_payto: "payto://iban/{{ exchange_bank_account_iban }}?receiver-name=Taler+Operations+AG"
     62 # Port to be used by libeufin-nexus for the taler-exchange-wire-gateway
     63 libeufin_port: 8082
     64 # Name of the bank dialect
     65 libeufin_nexus_bank_dialect: "postfinance"
     66 # SPA dialect (tops, gls, magnet, ...)
     67 exchange_spa_dialect: "tops"
     68 # Business name of the exchange operator
     69 exchange_operator_legal_name: "Taler Operations AG"
     70 # Where to send people after they passed KYC.
     71 kyc_thank_you_url: https://taler-ops.ch/en/thank-you-kyc.html
     72 # Template to use for identification of individuals with KYCAID
     73 kycaid_template_individual: tmpl_xxx
     74 # Template to use for identification of businesses with KYCAID
     75 kycaid_template_business: tmpl_xxx
     76 
     77 # Regex specifying allowed phone numbers for the SMS check
     78 exchange_aml_program_tops_sms_hint: "Swiss mobile number (+417...) required"
     79 exchange_aml_program_tops_sms_example: "+41748224521"
     80 exchange_aml_program_tops_sms_regex: "\\\\+417[0-9]+"
     81 
     82 # Regex specifying allowed country names for the postal address check
     83 exchange_aml_program_tops_postal_country_hint: "Swiss address required"
     84 exchange_aml_program_tops_postal_example: "Max Mustermann\\nBahnhofsplatz 1\\n4201 Biel/Bienne"
     85 exchange_aml_program_tops_postal_country_regex: "CH|Ch|ch"
     86 
     87 # Tool to use for sanction list checking
     88 exchange_sanction_helper: taler-exchange-helper-sanctions-dummy
     89 
     90 # Secrets are taken from the vault file and substituted via
     91 # the vault_* variables.
     92 #
     93 # YOU MAY ONLY edit the vault.yml file via
     94 # $ ansible-vault edit inventories/host_vars/spec/vault.yml
     95 # to decrease the likelihood of unencrypted secrets ending up in git.
     96 # Symmetric encryption secret for KYC attribute encryption.
     97 exchange_attribute_encryption_key: "{{ vault_exchange_attribute_encryption_key }}"
     98 
     99 # EBICS access details
    100 libeufin_nexus_ebics_host_base_url: https://ebics.postfinance.ch/ebics/ebics.aspx
    101 libeufin_nexus_ebics_host_id: PFEBICS
    102 libeufin_nexus_ebics_user_id: "{{ vault_libeufin_nexus_ebics_user_id }}"
    103 libeufin_nexus_ebics_partner_id: "{{ vault_libeufin_nexus_ebics_partner_id }}"
    104 libeufin_nexus_ebics_system_id: "{{ vault_libeufin_nexus_ebics_system_id }}"
    105 
    106 # Authorization token for the telesign SMS service
    107 # "Basic" is pre-pended by the shell script
    108 sms_challenger_telesign_auth_token: "{{ vault_sms_challenger_telesign_auth_token }}"
    109 
    110 sms_challenger_clicksend_username: "{{ vault_sms_challenger_clicksend_username }}"
    111 sms_challenger_clicksend_api_key: "{{ vault_sms_challenger_clicksend_api_key }}"
    112 
    113 sms_challenger_aspsms_apikey: "{{ vault_sms_challenger_aspsms_apikey }}"
    114 sms_challenger_aspsms_password: "{{ vault_sms_challenger_aspsms_password }}"
    115 
    116 # Authorization data for the pingen postal service
    117 postal_challenger_pingen_client_id: "{{ vault_postal_challenger_pingen_client_id }}"
    118 postal_challenger_pingen_client_secret: "{{ vault_postal_challenger_pingen_client_secret }}"
    119 postal_challenger_pingen_org_id: "{{ vault_postal_challenger_pingen_org_id }}"
    120 
    121 # KYCaid access token
    122 exchange_kycaid_access_token: "{{ vault_exchange_kycaid_access_token }}"
    123 
    124 # Bearer access token for the auditor SPA (set via browser extension to set Authorization HTTP header on auditor.$DOMAIN!)
    125 auditor_access_token: "{{ vault_auditor_access_token }}"