vars.yml (5127B)
1 # Public variables for the Taler Operations AG (TOPS) deployment 2 # Deploy challenger? 3 deploy_challenger: true 4 # What kind of environment are we deploying? 5 deployment_kind: "tops" 6 # Write EBICS configuration (with values in secret config) 7 configure_ebics: true 8 # Main domain name. 9 domain_name: "taler-ops.ch" 10 exchange_domain: "exchange.{{ domain_name }}" 11 # Our internal hostname 12 target_host_name: "spec.taler-ops.ch" 13 # Suite for taler packages. 14 taler_repo_suites: trixie 15 # Deploy EBICS configuration (true/false). 16 use_ebics: false 17 # Our currency. 18 currency: CHF 19 # Smallest unit of the currency for wire transfers. 20 currency_round_unit: "CHF:0.01" 21 # Sanction list to use, comment out to disable 22 # sanction_list: sanctions-swiss.json 23 # Base URL of the exchange REST API 24 exchange_base_url: "https://exchange.{{ domain_name }}/" 25 # Base URL of the auditor REST API 26 auditor_base_url: "https://auditor.{{ domain_name }}/" 27 # Exchange offline master public key. 28 exchange_master_pub: 9V0G82S7JQW2ZRYF7BMGKKQ1TNR1VNVXZJSNQ2VSDGWC80D9W0YG 29 # Auditor offline public key. 30 auditor_pub: P6B7ZS7Y1Y12S0VP0PAJ1GQGSHW8RE4NSBTP8PR254J18SK24MH0 31 # URL with merchants accepting this exchange. 32 exchange_shopping_url: "https://map.taler-ops.ch/" 33 # Name of Terms of service resource file 34 exchange_terms_etag: "exchange-tos-tops-v0" 35 # Name of Privacy policy resource file 36 exchange_pp_etag: "exchange-pp-v0" 37 # Full BIC of exchange account 38 exchange_bank_account_bic: "POFICHBEXXX" 39 # Full Payto URI of exchange account (for credit and debit) 40 exchange_bank_account_iban: "CH9709000000166556130" 41 # Full Payto URI of exchange account (for credit and debit) 42 exchange_bank_account_payto: "payto://iban/{{ exchange_bank_account_iban }}?receiver-name=Taler+Operations+AG" 43 # Port to be used by libeufin-nexus for the taler-exchange-wire-gateway 44 libeufin_port: 8082 45 # Name of the bank dialect 46 libeufin_nexus_bank_dialect: "postfinance" 47 # SPA dialect (tops, gls, magnet, ...) 48 exchange_spa_dialect: "tops" 49 # Business name of the exchange operator 50 exchange_operator_legal_name: "Taler Operations AG" 51 # Where to send people after they passed KYC. 52 kyc_thank_you_url: https://taler-ops.ch/en/thank-you-kyc.html 53 # Template to use for identification of individuals with KYCAID 54 kycaid_template_individual: tmpl_xxx 55 # Template to use for identification of businesses with KYCAID 56 kycaid_template_business: tmpl_xxx 57 # Regex specifying allowed phone numbers for the SMS check 58 exchange_aml_program_tops_sms_hint: "Swiss mobile number (+417...) required" 59 exchange_aml_program_tops_sms_example: "+41748224521" 60 exchange_aml_program_tops_sms_regex: "\\\\+417[0-9]+" 61 # Regex specifying allowed country names for the postal address check 62 exchange_aml_program_tops_postal_country_hint: "Swiss address required" 63 exchange_aml_program_tops_postal_example: "Max Mustermann\\nBahnhofsplatz 1\\n4201 Biel/Bienne" 64 exchange_aml_program_tops_postal_country_regex: "CH|Ch|ch" 65 # Tool to use for sanction list checking 66 exchange_sanction_helper: taler-exchange-helper-sanctions-dummy 67 68 # Secrets are taken from the vault file and substituted via 69 # the vault_* variables. 70 # 71 # YOU MAY ONLY edit the vault.yml file via 72 # $ ansible-vault edit inventories/host_vars/spec/vault.yml 73 # to decrease the likelihood of unencrypted secrets ending up in git. 74 # Symmetric encryption secret for KYC attribute encryption. 75 exchange_attribute_encryption_key: "{{ vault_exchange_attribute_encryption_key }}" 76 # EBICS access details 77 libeufin_nexus_ebics_host_base_url: https://ebics.postfinance.ch/ebics/ebics.aspx 78 libeufin_nexus_ebics_host_id: PFEBICS 79 libeufin_nexus_ebics_user_id: "{{ vault_libeufin_nexus_ebics_user_id }}" 80 libeufin_nexus_ebics_partner_id: "{{ vault_libeufin_nexus_ebics_partner_id }}" 81 libeufin_nexus_ebics_system_id: "{{ vault_libeufin_nexus_ebics_system_id }}" 82 83 # Authorization token for the telesign SMS service 84 # "Basic" is pre-pended by the shell script 85 sms_challenger_telesign_auth_token: "{{ vault_sms_challenger_telesign_auth_token }}" 86 87 sms_challenger_clicksend_username: "{{ vault_sms_challenger_clicksend_username }}" 88 sms_challenger_clicksend_api_key: "{{ vault_sms_challenger_clicksend_api_key }}" 89 90 sms_challenger_aspsms_apikey: "{{ vault_sms_challenger_aspsms_apikey }}" 91 sms_challenger_aspsms_password: "{{ vault_sms_challenger_aspsms_password }}" 92 93 # Authorization data for the pingen postal service 94 postal_challenger_pingen_client_id: "{{ vault_postal_challenger_pingen_client_id }}" 95 postal_challenger_pingen_client_secret: "{{ vault_postal_challenger_pingen_client_secret }}" 96 postal_challenger_pingen_org_id: "{{ vault_postal_challenger_pingen_org_id }}" 97 98 # KYCaid access token 99 exchange_kycaid_access_token: "{{ vault_exchange_kycaid_access_token }}" 100 101 # Bearer access token for the auditor SPA (set via browser extension to set Authorization HTTP header on auditor.$DOMAIN!) 102 auditor_access_token: "{{ vault_auditor_access_token }}" 103 104 # Bearer access token for monitoring.$DOMAIN (must be given to grafana) 105 prometheus_access_token: "{{ vault_prometheus_access_token }}" 106 107 # Bearer access token for loki.taler-systems.com (see that nginx config) 108 loki_access_token: "{{ vault_loki_access_token }}"