ansible-taler-exchange

Ansible playbook to deploy a production Taler Exchange
Log | Files | Refs | README | LICENSE

main.yml (2832B)


      1 ---
      2 post_deployment_check_retries: 10
      3 post_deployment_check_delay: 1
      4 post_deployment_http_timeout: 5
      5 # Cold exchange startup generates a year of RSA keys before serving requests.
      6 # Allow up to roughly six minutes without extending failed-unit checks.
      7 post_deployment_http_retries: 60
      8 
      9 post_deployment_systemd_checks:
     10   # Exchange
     11   - unit: taler-exchange.target
     12     enabled: true
     13   - unit: taler-exchange-httpd.service
     14     enabled: true
     15   - unit: taler-exchange-wirewatch.service
     16     enabled: true
     17   - unit: taler-exchange-aggregator.service
     18     enabled: true
     19   - unit: taler-exchange-closer.service
     20     enabled: true
     21   - unit: taler-exchange-expire.service
     22     enabled: true
     23   - unit: taler-exchange-transfer.service
     24     enabled: true
     25   - unit: taler-exchange-secmod-cs.service
     26     enabled: true
     27   - unit: taler-exchange-secmod-eddsa.service
     28     enabled: true
     29   - unit: taler-exchange-secmod-rsa.service
     30     enabled: true
     31   - unit: taler-exchange-sanctionscheck.service
     32     enabled: >-
     33       {{
     34         sanction_list is defined
     35         and 'taler-exchange-sanctionscheck.service' in ansible_facts.services
     36       }}
     37 
     38   # Auditor
     39   - unit: taler-auditor-httpd.service
     40     enabled: "{{ deploy_auditor | bool }}"
     41 
     42   # LibEuFin Nexus
     43   - unit: libeufin-nexus-httpd.service
     44     enabled: true
     45   - unit: libeufin-nexus.target
     46     enabled: "{{ use_ebics | bool }}"
     47   - unit: libeufin-nexus-ebics-fetch.service
     48     enabled: "{{ use_ebics | bool }}"
     49   - unit: libeufin-nexus-ebics-submit.service
     50     enabled: "{{ use_ebics | bool }}"
     51 
     52   # Challengers
     53   - unit: sms-challenger-httpd.service
     54     enabled: "{{ deploy_challenger | bool }}"
     55   - unit: email-challenger-httpd.service
     56     enabled: "{{ deploy_challenger | bool }}"
     57   - unit: postal-challenger-httpd.service
     58     enabled: "{{ deploy_challenger | bool }}"
     59 
     60 post_deployment_http_checks:
     61   - name: Taler exchange /config
     62     url: http://localhost/config
     63     unix_socket: /var/run/taler-exchange/httpd/exchange-http.sock
     64     enabled: true
     65 
     66   - name: LibEuFin Nexus /taler-prepared-transfer/config
     67     url: "http://127.0.0.1:{{ libeufin_port }}/taler-prepared-transfer/config"
     68     enabled: true
     69 
     70   - name: Taler auditor /config
     71     url: http://localhost/config
     72     unix_socket: /var/run/taler-auditor/httpd/auditor-http.sock
     73     enabled: "{{ deploy_auditor | bool }}"
     74 
     75   - name: SMS Challenger /config
     76     url: http://localhost/config
     77     unix_socket: /run/challenger-sms/challenger-http.sock
     78     enabled: "{{ deploy_challenger | bool }}"
     79 
     80   - name: email Challenger /config
     81     url: http://localhost/config
     82     unix_socket: /run/challenger-email/challenger-http.sock
     83     enabled: "{{ deploy_challenger | bool }}"
     84 
     85   - name: postal Challenger /config
     86     url: http://localhost/config
     87     unix_socket: /run/challenger-postal/challenger-http.sock
     88     enabled: "{{ deploy_challenger | bool }}"