| -rw-r--r-- | .ansible-lint | 9L |
| -rw-r--r-- | .gitignore | 19L |
| -rw-r--r-- | COPYING | 661L |
| -rw-r--r-- | Containerfile | 31L |
| -rw-r--r-- | README | 509L |
| -rw-r--r-- | TIPS.md | 11L |
| -rw-r--r-- | TODO | 3L |
| -rw-r--r-- | ansible.cfg | 17L |
| -rwxr-xr-x | backup | 20L |
| -rw-r--r-- | contrib/ci/Containerfile | 5L |
| -rwxr-xr-x | contrib/ci/ci.sh | 44L |
| -rwxr-xr-x | contrib/ci/jobs/001-build/build.sh | 7L |
| -rwxr-xr-x | contrib/ci/jobs/001-build/job.sh | 6L |
| -rwxr-xr-x | contrib/decrypt | 37L |
| -rwxr-xr-x | contrib/encrypt | 25L |
| -rw-r--r-- | contrib/test-certbot | 94L |
| -rwxr-xr-x | contrib/test-fact-helpers.sh | 54L |
| -rw-r--r-- | contrib/tests/test_backup.py | 180L |
| -rw-r--r-- | contrib/tests/test_deployment.py | 266L |
| -rw-r--r-- | contrib/tests/test_monitoring.py | 353L |
| -rw-r--r-- | contrib/tests/test_monitoring_listeners.py | 77L |
| -rw-r--r-- | contrib/tests/test_upgrade_policy.py | 80L |
| -rwxr-xr-x | deploy | 19L |
| -rwxr-xr-x | extract-borg-key | 25L |
| -rw-r--r-- | inventories/default | 13L |
| -rw-r--r-- | inventories/group_vars/all/defaults.yml | 60L |
| -rw-r--r-- | inventories/group_vars/testing/test-public.yml | 59L |
| -rw-r--r-- | inventories/group_vars/testing/test-secrets.yml | 25L |
| -rw-r--r-- | inventories/host_vars/fdold-acai-tops/test-public.yml | 64L |
| -rw-r--r-- | inventories/host_vars/fdold-acai-tops/test-secrets.yml | 24L |
| -rw-r--r-- | inventories/host_vars/podman-localhost/test-public.yml | 61L |
| -rw-r--r-- | inventories/host_vars/podman-localhost/test-secrets.yml | 24L |
| -rw-r--r-- | inventories/host_vars/rusty/monitoring-client-secrets.yml | 42L |
| -rw-r--r-- | inventories/host_vars/rusty/monitoring-client.yml | 55L |
| -rw-r--r-- | inventories/host_vars/rusty/vars.yml | 136L |
| -rw-r--r-- | inventories/host_vars/rusty/vault.yml | 91L |
| -rw-r--r-- | inventories/host_vars/spec/vars.yml | 125L |
| -rw-r--r-- | inventories/host_vars/spec/vault.yml | 98L |
| -rw-r--r-- | playbooks/backup.yml | 12L |
| -rw-r--r-- | playbooks/borg-ssh-export.yml | 11L |
| -rw-r--r-- | playbooks/borg-start.yml | 12L |
| -rw-r--r-- | playbooks/pixel-borg.yml | 12L |
| -rw-r--r-- | playbooks/reboot.yml | 13L |
| -rw-r--r-- | playbooks/restore.yml | 48L |
| -rw-r--r-- | playbooks/sanctionlist-check.yml | 12L |
| -rw-r--r-- | playbooks/setup.yml | 162L |
| -rwxr-xr-x | reboot | 19L |
| -rwxr-xr-x | restore | 78L |
| -rw-r--r-- | roles/auditor/tasks/main.yml | 136L |
| -rw-r--r-- | roles/auditor/templates/etc/nginx/auditor-auth.conf.inc.j2 | 4L |
| -rw-r--r-- | roles/auditor/templates/etc/nginx/sites-available/auditor-http.conf.j2 | 14L |
| -rw-r--r-- | roles/auditor/templates/etc/nginx/sites-available/auditor-nginx.conf.j2 | 34L |
| -rw-r--r-- | roles/auditor/templates/etc/taler-auditor/conf.d/taler-auditor-master.conf.j2 | 33L |
| l--------- | roles/auditor/templates/etc/taler-auditor/secrets/auditor-accountcredentials-primary.secret.conf.j2 | 1L |
| -rw-r--r-- | roles/backup/handlers/main.yml | 4L |
| -rw-r--r-- | roles/backup/tasks/main.yml | 12L |
| -rw-r--r-- | roles/borg-ssh-export/tasks/main.yml | 30L |
| -rw-r--r-- | roles/borg-start/tasks/main.yml | 76L |
| -rw-r--r-- | roles/borg-start/templates/root/.ssh/config | 6L |
| -rw-r--r-- | roles/borg-start/templates/root/bin/borg-backup.sh | 122L |
| -rw-r--r-- | roles/cert/tasks/main.yml | 98L |
| -rw-r--r-- | roles/challenger/defaults/main.yml | 5L |
| -rw-r--r-- | roles/challenger/files/etc/challenger/email-message-template.txt | 1L |
| -rw-r--r-- | roles/challenger/files/etc/challenger/postal-message-template.txt | 20L |
| -rw-r--r-- | roles/challenger/files/etc/challenger/sms-message-template.txt | 1L |
| -rw-r--r-- | roles/challenger/files/etc/systemd/system/email-challenger-httpd.service | 21L |
| -rw-r--r-- | roles/challenger/files/etc/systemd/system/postal-challenger-httpd.service | 23L |
| -rw-r--r-- | roles/challenger/files/etc/systemd/system/sms-challenger-httpd.service | 23L |
| -rw-r--r-- | roles/challenger/files/etc/taler-exchange/conf.d/challenger.conf | 6L |
| -rw-r--r-- | roles/challenger/files/usr/local/bin/mock-mfa-email | 47L |
| -rw-r--r-- | roles/challenger/files/usr/local/bin/mock-mfa-sms | 47L |
| -rw-r--r-- | roles/challenger/tasks/main.yml | 8L |
| -rw-r--r-- | roles/challenger/tasks/post-exchange.yml | 38L |
| -rw-r--r-- | roles/challenger/tasks/pre-exchange.yml | 378L |
| -rw-r--r-- | roles/challenger/templates/etc/challenger/challenger-email.conf.j2 | 49L |
| -rw-r--r-- | roles/challenger/templates/etc/challenger/challenger-postal.conf.j2 | 45L |
| -rw-r--r-- | roles/challenger/templates/etc/challenger/challenger-sms.conf.j2 | 46L |
| -rw-r--r-- | roles/challenger/templates/etc/challenger/postal-challenger.env.j2 | 6L |
| -rw-r--r-- | roles/challenger/templates/etc/challenger/sms-challenger.env.j2 | 23L |
| -rw-r--r-- | roles/challenger/templates/etc/nginx/conf.d/challenger-tls.conf.inc | 4L |
| -rw-r--r-- | roles/challenger/templates/etc/nginx/sites-available/email-challenger-http.conf.j2 | 15L |
| -rw-r--r-- | roles/challenger/templates/etc/nginx/sites-available/email-challenger-nginx.conf.j2 | 21L |
| -rw-r--r-- | roles/challenger/templates/etc/nginx/sites-available/postal-challenger-http.conf.j2 | 14L |
| -rw-r--r-- | roles/challenger/templates/etc/nginx/sites-available/postal-challenger-nginx.conf.j2 | 22L |
| -rw-r--r-- | roles/challenger/templates/etc/nginx/sites-available/sms-challenger-http.conf.j2 | 14L |
| -rw-r--r-- | roles/challenger/templates/etc/nginx/sites-available/sms-challenger-nginx.conf.j2 | 22L |
| -rw-r--r-- | roles/challenger/templates/etc/taler-exchange/secrets/challenger-email.secret.conf.j2 | 13L |
| -rw-r--r-- | roles/challenger/templates/etc/taler-exchange/secrets/challenger-postal.secret.conf.j2 | 13L |
| -rw-r--r-- | roles/challenger/templates/etc/taler-exchange/secrets/challenger-sms.secret.conf.j2 | 13L |
| -rw-r--r-- | roles/common_packages/files/dhparam_pregenerated.pem | 13L |
| -rw-r--r-- | roles/common_packages/files/etc/apt/keyrings/taler-systems.gpg | 1756B |
| -rw-r--r-- | roles/common_packages/files/etc/apt/preferences.d/limit-taler-repo | 6L |
| -rwxr-xr-x | roles/common_packages/files/setup-challenger-client-id-fact | 28L |
| -rwxr-xr-x | roles/common_packages/files/setup-secret-fact | 19L |
| -rw-r--r-- | roles/common_packages/handlers/main.yml | 5L |
| -rw-r--r-- | roles/common_packages/tasks/main.yml | 126L |
| -rw-r--r-- | roles/common_packages/tasks/upgrade.yml | 84L |
| -rw-r--r-- | roles/common_packages/templates/upgrade-policy-rc.d.j2 | 17L |
| -rw-r--r-- | roles/database/tasks/main.yml | 19L |
| -rw-r--r-- | roles/database_restore/defaults/main.yml | 6L |
| -rw-r--r-- | roles/database_restore/tasks/main.yml | 309L |
| -rw-r--r-- | roles/devtesting/tasks/disable.yml | 32L |
| -rw-r--r-- | roles/devtesting/tasks/enable.yml | 65L |
| -rw-r--r-- | roles/devtesting/tasks/files/etc/sudoers.d/devtesting | 2L |
| -rw-r--r-- | roles/devtesting/tasks/files/taler-devtesting | 107L |
| -rwxr-xr-x | roles/devtesting/tasks/files/taler-devtesting-exchange-challenger-setup | 306L |
| -rw-r--r-- | roles/devtesting/tasks/main.yml | 8L |
| -rw-r--r-- | roles/devtesting/tasks/templates/authorized_keys | 3L |
| -rw-r--r-- | roles/exchange-sanctionlist-import/tasks/main.yml | 35L |
| -rw-r--r-- | roles/exchange/defaults/main.yml | 4L |
| -rw-r--r-- | roles/exchange/files/var/lib/taler-exchange/sanctions-swiss.json | 179782L |
| -rw-r--r-- | roles/exchange/handlers/main.yml | 9L |
| -rw-r--r-- | roles/exchange/tasks/main.yml | 230L |
| -rw-r--r-- | roles/exchange/templates/etc/nginx/sites-available/exchange-http.conf.j2 | 14L |
| -rw-r--r-- | roles/exchange/templates/etc/nginx/sites-available/exchange-nginx.conf.j2 | 42L |
| -rw-r--r-- | roles/exchange/templates/etc/taler-exchange/conf.d/exchange-business.conf.j2 | 76L |
| -rw-r--r-- | roles/exchange/templates/etc/taler-exchange/secrets/exchange-accountcredentials-primary.secret.conf.j2 | 4L |
| -rw-r--r-- | roles/exchange/templates/etc/taler-exchange/secrets/exchange-attributes.secret.conf.j2 | 2L |
| -rw-r--r-- | roles/exchange_tops/defaults/main.yml | 11L |
| -rw-r--r-- | roles/exchange_tops/tasks/main.yml | 65L |
| -rw-r--r-- | roles/exchange_tops/templates/etc/taler-exchange/conf.d/denominations.conf.j2 | 229L |
| -rw-r--r-- | roles/exchange_tops/templates/etc/taler-exchange/conf.d/kyc-rules.conf.j2 | 426L |
| -rw-r--r-- | roles/exchange_tops/templates/etc/taler-exchange/secrets/exchange-kyc-provider-business.secret.conf.j2 | 8L |
| -rw-r--r-- | roles/exchange_tops/templates/etc/taler-exchange/secrets/exchange-kyc-provider-individual.secret.conf.j2 | 8L |
| -rw-r--r-- | roles/exchange_tops/templates/etc/taler-exchange/taler-exchange.env.j2 | 9L |
| -rw-r--r-- | roles/libeufin-nexus/files/etc/sudoers.d/libeufin-nexus-export | 1L |
| -rw-r--r-- | roles/libeufin-nexus/files/etc/sudoers.d/libeufin-nexus-import | 1L |
| -rw-r--r-- | roles/libeufin-nexus/files/home/libeufin-nexus-export/.ssh/authorized_keys | 3L |
| -rw-r--r-- | roles/libeufin-nexus/files/home/libeufin-nexus-import/.ssh/authorized_keys | 3L |
| -rw-r--r-- | roles/libeufin-nexus/files/usr/local/bin/libeufin-nexus-export.sh | 2L |
| -rw-r--r-- | roles/libeufin-nexus/files/usr/local/bin/libeufin-nexus-import.sh | 2L |
| -rw-r--r-- | roles/libeufin-nexus/tasks/main.yml | 261L |
| -rw-r--r-- | roles/libeufin-nexus/templates/etc/libeufin/libeufin-nexus-ebics.conf.j2 | 16L |
| -rw-r--r-- | roles/libeufin-nexus/templates/etc/libeufin/libeufin-nexus.conf.j2 | 59L |
| -rw-r--r-- | roles/libeufin-nexus/templates/etc/libeufin/wire-gateway.secret.conf.j2 | 2L |
| -rw-r--r-- | roles/libeufin-nexus/templates/etc/nginx/sites-available/nexus-http.conf.j2 | 14L |
| -rw-r--r-- | roles/libeufin-nexus/templates/etc/nginx/sites-available/nexus-nginx.conf.j2 | 35L |
| -rw-r--r-- | roles/monitoring/defaults/main.yml | 8L |
| -rw-r--r-- | roles/monitoring/files/node-exporter-proxy.service | 30L |
| -rw-r--r-- | roles/monitoring/files/validate-bundle.py | 141L |
| -rw-r--r-- | roles/monitoring/handlers/main.yml | 48L |
| -rw-r--r-- | roles/monitoring/tasks/fluent-bit.yml | 153L |
| -rw-r--r-- | roles/monitoring/tasks/main.yml | 120L |
| -rw-r--r-- | roles/monitoring/tasks/preflight.yml | 71L |
| -rw-r--r-- | roles/monitoring/templates/fluent-bit.conf.j2 | 51L |
| -rw-r--r-- | roles/monitoring/templates/nginx.conf.j2 | 58L |
| -rw-r--r-- | roles/monitoring/templates/node-exporter-default.j2 | 2L |
| -rw-r--r-- | roles/pixel_borg/files/home/borg/.ssh/authorized_keys | 1L |
| -rw-r--r-- | roles/pixel_borg/tasks/main.yml | 63L |
| -rw-r--r-- | roles/post_deployment_checks/defaults/main.yml | 88L |
| -rw-r--r-- | roles/post_deployment_checks/tasks/main.yml | 71L |
| -rw-r--r-- | roles/reboot/tasks/main.yml | 7L |
| -rw-r--r-- | roles/start_services/tasks/main.yml | 45L |
| -rw-r--r-- | roles/stop_services/defaults/main.yml | 3L |
| -rw-r--r-- | roles/stop_services/tasks/main.yml | 33L |
| -rw-r--r-- | roles/webserver/files/etc/nginx/conf.d/listen.conf.inc | 27L |
| -rw-r--r-- | roles/webserver/files/etc/nginx/conf.d/log-format-apm.conf | 27L |
| -rw-r--r-- | roles/webserver/handlers/main.yml | 12L |
| -rw-r--r-- | roles/webserver/tasks/main.yml | 67L |
| -rwxr-xr-x | sanction-check | 30L |
| -rwxr-xr-x | setup-pixel-borg | 33L |
| -rwxr-xr-x | stage-activate | 29L |
| -rw-r--r-- | stage-offline.conf | 10L |
| -rwxr-xr-x | start-borg-backups | 28L |
| -rwxr-xr-x | test | 98L |
| -rw-r--r-- | test-ansible.cfg | 6L |
| -rw-r--r-- | test-master.priv | 32B |
| -rw-r--r-- | tops.conf | 37L |
| -rw-r--r-- | vault_pass.txt.gpg | 896B |
