42 lines
1.7 KiB
YAML
42 lines
1.7 KiB
YAML
|
---
|
||
|
|
|
||
|
|
icinga2_server_mariadb_root_password: "{{ vault_icinga2_server_mariadb_root_password }}"
|
||
|
|
icinga2_server_icingaweb2_main_user_password: "{{ vault_icinga2_server_icingaweb2_main_user_password }}"
|
||
|
|
icinga2_server_icingaweb2_main_user_password_hash_manual: "{{ vault_icinga2_server_icingaweb2_main_user_password_hash_manual }}"
|
||
|
|
|
||
|
|
icinga2_server_mariadb_users:
|
||
|
|
icinga_user:
|
||
|
|
name: "icinga_user"
|
||
|
|
password: "{{ vault_icinga2_server_mariadb_users_icinga_password }}"
|
||
|
|
priv: "icinga.*:ALL"
|
||
|
|
icingaweb2_user:
|
||
|
|
name: "icingaweb2_user"
|
||
|
|
password: "{{ vault_icinga2_server_mariadb_users_icingaweb2_password }}"
|
||
|
|
priv: "icingaweb2.*:ALL"
|
||
|
|
|
||
|
|
icinga2_server_api_users:
|
||
|
|
- username: root
|
||
|
|
password: "{{ vault_icinga2_server_api_users_root_password }}"
|
||
|
|
permissions: '*'
|
||
|
|
|
||
|
|
# Role ansible-role-certbot : defina auto renew, schedule, ...
|
||
|
|
certbot_auto_renew: true
|
||
|
|
certbot_auto_renew_user: "root"
|
||
|
|
certbot_auto_renew_hour: "3"
|
||
|
|
certbot_auto_renew_minute: "36"
|
||
|
|
certbot_auto_renew_options: "--quiet --no-self-upgrade --pre-hook \"systemctl stop apache2\" --post-hook \"systemctl start apache2\" --deploy-hook \"cp -pf /etc/letsencrypt/live/{{ inventory_hostname }}/*.pem /etc/apache2/ && chown www-data: /etc/apache2/*.pem\""
|
||
|
|
certbot_create_if_missing: true
|
||
|
|
certbot_create_method: standalone
|
||
|
|
certbot_create_standalone_stop_services:
|
||
|
|
- apache2
|
||
|
|
certbot_certs:
|
||
|
|
- domains:
|
||
|
|
- "{{ inventory_hostname }}"
|
||
|
|
|
||
|
|
icinga2_server_ticket_salt: "{{ vault_icinga2_server_ticket_salt }}"
|
||
|
|
icinga2_server_custom_hostgroup: wirebrass
|
||
|
|
icinga2_server_icingaweb2_main_user_email: "{{ vault_icinga2_server_icingaweb2_main_user_email }}"
|
||
|
|
|
||
|
|
icinga2_server_icinga_ssh_pubkey: "{{ vault_icinga2_server_icinga_ssh_pubkey }}"
|
||
|
|
icinga2_server_icinga_ssh_privkey: "{{ vault_icinga2_server_icinga_ssh_privkey }}"
|