s2s_secure_auth = false

-- Path to Prosody's PID file.

pidfile = "/var/run/prosody/prosody.pid"

-- Authentication backend.

authentication = "ldap"

ldap_server = "{{ xmpp_ldap_server }}"

ldap_rootdn = "{{ xmpp_ldap_bind_dn }}"

ldap_password = "{{ xmpp_ldap_password }}"

ldap_filter = "{{ xmpp_ldap_filter }}"

ldap_scope = "{{ xmpp_ldap_scope }}"

ldap_base = "{{ xmpp_ldap_base }}"

-- Storage backend.

storage = "internal"

-- Logging configuration.

log = {

  info = "/var/log/prosody/prosody.log"; -- Change 'info' to 'debug' for verbose logging

  error = "/var/log/prosody/prosody.err";

  "*syslog";

}

common_packages:

  - emacs24-nox

  - screen

  - debconf-utils

  - colordiff

  - unzip

ca_certificates:

  - "{{ inventory_dir }}/tls/ca.pem"

incoming_connection_limit: 2/second

  - comment: Set the base DN

    option: BASE

    value: "{{ testsite_ldap_base }}"

  - comment: Set the default URI

    option: URI

    value: ldapi:///

  - comment: Set the default bind DN

    option: BINDDN

    value: cn=admin,{{ testsite_ldap_base }}

  - comment: Set the LDAP TLS truststore

    option: TLS_CACERT

    value: /etc/ssl/certs/ca.pem

ldap_server_domain: "{{ testsite_domain }}"

ldap_server_organization: "Example Inc."

ldap_server_log_level: 256

ldap_server_tls_certificate: "{{ inventory_dir }}/tls/ldap.{{ testsite_domain }}_ldap.pem"

ldap_server_tls_key: "{{ inventory_dir }}/tls/ldap.{{ testsite_domain }}_ldap.key"

ldap_server_ssf: 128

ldap_permissions:

  - >

    to *

    by dn.exact=gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth manage

---

mail_ldap_url: ldap://ldap.{{ testsite_domain }}/

mail_ldap_tls_truststore: /etc/ssl/certs/ca.pem

mail_service_ldap_base_dn: "{{ testsite_ldap_base }}"

mail_ldap_postfix_password: postfix

mail_ldap_dovecot_password: dovecot

mail_user: vmail

mail_user_uid: 5000

mail_user_gid: 5000

imap_tls_certificate: "{{ inventory_dir }}/tls/mail.{{ testsite_domain }}_imap.pem"

imap_tls_key: "{{ inventory_dir }}/tls/mail.{{ testsite_domain }}_imap.key"

---

local_mail_aliases:

  root: "root john.doe@{{ testsite_domain }}"

smtp_relay_host: mail.{{ testsite_domain }}

smtp_relay_truststore: /etc/ssl/certs/ca.pem

https_tls_key: "{{ inventory_dir }}/tls/web.{{ testsite_domain }}_https.key"

https_tls_certificate: "{{ inventory_dir }}/tls/web.{{ testsite_domain }}_https.pem"

web_default_title: "Welcome to Example Inc."

web_default_message: "You are attempting to access the web server using a wrong name or an IP address. Please check your URL."

---

local_mail_aliases:

  root: "root john.doe@{{ testsite_domain }}"

smtp_relay_host: mail.{{ testsite_domain }}

smtp_relay_truststore: /etc/ssl/certs/ca.pem

xmpp_administrators:

  - john.doe@{{ testsite_domain }}

xmpp_tls_key: "{{ inventory_dir }}/tls/xmpp.{{ testsite_domain }}_xmpp.key"