majic-ansible-roles Files · testsite/group

Files @ fb163acf23e7

Branch filter:

Location: majic-ansible-roles/testsite/group_vars/xmpp.yml

fb163acf23e7 1.1 KiB text/x-yaml Show Annotation Show as Raw Download as Raw

branko

MAR-19: Fixed handling off TLS private keys and certificates. Added some common parameters for defining where the TLS private keys and certificates reside.

---

ldap_client_config:
  - comment: Set the base DN
    option: BASE
    value: "{{ testsite_ldap_base }}"
  - comment: Set the default URI
    option: URI
    value: ldapi:///
  - comment: Set the default bind DN
    option: BINDDN
    value: cn=admin,{{ testsite_ldap_base }}
  - comment: Set the LDAP TLS truststore
    option: TLS_CACERT
    value: /etc/ssl/certs/ca.pem

local_mail_aliases:
  root: "root john.doe@{{ testsite_domain }}"

smtp_relay_host: mail.{{ testsite_domain }}

smtp_relay_truststore: /etc/ssl/certs/ca.pem

xmpp_administrators:
  - john.doe@{{ testsite_domain }}

xmpp_tls_key: "{{ inventory_dir }}/tls/xmpp.{{ testsite_domain }}_xmpp.key"

xmpp_tls_certificate: "{{ inventory_dir }}/tls/xmpp.{{ testsite_domain }}_xmpp.pem"

xmpp_domains:
  - "{{ testsite_domain }}"

xmpp_ldap_server: ldap.{{ testsite_domain }}

xmpp_ldap_bind_dn: cn=xmpp,ou=services,{{ testsite_ldap_base }}

xmpp_ldap_password: xmpp

xmpp_ldap_filter: '(&(memberOf=cn=xmpp,ou=groups,{{ testsite_ldap_base }})(mail=$user@$host))'

xmpp_ldap_scope: "onelevel"

xmpp_ldap_base: "ou=people,{{ testsite_ldap_base }}"