infra/playbook.yml

106 lines
3.2 KiB
YAML

---
- hosts: all
roles: [common]
- hosts: gallery
roles: [gallery]
vars:
gallery_https: true
- hosts: pycons
roles: [pelican]
vars:
pelican_user: pycon2010
pelican_https: true
pelican_domain: 2010.pycon.fr
pelican_repo: https://github.com/AFPy/pyconfr_2010
pelican_path_in_repo: 2010/
pelican_home: "/srv/{{ pelican_user }}/"
- hosts: pycons
roles: [pelican]
vars:
pelican_user: pycon2011
pelican_https: true
pelican_domain: 2011.pycon.fr
pelican_repo: https://github.com/AFPy/pyconfr_2010
pelican_path_in_repo: 2011/
pelican_home: "/srv/{{ pelican_user }}/"
- hosts: pycons
roles: [static]
vars:
static_user: pycon2012
static_https: true
static_domain: 2012.pycon.fr
static_repo: https://github.com/AFPy/pyconfr_2012
# - hosts: pycons
# roles: [passbolt]
# vars:
# passbolt_tmpdir: "/srv/passbolt-tmp/"
# passbolt_homedir: "/srv/passbolt/"
# passbolt_webroot: "/srv/passbolt/www/"
# passbolt_use_ssl: True
# passbolt_url: "https://passbolt.afpy.org"
# passbolt_domain: "passbolt.afpy.org"
# passbolt_gpgkey_length: 4096
# passbolt_gpgkey_sublength: 4096
# passbolt_gpgkey_email: "passbolt@afpy.org"
# passbolt_dbpass: "{{ vault_passbolt_dbpass }}"
# passbolt_smtp_sender_email: "passbolt@afpy.org"
# passbolt_php_fpm_user: "www-data"
# passbolt_php_fpm_group: "www-data"
#
# passbolt_php_fpm_includedir: /etc/php/7.0/fpm/pool.d/
# passbolt_php_fpm_listen: /var/run/php/fpm.sock
# passbolt_dbport: 3306
# mysql_root_username: root
# mysql_root_password: "{{ vault_mysql_root_password }}"
# mysql_databases:
# - name: passbolt
# encoding: utf8mb4
# collation: utf8mb4_unicode_ci
# mysql_users:
# - name: passbolt
# password: "{{ vault_passbolt_dbpass }}"
# priv: "passbolt.*:ALL"
# mysql_packages:
# - mariadb-server
# - mariadb-client
# - python-mysqldb
# mysql_bind_address: '127.0.0.1'
# php_memory_limit: "512M"
# php_date_timezone: "Europe/Paris"
# php_webserver_daemon: "nginx"
# php_enable_php_fpm: true
# php_enable_webserver: false
# php_default_version_debian: "7.0"
# nginx_sites:
# passbolt_http:
# - listen 80
# - server_name "{{ passbolt_domain }}"
# - location / {
# return 301 https://{{ passbolt_domain }}$request_uri;
# }
#
# passbolt:
# - listen 443 ssl
# - server_name passbolt.afpy.org
# - server_tokens off
# - include snippets/letsencrypt-{{ passbolt_domain }}.conf
# - root {{ passbolt_webroot }}/webroot/
# - location / { try_files $uri /index.php$is_args$args; }
# - location ~ \.php(/|$) {
# fastcgi_pass unix:{{ passbolt_php_fpm_listen }};
# fastcgi_split_path_info ^(.+\.php)(/.*)$;
# fastcgi_read_timeout 500;
# include fastcgi_params;
# fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
# fastcgi_param SERVER_NAME $http_host;
# fastcgi_param DOCUMENT_ROOT $realpath_root;
# internal;
# }