50 lines
1.3 KiB
YAML
50 lines
1.3 KiB
YAML
---
|
|
# LDAP binding
|
|
# You can hash LDAP passwords with `slappasswd` tool
|
|
ldap_base: 'dc=auro,dc=re'
|
|
ldap_master_ipv4: '10.128.0.11'
|
|
ldap_master_uri: "ldap://{{ ldap_master_ipv4 }}"
|
|
ldap_nslcd_bind_dn: "cn=nslcd,ou=service-users,{{ ldap_base }}"
|
|
ldap_nslcd_passwd: "{{ vault_ldap_nslcd_passwd }}"
|
|
ldap_replica_password: "{{ vault_ldap_replica_password }}"
|
|
ldap_admin_hashed_passwd: "{{ vault_ldap_admin_hashed_passwd }}"
|
|
|
|
# Scripts will tell users to go there to manage their account
|
|
intranet_url: 'https://re2o.auro.re/'
|
|
|
|
# Users in that group will be able to `sudo`
|
|
sudo_group: 'sudoldap'
|
|
|
|
# SSH keys for root account to use when LDAP is broken
|
|
ssh_pub_keys: "{{ vault_ssh_pub_keys }}"
|
|
|
|
# Monitoring
|
|
monitoring_mail: 'monitoring.aurore@lists.crans.org'
|
|
|
|
# Nginx Proxy
|
|
reversed_proxy_subdomains:
|
|
- name: re2o
|
|
from: re2o.auro.re
|
|
to: 10.128.0.10
|
|
- name: intranet
|
|
from: intranet.auro.re
|
|
to: 10.128.0.10
|
|
- name: pad
|
|
from: pad.auro.re
|
|
to: 10.128.0.54:9001
|
|
- name: phabricator
|
|
from: phabricator.auro.re
|
|
to: 10.128.0.50
|
|
- name: wiki
|
|
from: wiki.auro.re
|
|
to: 10.128.0.51
|
|
- name: www
|
|
from: www.auro.re
|
|
to: 10.128.0.52
|
|
- name: main
|
|
from: auro.re
|
|
to: 10.128.0.52
|
|
- name: re2o-test
|
|
from: re2o-test.auro.re
|
|
to: 10.128.0.100
|
|
|