|
|
@ -38,10 +38,27 @@ framadate_HTTPD_PASSWORD="--clean_val--" |
|
|
|
|
|
|
|
################## |
|
|
|
# Gandi |
|
|
|
# à supprimer et à replacer par dns_gandi_api_key |
|
|
|
gandi_GANDI_KEY="xxx" |
|
|
|
gandi_GANDI_API="https://api.gandi.net/v5/livedns/domains/${domain}" |
|
|
|
gandi_dns_gandi_api_key="${gandi_GANDI_KEY}" |
|
|
|
|
|
|
|
#TODO: soucis, les clés sont dédoublées |
|
|
|
gandi_GANDI_KEY="ce56hL3Tn7efFWvNLyf2ewkT" |
|
|
|
GANDI_API="https://api.gandi.net/v5/livedns/domains/kaz.bzh" |
|
|
|
################## |
|
|
|
# Openldap |
|
|
|
ldap_LDAP_ADMIN_USERNAME="--clean_val--" |
|
|
|
ldap_LDAP_ADMIN_PASSWORD="--clean_val--" |
|
|
|
ldap_LDAP_ENABLE_TLS="no" |
|
|
|
ldap_LDAP_TLS_CERT_FILE="/etc/letsencrypt/live/${domain}/cert.pem" |
|
|
|
ldap_LDAP_TLS_KEY_FILE="/etc/letsencrypt/live/${domain}/privkey.pem" |
|
|
|
ldap_LDAP_TLS_CA_FILE="/etc/letsencrypt/live/${domain}/fullchain.pem" |
|
|
|
|
|
|
|
ldap_LDAP_URI=ldap://ldap |
|
|
|
ldap_LDAP_BASE_DN=${ldap_root} |
|
|
|
ldap_LDAP_REQUIRE_STARTTLS=FALSE |
|
|
|
ldap_LDAP_ADMINS_GROUP=admins |
|
|
|
ldap_LDAP_ADMIN_BIND_DN=cn=${ldap_LDAP_ADMIN_USERNAME},${ldap_root} |
|
|
|
ldap_LDAP_ADMIN_BIND_PWD=${ldap_LDAP_ADMIN_PASSWORD} |
|
|
|
ldap_LDAP_IGNORE_CERT_ERRORS=TRUE |
|
|
|
|
|
|
|
################### |
|
|
|
# gitea |
|
|
@ -55,43 +72,11 @@ gitea_user_admin="admin_gitea" |
|
|
|
gitea_pass_admin="--clean_val--" |
|
|
|
gitea_admin_email="root@kaz.bzh" |
|
|
|
|
|
|
|
# Share with etherpadDB |
|
|
|
gitea_GITEA__database__DB_TYPE="mysql" |
|
|
|
gitea_GITEA__database__HOST="db:3306" |
|
|
|
gitea_GITEA__database__NAME="${gitea_MYSQL_DATABASE}" |
|
|
|
gitea_GITEA__database__USER="${gitea_MYSQL_USER}" |
|
|
|
gitea_GITEA__database__PASSWD="${gitea_MYSQL_PASSWORD}" |
|
|
|
|
|
|
|
#gitea_GITEA__mailer__ENABLED=true |
|
|
|
#gitea_GITEA__mailer__FROM= |
|
|
|
#gitea_GITEA__mailer__MAILER_TYPE=smtp |
|
|
|
#gitea_GITEA__mailer__HOST= |
|
|
|
#gitea_GITEA__mailer__IS_TLS_ENABLED= |
|
|
|
#gitea_GITEA__mailer__USER= |
|
|
|
#gitea_GITEA__mailer__PASSWD= |
|
|
|
|
|
|
|
#################### |
|
|
|
# jirafeau |
|
|
|
jirafeau_HTTPD_PASSWORD="--clean_val--" |
|
|
|
jirafeau_DATA_DIR="--clean_val--" |
|
|
|
|
|
|
|
################## |
|
|
|
# keycloack DB |
|
|
|
keycloak_MYSQL_ROOT_PASSWORD="--clean_val--" |
|
|
|
keycloak_MYSQL_DATABASE="--clean_val--" |
|
|
|
keycloak_MYSQL_USER="--clean_val--" |
|
|
|
keycloak_MYSQL_PASSWORD="--clean_val--" |
|
|
|
|
|
|
|
# Keycloak |
|
|
|
keycloak_DB_VENDOR="mariadb" |
|
|
|
keycloak_DB_ADDR="mariadb" |
|
|
|
keycloak_DB_DATABASE="${keycloak_MYSQL_DATABASE}" |
|
|
|
keycloak_DB_USER="${keycloak_MYSQL_USER}" |
|
|
|
keycloak_DB_PASSWORD="${keycloak_MYSQL_PASSWORD}" |
|
|
|
keycloak_USER="admin" |
|
|
|
keycloak_PASSWORD="--clean_val--" |
|
|
|
|
|
|
|
|
|
|
|
#################### |
|
|
|
# mattermost |
|
|
|
mattermost_MYSQL_ROOT_PASSWORD="--clean_val--" |
|
|
@ -152,20 +137,11 @@ roundcube_ROUNDCUBEMAIL_DB_TYPE="mysql" |
|
|
|
roundcube_ROUNDCUBEMAIL_DB_NAME="${roundcube_MYSQL_DATABASE}" |
|
|
|
roundcube_ROUNDCUBEMAIL_DB_USER="${roundcube_MYSQL_USER}" |
|
|
|
roundcube_ROUNDCUBEMAIL_DB_PASSWORD="${roundcube_MYSQL_PASSWORD}" |
|
|
|
roundcube_ROUNDCUBEMAIL_UPLOAD_MAX_FILESIZE="100Mo" |
|
|
|
|
|
|
|
# XXX TODO >>> |
|
|
|
# ROUNDCUBEMAIL_DB_PORT |
|
|
|
|
|
|
|
# ROUNDCUBEMAIL_PLUGINS |
|
|
|
# ROUNDCUBEMAIL_SPELLCHECK_URI |
|
|
|
# ROUNDCUBEMAIL_ASPELL_DICTS |
|
|
|
# XXX TODO <<< |
|
|
|
|
|
|
|
roundcube_ROUNDCUBEMAIL_UPLOAD_MAX_FILESIZE="1G" |
|
|
|
|
|
|
|
#################### |
|
|
|
# postfix ? |
|
|
|
mail_ENABLE_SPAMASSASSIN=1 |
|
|
|
mail_ENABLE_SPAMASSASSIN="1" |
|
|
|
|
|
|
|
#################### |
|
|
|
# sympa |
|
|
@ -181,6 +157,10 @@ sympa_ADMINEMAIL="listmaster@${domain_sympa}" |
|
|
|
sympa_SOAP_USER="sympa" |
|
|
|
sympa_SOAP_PASSWORD="--clean_val--" |
|
|
|
|
|
|
|
# pour inscrire des users sur des listes sympa avec soap |
|
|
|
#il faut que le user soit admin de sympa |
|
|
|
sympa_user="a@${domain}" |
|
|
|
sympa_pass="--clean_val--" |
|
|
|
|
|
|
|
################## |
|
|
|
# vigilo |
|
|
@ -211,19 +191,31 @@ wp_WORDPRESS_ADMIN_PASSWORD="--clean_val--" |
|
|
|
#qui envoi le mail d'inscription ? |
|
|
|
EMAIL_CONTACT="toto@kaz.bzh" |
|
|
|
|
|
|
|
################## |
|
|
|
# Openldap |
|
|
|
ldap_LDAP_ADMIN_USERNAME="--clean_val--" |
|
|
|
ldap_LDAP_ADMIN_PASSWORD="--clean_val--" |
|
|
|
ldap_LDAP_ENABLE_TLS=no |
|
|
|
ldap_LDAP_TLS_CERT_FILE="/etc/letsencrypt/live/${domain}/cert.pem" |
|
|
|
ldap_LDAP_TLS_KEY_FILE="/etc/letsencrypt/live/${domain}/privkey.pem" |
|
|
|
ldap_LDAP_TLS_CA_FILE="/etc/letsencrypt/live/${domain}/fullchain.pem" |
|
|
|
#ldap_LDAP_TLS_DH_PARAMS_FILE="/etc/letsencrypt/live/${domain}/dh.pem" |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
################## |
|
|
|
# Garradin |
|
|
|
garradin_API_USER="admin-api" |
|
|
|
garradin_API_PASSWORD="--clean_val--" |
|
|
|
|
|
|
|
################## |
|
|
|
# La nas de Kaz chez Grifon |
|
|
|
nas_admin1="admin" |
|
|
|
nas_password1="--clean_val--" |
|
|
|
nas_admin2="kaz" |
|
|
|
nas_password1="--clean_val--" |
|
|
|
# compte mail pour les notifications du nas |
|
|
|
nas_email_account="admin-nas@${domain}" |
|
|
|
nas_email_password="--clean_val--" |
|
|
|
|
|
|
|
################## |
|
|
|
#Compte sur outlook.com |
|
|
|
outlook_user="kaz-user@outlook.fr" |
|
|
|
outlook_pass="--clean_val--" |
|
|
|
|
|
|
|
################## |
|
|
|
#Borg |
|
|
|
BORG_REPO="/mnt/backup-nas1/BorgRepo" |
|
|
|
BORG_PASSPHRASE="--clean_val--" |
|
|
|
VOLUME_SAUVEGARDES="/mnt/backup-nas1" |
|
|
|
MAIL_RAPPORT="a@${domain};b@${domain};c@${domain}" |
|
|
|
BORGMOUNT="/mnt/disk-nas1/tmp/repo_mount" |
|
|
|