---
lacre_pything_version: '3.9'
lacre_repo: 'https://git.disroot.org/Disroot/gpg-lacre.git'
lacre_version: 'php_update'
lacre_app_dir: '/opt/gpg-lacre'
lacre_username: 'lacre'
lacre_group: 'lacre'
lacre_homedir: '/var/gpgmailgate/'
#lacre_
lacre_apt:
  - 'python3-m2crypto'
  - 'git'
  - 'gnupg'
lacre_set_content_filter: 'true'
#config file
lacre_add_header: 'yes'
lacre_enc_keymap_only: 'no'
lacre_dec_keymap_only: 'no'
lacre_failsave_dec: 'yes'
lacre_mime_conversion: 'yes'
lacre_mail_case_insensitive: 'no'
lacre_no_inline_dec: 'yes'
lacre_dec_regex: 'None'
lacre_keyhome: '/var/gpgmailgate/.gnupg'
lacre_cert_path: '/var/gpgmailgate/smime'
lacre_register_email: 'register@example.org'
lacre_mail_templates: '/var/gpgmailgate/register_templates'
lacre_webpanel_url: 'http://example.org'
lacre_notification_email: 'gpg-mailgate@example.org'
lacre_mail_templates: '/var/gpgmailgate/cron_templates'
lacre_verbose: 'yes'
lacre_relay: '127.0.0.1'
lacre_port: '10028'
lacre_enc_port: '25'
lacre_starttls: 'no'
lacre_db_enabled: 'no'
lacre_db_name: 'gpgmw'
lacre_db_host: 'localhost'
lacre_db_username: 'user'
lacre_db_password: 'password'   

#lacre webgate
lacre_cron: 'true'
lacre_webgate_deploy: 'true'
lacre_webgate_apt:
  - 'python3-markdown'
  - 'python3-mysqldb'
lacre_webgate_webroot: '/var/www/'
lacre_webgate_user: 'www-data'
lacre_webgate_group: 'www-data'
lacre_webgate_email_web: 'admin@example.com'
lacre_webgate_email_from: 'gpg-mailgate-web@example.com' 
lacre_webgate_email_subject_requestpgp: 'Confirm your email address'
lacre_webgate_site_url: 'http://example.com/gpgmw' 
lacre_webgate_site_title: 'PGP key management'
lacre_webgate_language: 'english'
lacre_webgate_debug: 'enable'
lacre_webgate_mail_smtp: 'false'
lacre_webgate_smtp_host: 'localhost'
lacre_webgate_smtp_port: '25'
lacre_webgate_smtp_username: 'gpgmw'
lacre_webgate_smtp_password: ''
lacre_webgate_pgpverify: 'false'
lacre_webgate_pgpverify_tmpdir: '/tmp'
lacre_webgate_pgpverify_allowblank: 'true'
lacre_webgate_lock_time: '10'
lacre_webgate_lock_retrycount: '3'
lacre_webgate_lock_cooldown: '900'
lacre_webgate_lock_reset: '300'
lacre_webgate_locktime_max: '3600'






#mailserver vars
postfix_header_checks: 'false'
postfix_body_checks: 'false'
postfix_rbl_whitelist: 'false'
postfix_postgrey_deploy: 'false'

#php
install_php: 'true'
php_version: '7.4'
php_pkgs:
  - 'php{{ php_version }}-fpm'
  - 'php{{ php_version }}-mysql'
nginx_vhosts:
   - name: 'example.org'
     template: 'basephp'
     proto: 'http'
     listen: '80'
     root: 'gpg-mailgate-web/public_html'
     index: 'index.php'
     use_access_log: 'true'
     use_error_log: 'true'
     nginx_error_log_level: 'warn'
     upstream_params:
       - 'fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;'
       - 'fastcgi_index index.php;'
       - 'include /etc/nginx/fastcgi_params;'
       - 'fastcgi_pass unix:{{ pool_listen }};'
     state: 'enable'
     letsencrypt: 'false'

nginx_default_vhost_ssl: 'example.org'
nginx_default_vhost: 'example.org'

#mariadb
# MARIADB CONFIG
mariadb_root_password: 'changeme'
mariadb_default_config:
  - name: 'client'
    config:
      - port = {{mariadb_client_port}}
      - socket = /var/run/mysqld/mysqld.sock
      - default-character-set = utf8mb4
  - name: 'mysqld_safe'
    config:
      - safe_socket = /var/run/mysqld/mysqld.sock
      - safe_nice = 0
  - name: 'mysqld'
    config:
      - user = mysql
      - pid_file = /var/run/mysqld/mysqld.pid
      - socket = /var/run/mysqld/mysqld.sock
      - port = 3306
      - basedir = /usr
      - datadir = "{{mariadb_datadir}}"
      - tmpdir = /tmp
      - init_connect ='SET collation_connection = utf8mb4_unicode_ci'
      - init_connect ='SET NAMES utf8mb4'
      - character-set-server = utf8mb4
      - collation-server = utf8mb4_unicode_ci
      - skip_external_locking = True
      - bind_address = {{ lacre_db_host }}
      - key_buffer = 16M
      - max_allowed_packet = 16M
      - thread_stack = 192K
      - thread_cache_size = 16
      - myisam_recover = BACKUP
      - max_connections = 1000
      - query_cache_limit = 1M
      - query_cache_size = 16M
      - general_log_file = /var/log/mysql/mysql.log
      - general_log = 0
      - slow_query_log = 1
      - slow_query_log_file = /var/log/mysql/mysql-slow.log
      - long_query_time = 1
      - log_queries_not_using_indexes = False
      - default_storage_engine = InnoDB
      - innodb_buffer_pool_size = 1024M
      - innodb_log_file_size = 128M
      - innodb_log_buffer_size = 8M
      - innodb_thread_concurrency = 64
      - innodb_read_io_threads = 16
      - innodb_write_io_threads = 16
      - innodb_file_per_table = 1
      - innodb_open_files = 400
      - innodb_io_capacity = 600
      - innodb_lock_wait_timeout = 60
      - innodb_flush_method = O_DIRECT
      - innodb_doublewrite = 0
      - innodb_use_native_aio = 0
      - innodb_large_prefix = on
      - server_id = 1
      - log_bin = /var/log/mysql/mysql-bin.log
      - expire_logs_days = 2
      - max_binlog_size = 10M
      - binlog_format = row
      - query_cache_type = 1
      - query_cache_limit = 256K
      - query_cache_min_res_unit = 2k
      - query_cache_size = 300M
      - tmp_table_size= 64M
      - max_heap_table_size= 64M


  - name: 'mysqldump'
    config:
      - quick
     #- quotes-names
      - max_allowed_packet = 16M
  - name: 'isamchk'
    config:
      - key_buffer = 16M

mariadb_databases:
  - name: '{{ lacre_db_name }}'
    collation: 'utf8mb4_unicode_ci'
    encoding: 'utf8mb4'

mariadb_users:
  - name: '{{ lacre_db_username }}'
    host: '{{ lacre_db_host }}'
    password: '{{ lacre_db_password }}'
    priv: '{{ lacre_db_name }}.*:ALL'