gpg-lacre/defaults/main.yml

200 lines
5.6 KiB
YAML

---
lacre_pything_version: '3.9'
lacre_repo: 'https://git.disroot.org/Disroot/gpg-lacre.git'
lacre_version: 'php_update'
lacre_app_dir: '/opt/gpg-lacre'
lacre_username: 'lacre'
lacre_group: 'lacre'
lacre_homedir: '/var/gpgmailgate/'
#lacre_
lacre_apt:
- 'python3-m2crypto'
- 'git'
- 'gnupg'
lacre_set_content_filter: 'true'
#config file
lacre_add_header: 'yes'
lacre_enc_keymap_only: 'no'
lacre_dec_keymap_only: 'no'
lacre_failsave_dec: 'yes'
lacre_mime_conversion: 'yes'
lacre_mail_case_insensitive: 'no'
lacre_no_inline_dec: 'yes'
lacre_dec_regex: 'None'
lacre_keyhome: '/var/gpgmailgate/.gnupg'
lacre_cert_path: '/var/gpgmailgate/smime'
lacre_register_email: 'register@example.org'
lacre_mail_templates: '/var/gpgmailgate/register_templates'
lacre_webpanel_url: 'http://example.org'
lacre_notification_email: 'gpg-mailgate@example.org'
lacre_mail_templates: '/var/gpgmailgate/cron_templates'
lacre_verbose: 'yes'
lacre_relay: '127.0.0.1'
lacre_port: '10028'
lacre_enc_port: '25'
lacre_starttls: 'no'
lacre_db_enabled: 'no'
lacre_db_name: 'gpgmw'
lacre_db_host: 'localhost'
lacre_db_username: 'user'
lacre_db_password: 'password'
#lacre webgate
lacre_cron: 'true'
lacre_webgate_deploy: 'true'
lacre_webgate_apt:
- 'python3-markdown'
- 'python3-mysqldb'
lacre_webgate_webroot: '/var/www/'
lacre_webgate_user: 'www-data'
lacre_webgate_group: 'www-data'
lacre_webgate_email_web: 'admin@example.com'
lacre_webgate_email_from: 'gpg-mailgate-web@example.com'
lacre_webgate_email_subject_requestpgp: 'Confirm your email address'
lacre_webgate_site_url: 'http://example.com/gpgmw'
lacre_webgate_site_title: 'PGP key management'
lacre_webgate_language: 'english'
lacre_webgate_debug: 'enable'
lacre_webgate_mail_smtp: 'false'
lacre_webgate_smtp_host: 'localhost'
lacre_webgate_smtp_port: '25'
lacre_webgate_smtp_username: 'gpgmw'
lacre_webgate_smtp_password: ''
lacre_webgate_pgpverify: 'false'
lacre_webgate_pgpverify_tmpdir: '/tmp'
lacre_webgate_pgpverify_allowblank: 'true'
lacre_webgate_lock_time: '10'
lacre_webgate_lock_retrycount: '3'
lacre_webgate_lock_cooldown: '900'
lacre_webgate_lock_reset: '300'
lacre_webgate_locktime_max: '3600'
#mailserver vars
postfix_header_checks: 'false'
postfix_body_checks: 'false'
postfix_rbl_whitelist: 'false'
postfix_postgrey_deploy: 'false'
#php
install_php: 'true'
php_version: '7.4'
php_pkgs:
- 'php{{ php_version }}-fpm'
- 'php{{ php_version }}-mysql'
nginx_vhosts:
- name: 'example.org'
template: 'basephp'
proto: 'http'
listen: '80'
root: 'gpg-mailgate-web/public_html'
index: 'index.php'
use_access_log: 'true'
use_error_log: 'true'
nginx_error_log_level: 'warn'
upstream_params:
- 'fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;'
- 'fastcgi_index index.php;'
- 'include /etc/nginx/fastcgi_params;'
- 'fastcgi_pass unix:{{ pool_listen }};'
state: 'enable'
letsencrypt: 'false'
nginx_default_vhost_ssl: 'example.org'
nginx_default_vhost: 'example.org'
#mariadb
# MARIADB CONFIG
mariadb_root_password: 'changeme'
mariadb_default_config:
- name: 'client'
config:
- port = {{mariadb_client_port}}
- socket = /var/run/mysqld/mysqld.sock
- default-character-set = utf8mb4
- name: 'mysqld_safe'
config:
- safe_socket = /var/run/mysqld/mysqld.sock
- safe_nice = 0
- name: 'mysqld'
config:
- user = mysql
- pid_file = /var/run/mysqld/mysqld.pid
- socket = /var/run/mysqld/mysqld.sock
- port = 3306
- basedir = /usr
- datadir = "{{mariadb_datadir}}"
- tmpdir = /tmp
- init_connect ='SET collation_connection = utf8mb4_unicode_ci'
- init_connect ='SET NAMES utf8mb4'
- character-set-server = utf8mb4
- collation-server = utf8mb4_unicode_ci
- skip_external_locking = True
- bind_address = {{ lacre_db_host }}
- key_buffer = 16M
- max_allowed_packet = 16M
- thread_stack = 192K
- thread_cache_size = 16
- myisam_recover = BACKUP
- max_connections = 1000
- query_cache_limit = 1M
- query_cache_size = 16M
- general_log_file = /var/log/mysql/mysql.log
- general_log = 0
- slow_query_log = 1
- slow_query_log_file = /var/log/mysql/mysql-slow.log
- long_query_time = 1
- log_queries_not_using_indexes = False
- default_storage_engine = InnoDB
- innodb_buffer_pool_size = 1024M
- innodb_log_file_size = 128M
- innodb_log_buffer_size = 8M
- innodb_thread_concurrency = 64
- innodb_read_io_threads = 16
- innodb_write_io_threads = 16
- innodb_file_per_table = 1
- innodb_open_files = 400
- innodb_io_capacity = 600
- innodb_lock_wait_timeout = 60
- innodb_flush_method = O_DIRECT
- innodb_doublewrite = 0
- innodb_use_native_aio = 0
- innodb_large_prefix = on
- server_id = 1
- log_bin = /var/log/mysql/mysql-bin.log
- expire_logs_days = 2
- max_binlog_size = 10M
- binlog_format = row
- query_cache_type = 1
- query_cache_limit = 256K
- query_cache_min_res_unit = 2k
- query_cache_size = 300M
- tmp_table_size= 64M
- max_heap_table_size= 64M
- name: 'mysqldump'
config:
- quick
#- quotes-names
- max_allowed_packet = 16M
- name: 'isamchk'
config:
- key_buffer = 16M
mariadb_databases:
- name: '{{ lacre_db_name }}'
collation: 'utf8mb4_unicode_ci'
encoding: 'utf8mb4'
mariadb_users:
- name: '{{ lacre_db_username }}'
host: '{{ lacre_db_host }}'
password: '{{ lacre_db_password }}'
priv: '{{ lacre_db_name }}.*:ALL'