설명 없음
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

defaults.yml 4.2KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142
  1. ---
  2. ###############################################################################
  3. # DO NOT EDIT. Set your variables in `vars/user.yml` instead.
  4. # This is a reference of all the variables.
  5. ###############################################################################
  6. # # common
  7. common_timezone: 'Etc/UTC'
  8. # domain: (required)
  9. # main_user_name: (required)
  10. admin_email: "{{ main_user_name }}@{{ domain }}"
  11. main_user_shell: "/bin/bash"
  12. # encfs_password: (required)
  13. friendly_networks:
  14. - ""
  15. letsencrypt_server: "https://acme-v01.api.letsencrypt.org/directory"
  16. subdomains: "www.{{ domain }},mail.{{ domain }},autoconfig.{{ domain }},read.{{ domain }},news.{{ domain }},cloud.{{ domain }},git.{{ domain }}"
  17. # ssh
  18. kex_algorithms: "diffie-hellman-group-exchange-sha256"
  19. ciphers: "aes256-ctr,aes192-ctr,aes128-ctr"
  20. macs: "hmac-sha2-512,hmac-sha2-256,hmac-ripemd160"
  21. # ntp
  22. ntp_servers:
  23. # use nearby ntp servers by default
  24. - 0.pool.ntp.org
  25. - 1.pool.ntp.org
  26. - 2.pool.ntp.org
  27. - 3.pool.ntp.org
  28. # use servers tailored to the server location
  29. # See http://www.pool.ntp.org/en/use.html
  30. # - 0.north-america.pool.ntp.org
  31. # - 1.north-america.pool.ntp.org
  32. # - 2.north-america.pool.ntp.org
  33. # - 3.north-america.pool.ntp.org
  34. # collectd
  35. collectd_version: 5.4.1
  36. collectd_librato_version: 0.0.10
  37. collectd_librato_email: "" # (optional)
  38. collectd_librato_api_token: "" # (optional)
  39. # google authenticator
  40. google_auth_version: 1.0
  41. # database
  42. db_admin_username: 'postgres'
  43. # db_admin_password: (required)
  44. # ircbouncer
  45. znc_version: 1.4
  46. # irc_nick: (required)
  47. # irc_ident: (required)
  48. # irc_realname: (required)
  49. # irc_quitmsg: (required)
  50. # irc_password_hash: (required)
  51. # irc_password_salt: (required)
  52. # mailserver
  53. mail_server_hostname: "mail.{{ domain }}"
  54. mail_server_autoconfig_hostname: "autoconfig.{{ domain }}"
  55. mail_db_username: mailuser
  56. # mail_db_password: (required)
  57. mail_db_database: mailserver
  58. # mail_virtual_domains: (required)
  59. # mail_virtual_users: (required)
  60. # mail_virtual_aliases: (required)
  61. mail_db_opendmarc_username: opendmarc
  62. # mail_db_opendmarc_password: (required)
  63. mail_db_opendmarc_database: opendmarc
  64. # z-push
  65. zpush_version: 2.1.1-1788
  66. # owncloud
  67. owncloud_domain: "cloud.{{ domain }}"
  68. owncloud_db_username: owncloud
  69. # owncloud_db_password: (required)
  70. owncloud_db_database: owncloud
  71. # tarsnap
  72. tarsnap_version: 1.0.36.1
  73. # vpn
  74. # Notes about security: https://blog.g3rt.nl/openvpn-security-tips.html
  75. # Check privacy: http://witch.valdikss.org.ru/
  76. # openvpn_key_country: (required)
  77. # openvpn_key_province: (required)
  78. # openvpn_key_city: (required)
  79. # openvpn_key_org: (required)
  80. # openvpn_key_ou: (required)
  81. openvpn_days_valid: "1825"
  82. openssl_request_subject: "/C={{ openvpn_key_country }}/ST={{ openvpn_key_province }}/L={{ openvpn_key_city }}/O={{ openvpn_key_org }}/OU={{ openvpn_key_ou }}"
  83. openvpn_key_size: "2048"
  84. openvpn_cipher: "AES-256-CBC"
  85. openvpn_auth_digest: "SHA512"
  86. openvpn_path: "/etc/openvpn"
  87. openvpn_ca: "{{ openvpn_path }}/ca"
  88. openvpn_dhparam: "{{ openvpn_path }}/dh{{ openvpn_key_size }}.pem"
  89. openvpn_hmac_firewall: "{{ openvpn_path }}/ta.key"
  90. openvpn_server: "{{ domain }}"
  91. openvpn_port: "1194"
  92. openvpn_protocol: "udp"
  93. openvpn_mtu: "1300"
  94. openvpn_verb: "3" # "0" for anonymity
  95. # uncomment for openvpn 2.3.3 and >2.3.4
  96. openvpn_tls_version_min: "" # "tls-version-min 1.2"
  97. openvpn_tls_cipher: "" # "tls-cipher TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256:TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256:TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA256"
  98. # openvpn_clients: (required)
  99. # webmail
  100. webmail_domain: "{{ mail_server_hostname }}"
  101. webmail_db_username: "roundcube"
  102. # webmail_db_password: (required)
  103. webmail_db_database: "roundcube"
  104. carddav_version: "1.0.0"
  105. # xmpp
  106. prosody_admin: "{{ admin_email }}"
  107. prosody_virtual_domain: "{{ domain }}"
  108. # prosody_accounts: (required)
  109. # news
  110. selfoss_domain: "news.{{ domain }}"
  111. selfoss_db_username: selfoss
  112. # selfoss_db_password: (required)
  113. selfoss_db_database: selfoss
  114. selfoss_version: 2.14
  115. # git
  116. cgit_version: 0.12
  117. cgit_domain: "git.{{ domain }}"
  118. gitolite_version: 3.6.4
  119. # wallabag
  120. wallabag_version: 1.9.1
  121. wallabag_domain: "read.{{ domain }}"
  122. # wallabag_salt: (required)
  123. wallabag_db_username: wallabag
  124. # wallabag_db_password: (required)
  125. wallabag_db_database: wallabag