๐Ÿ“— Ansible playbooks and roles for building an idempotent, interconnected and scalable infrastructure
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
ansible-playbooks/roles/vault/defaults/main.yml

45 lines
1.3 KiB

2 years ago
vault_user: vault
vault_group: vault
vault_dir: /opt/vault
vault_extract_dir: /opt/docker
vault_port: 8080
vault_websocket_port: 3012
vault_supervised: yes
vault_default_config:
database_url: "{{ 'postgresql://' ~ database_user ~ ':' ~ database_pass ~ '@' ~ database_host ~ '/' ~ database_name }}"
domain: "{{ host_url }}"
invitation_org_name: "{{ org }}"
admin_token: "{{ vault_admin_token }}"
rocket_port: "{{ vault_port }}"
websocket_port: "{{ vault_websocket_port }}"
org_attachment_limit: "{{ ((host_hardware.disk | d(10) | float) * 1024 * 1024 / 30) | int | abs }}"
user_attachment_limit: "{{ ((host_hardware.disk | d(10) | float) * 1024 * 1024 / 90) | int | abs }}"
2 years ago
database_max_conns: 4
websocket_enabled: yes
websocket_address: 127.0.0.1
sends_allowed: yes
emergency_access_allowed: no
extended_logging: yes
use_syslog: yes
log_level: warn
db_connection_retries: 0
icon_blacklist_non_global_ips: no
email_attempts_limit: 6
email_expiration_time: 2400
signups_allowed: no
signups_verify: yes
signups_verify_resend_time: 120
signups_verify_resend_limit: 10
org_creation_users: all
invitations_allowed: yes
incomplete_2fa_time_limit: 5
trash_auto_delete_days: 90
password_iterations: 5000
rocket_address: 127.0.0.1
rocket_workers: 4
_enable_yubico: no
_enable_duo: no