480fcc5145
In order to reduce divergance with ansible-lint rules, we apply auto-fixing of violations. In current patch we replace all kind of truthy variables with `true` or `false` values to align with recommendations along with alignment of used quotes. Change-Id: I8ed02208eb866f3b1d05624f4a18065a6835807e
86 lines
3.3 KiB
YAML
86 lines
3.3 KiB
YAML
---
|
|
# Copyright 2016, Rackspace US, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
## Verbosity Options
|
|
debug: false
|
|
|
|
## APT Cache Options
|
|
cache_timeout: 600
|
|
|
|
# Set the package install state for distribution and pip packages
|
|
# Options are 'present' and 'latest'
|
|
repo_server_package_state: "latest"
|
|
|
|
repo_server_name: openstack-slushee
|
|
|
|
repo_service_home_folder: "{{ _repo_service_home_folder }}"
|
|
repo_service_user_name: "{{ _repo_service_user_name }}"
|
|
repo_service_group_name: "{{ _repo_service_group_name }}"
|
|
|
|
# Main web server port
|
|
repo_server_bind_address: "{{ openstack_service_bind_address | default('0.0.0.0') }}"
|
|
repo_server_port: 8181
|
|
repo_server_directory_root: /var/www/repo
|
|
repo_apache_log_level: info
|
|
|
|
## Cap the maximum number of threads / workers when a user value is unspecified.
|
|
|
|
# This directory is used on the deploy host to create u-c files which are then
|
|
# copied to the repo server and served by http. Any other files in this
|
|
# directory placed by the deployer will also be transferred
|
|
repo_upper_constraints_path: "/etc/openstack_deploy/upper-constraints"
|
|
|
|
# Multiple repo servers must have a shared /var/www/repo
|
|
repo_server_systemd_mounts: []
|
|
|
|
# Example using remote shared filesystem to synchronise the repo contents between
|
|
# several repo servers
|
|
# repo_server_systemd_mounts:
|
|
# - what: "gluster-server:gluster-volume-name"
|
|
# where: "/var/www/repo"
|
|
# type: glusterfs
|
|
# state: 'started'
|
|
# enabled: true
|
|
|
|
###
|
|
### Backend TLS
|
|
###
|
|
|
|
# Define if communication between haproxy and service backends should be
|
|
# encrypted with TLS.
|
|
repo_backend_ssl: "{{ openstack_service_backend_ssl | default(False) }}"
|
|
|
|
# Storage location for SSL certificate authority
|
|
repo_pki_dir: "{{ openstack_pki_dir | default('/etc/openstack_deploy/pki') }}"
|
|
|
|
# Delegated host for operating the certificate authority
|
|
repo_pki_setup_host: "{{ openstack_pki_setup_host | default('localhost') }}"
|
|
|
|
# repo server certificate SAN if user did not provide own certs
|
|
repo_pki_san: "{{ openstack_pki_san | default('DNS:' ~ ansible_facts['hostname'] ~ ',IP:' ~ management_address) }}"
|
|
repo_pki_regen_cert: ""
|
|
|
|
repo_ssl_protocol: "{{ ssl_protocol | default('ALL -SSLv2 -SSLv3 -TLSv1 -TLSv1.1') }}"
|
|
# TLS v1.2 and below
|
|
repo_ssl_cipher_suite_tls12: "{{ ssl_cipher_suite | default('ECDH+AESGCM:ECDH+CHACHA20:ECDH+AES256:ECDH+AES128:!aNULL:!SHA1:!AESCCM') }}"
|
|
# TLS v1.3
|
|
repo_ssl_cipher_suite_tls13: "{{ ssl_cipher_suite_tls13 | default('TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256') }}"
|
|
|
|
## Define user-provided SSL certificates. Otherwise self-signed certificates
|
|
## will be generated for domains defined in ``repo_pki_san`` variables.
|
|
# repo_user_ssl_cert: <path to cert on ansible deployment host>
|
|
# repo_user_ssl_key: <path to cert on ansible deployment host>
|
|
# repo_user_ssl_ca_cert: <path to cert on ansible deployment host>
|