---
|
|
host_fqdn: '{{ ansible_hostname }}.dmz.{{ domain }}'
|
|
|
|
ldap_domain: '{{ domain }}'
|
|
ldap_organization: '{{ organization }}'
|
|
ldap_check_tree: true
|
|
ldap_tls_enabled: true
|
|
|
|
ldap_syncrepl_is_consumer: false
|
|
ldap_syncrepl_is_provider: false
|
|
ldap_syncrepl_target_providers: []
|
|
|
|
ldap_tls_server_ca: '{{ tls_intermediate_server_ca }}'
|
|
ldap_tls_user_ca: '{{ tls_intermediate_user_ca }}'
|
|
|
|
ldap_server_accounts:
|
|
- 'projects.dmz.{{ domain }}'
|
|
- 'login.dmz.{{ domain }}'
|
|
- 'nextcloud.dmz.{{ domain }}'
|
|
- 'matrix.dmz.{{ domain }}'
|
|
- 'status.dmz.{{ domain }}'
|
|
- 'etherpad.dmz.{{ domain }}'
|
|
|
|
ldap_groups_name:
|
|
- 'admin'
|
|
|
|
ldap_groups_posix:
|
|
stduser: 5000
|
|
user_sites: 900
|
|
|
|
ldap_users_admin:
|
|
test_admin:
|
|
password: 'pippopippo'
|
|
sn: 'Test Admin User'
|
|
mail: 'admin@zolfa.nl'
|
|
authorizedServices:
|
|
- 'icinga2'
|
|
|
|
ldap_users_common:
|
|
test_user:
|
|
password: 'pippopippo'
|
|
sn: 'Utente Pippo'
|
|
mail: 'pippo@zolfa.nl'
|
|
authorizedServices:
|
|
- 'nextcloud'
|
|
- 'matrix'
|
|
- 'gitlab'
|
|
- 'etherpad'
|
|
- 'icinga2'
|
|
|
|
ldap_basedn: 'dc={{ ldap_domain.replace(".", ",dc=") }}'
|
|
ldap_x509_suffix: >-
|
|
{% for k, v in x509_subj_prefix.items()|reverse %}{{k|lower}}={{v}}{{ ',' if not loop.last }}{% endfor %}
|
|
...
|