Playbooks to a new Lilik
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 

37 lines
1.2 KiB

---
# Put here the public ip for your organisation
public_ip: 0.0.0.0
# Put here the domain for your organisation
domain: "example.com"
# Put here an email address to receive Let's Encrypt communications.
letsencrypt_email: 'admin@example.com'
# Put the TLS X.509 Subject Prefix (before OU=)
x509_subject_prefix: '/C=IT/L=Firenze/O=Example'
# Here the same in LDAP (and reversed) format
x509_ldap_suffix: 'o=Example,l=Firenze,c=it'
# Put here the public key of the user CAs.
# The first one will be used also to check if host certificate are
# updated.
user_ca_keys:
- "ssh-ed25519 AAAA(...) Active Production key"
- "ssh-ed25519 AAAA(...) Older not-expired key"
# - "ssh-ed25519 AAAA(...) Revoked key"
# Put TLS Certificate of your Root Certification Authority
tls_root_ca: |
-----BEGIN CERTIFICATE-----
#########################
-----END CERTIFICATE-----
# Put TLS Certificate for OpenVPN Server Intermediate CA
tls_vpn_user_ca: |
-----BEGIN CERTIFICATE-----
#########################
-----END CERTIFICATE-----
# Put TLS Certificate for OpenVPN Users Intermediate CA
tls_vpn_server_ca: |
-----BEGIN CERTIFICATE-----
##########################
-----END CERTIFICATE-----