diff --git a/base.yml b/base.yml index f1d27d16..48ce4654 100755 --- a/base.yml +++ b/base.yml @@ -14,32 +14,18 @@ # Common CRANS configuration for all servers - hosts: server vars: - debian_mirror: http://mirror.crans.org/debian # tmp - debian_components: main non-free - - # LDAP binding - ldap_base: 'dc=crans,dc=org' - ldap_master_ipv4: '10.231.136.19' - ldap_local_replica_uri: - - "ldap://10.231.136.38" - - "ldap://10.231.136.4" - ldap_master_uri: "ldap://{{ ldap_master_ipv4 }}" - ldap_user_tree: "cn=Utilisateurs,{{ ldap_base }}" - ldap_nslcd_bind_dn: "cn=nslcd,ou=service-users,{{ ldap_base }}" - ldap_nslcd_passwd: "{{ vault_ldap_nslcd_passwd }}" - # Group permissions ssh_allow_groups: ssh nounou apprenti cableur root # Scripts will tell users to go there to manage their account intranet_url: 'https://intranet.crans.org/' - # Will be in /usr/scripts/ - crans_scripts_git: "http://gitlab.adm.crans.org/nounous/scripts.git" + # # Will be in /usr/scripts/ + # crans_scripts_git: "http://gitlab.adm.crans.org/nounous/scripts.git" - # # NTP servers - # ntp_servers: - # - charybde.adm.crans.org + # NTP servers + ntp_servers: + - charybde.adm.crans.org # - silice.adm.crans.org roles: - common-tools @@ -47,7 +33,7 @@ - ldap-client - openssh - sudo - # - ntp-client + - ntp-client # - crans-scripts - root-config @@ -62,7 +48,7 @@ # Tools for members - hosts: zamok.adm.crans.org roles: - - zamok-tools +# - zamok-tools # - import_playbook: plays/mail.yml - import_playbook: plays/nfs.yml @@ -73,11 +59,11 @@ # - import_playbook: plays/generate_documentation.yml # Services that only apply to a subset of server -- import_playbook: plays/tv.yml -- import_playbook: plays/mailman.yml -- import_playbook: plays/dhcp.yml -- import_playbook: plays/dns.yml -- import_playbook: plays/wireguard.yml -- import_playbook: plays/mirror.yml -- import_playbook: plays/owncloud.yml -- import_playbook: plays/reverse-proxy.yml +# - import_playbook: plays/tv.yml +# - import_playbook: plays/mailman.yml +# - import_playbook: plays/dhcp.yml +# - import_playbook: plays/dns.yml +# - import_playbook: plays/wireguard.yml +# - import_playbook: plays/mirror.yml +# - import_playbook: plays/owncloud.yml +# - import_playbook: plays/reverse-proxy.yml