[new-infra] base.yml

base.yml

@@ -14,32 +14,18 @@
 # Common CRANS configuration for all servers
 - hosts: server
   vars:
-    debian_mirror: http://mirror.crans.org/debian # tmp
-    debian_components: main non-free
-
-    # LDAP binding
-    ldap_base: 'dc=crans,dc=org'
-    ldap_master_ipv4: '10.231.136.19'
-    ldap_local_replica_uri:
-      - "ldap://10.231.136.38"
-      - "ldap://10.231.136.4"
-    ldap_master_uri: "ldap://{{ ldap_master_ipv4 }}"
-    ldap_user_tree: "cn=Utilisateurs,{{ ldap_base }}"
-    ldap_nslcd_bind_dn: "cn=nslcd,ou=service-users,{{ ldap_base }}"
-    ldap_nslcd_passwd: "{{ vault_ldap_nslcd_passwd }}"
-
     # Group permissions
     ssh_allow_groups: ssh nounou apprenti cableur root
 
     # Scripts will tell users to go there to manage their account
     intranet_url: 'https://intranet.crans.org/'
 
-    # Will be in /usr/scripts/
+    # # Will be in /usr/scripts/
-    crans_scripts_git: "http://gitlab.adm.crans.org/nounous/scripts.git"
+    # crans_scripts_git: "http://gitlab.adm.crans.org/nounous/scripts.git"
 
-    # # NTP servers
+    # NTP servers
-    # ntp_servers:
+    ntp_servers:
-    #   - charybde.adm.crans.org
+      - charybde.adm.crans.org
     #   - silice.adm.crans.org
   roles:
     - common-tools
@@ -47,7 +33,7 @@
     - ldap-client
     - openssh
     - sudo
-    # - ntp-client
+    - ntp-client
     # - crans-scripts
     - root-config
 
@@ -62,7 +48,7 @@
 # Tools for members
 - hosts: zamok.adm.crans.org
   roles:
-    - zamok-tools
+#     - zamok-tools
 
 # - import_playbook: plays/mail.yml
 - import_playbook: plays/nfs.yml
@@ -73,11 +59,11 @@
 # - import_playbook: plays/generate_documentation.yml
 
 # Services that only apply to a subset of server
-- import_playbook: plays/tv.yml
+# - import_playbook: plays/tv.yml
-- import_playbook: plays/mailman.yml
+# - import_playbook: plays/mailman.yml
-- import_playbook: plays/dhcp.yml
+# - import_playbook: plays/dhcp.yml
-- import_playbook: plays/dns.yml
+# - import_playbook: plays/dns.yml
-- import_playbook: plays/wireguard.yml
+# - import_playbook: plays/wireguard.yml
-- import_playbook: plays/mirror.yml
+# - import_playbook: plays/mirror.yml
-- import_playbook: plays/owncloud.yml
+# - import_playbook: plays/owncloud.yml
-- import_playbook: plays/reverse-proxy.yml
+# - import_playbook: plays/reverse-proxy.yml