43 lines
		
	
	
		
			1.0 KiB
		
	
	
	
		
			YAML
		
	
	
			
		
		
	
	
			43 lines
		
	
	
		
			1.0 KiB
		
	
	
	
		
			YAML
		
	
	
---
 | 
						|
glob_debian_images:
 | 
						|
  cron_timer: '39 06 * * *'
 | 
						|
  rsync_host: 'eclat.adm.crans.org'
 | 
						|
  rsync_module: 'mirror'
 | 
						|
  include_extra_images: false
 | 
						|
 | 
						|
glob_service_proxmox_user:
 | 
						|
  git:
 | 
						|
    remote: https://gitlab.adm.crans.org/nounous/proxmox-user.git
 | 
						|
    version: main
 | 
						|
  name: proxmox-user
 | 
						|
  install_dir: /var/local/services/proxmox-user
 | 
						|
  generated: false
 | 
						|
  cron:
 | 
						|
    frequency: "*/2 * * * *"
 | 
						|
    options: ""
 | 
						|
  config:
 | 
						|
    ldap:
 | 
						|
      admin:
 | 
						|
        uri: "ldaps://{{ query('ldap', 'ip4', 'wall-e', 'adm') }}/"
 | 
						|
        userBase: "ou=passwd,dc=crans,dc=org"
 | 
						|
        realm: "pam"
 | 
						|
  dependencies:
 | 
						|
    - python3-jinja2
 | 
						|
    - python3-ldap
 | 
						|
 | 
						|
loc_certbot:
 | 
						|
  - mail: root@crans.org
 | 
						|
    certname: adm.crans.org
 | 
						|
    domains: "*.adm.crans.org"
 | 
						|
 | 
						|
loc_service_certbot:
 | 
						|
  config:
 | 
						|
    "adm.crans.org":
 | 
						|
      zone: _acme-challenge.adm.crans.org
 | 
						|
      server: "{{ query('ldap', 'ip4', 'silice', 'adm') }}"
 | 
						|
      port: 53
 | 
						|
      key:
 | 
						|
        name: certbot_adm_challenge.
 | 
						|
        secret: "{{ vault.bind.rfc2136_keys['certbot_adm_challenge.'].secret }}"
 | 
						|
        algorithm: HMAC-SHA512
 |