InfraScience
/
ansible-role-inception
24
0
Fork 0
Code Issues Pull Requests Releases Activity

Add a new tag, and a new service option.

This commit is contained in:
Andrea Dell'Amico 2022-04-29 13:41:53 +02:00
parent 4d41b2be7a
commit 8ce75ca8dc
Signed by: andrea.dellamico
GPG Key ID: 147ABE6CEB9E20FF
3 changed files with 16 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
defaults/main.yml
View File

@ -17,7 +17,7 @@ inception_project_haproxy_public_net: 'haproxy-public'
inception_project_server_port: 8080
inception_project_server_address: '0.0.0.0'
inception_project_server_endpoint: 'inception.localdomain'
inception_project_server_behind_reverse_proxy: True
inception_project_server_behind_reverse_proxy: true
inception_project_backup_interval: 300
inception_project_backup_keep_number: 10
inception_project_debug_enabled: 'false'
@ -34,7 +34,7 @@ keycloak_auth_server: https://localhost
inception_project_server_auth_mode: 'database'
inception_project_server_preauth_header: 'remote_user'
inception_project_server_preauth_default_roles: ''
inception_project_server_set_preauth_logout_url: False
inception_project_server_set_preauth_logout_url: false
inception_project_server_preauth_logout_url: ""
inception_project_server_preauth_users_roles: []
# - { username: 'user', roles: 'ROLE_PROJECT_CREATOR,ROLE_ADMIN' }
@ -69,10 +69,12 @@ inception_project_settings:
- 'websocket.enabled={{ inception_project_websockets_enabled }}'
- 'websocket.loggedevent.enabled={{ inception_project_websockets_loggedevent_enabled }}'
inception_project_additional_settings: []
pep_port: 80
pep_replicas: 1
# hostnames to be used as vhosts
# pep_credentials: in vault
nginx_pep_debug_enabled: False
nginx_pep_debug_enabled: false
nginx_pep_max_body_size: 500M
nginx_pep_body_timeout: 60s

4
tasks/inception.yml
View File

@ -11,7 +11,7 @@
template: src=settings.properties.j2 dest={{ inception_project_service_volume }}/settings.properties owner=root group=root mode='0444'
when: inception_project_docker_data_node == ansible_fqdn
tags: [ 'inception_project', 'inception_project_swarm' ]
tags: ['inception_project', 'inception_project_swarm', 'inception_project_service']
- name: Manage the installation of the Inception project Docker stack
block:
@ -45,4 +45,4 @@
run_once: True
when: docker_swarm_manager_main_node is defined and docker_swarm_manager_main_node | bool
tags: [ 'inception_project', 'inception_project_swarm' ]
tags: ['inception_project', 'inception_project_swarm', 'inception_project_service']

4
templates/settings.properties.j2
View File

@ -12,6 +12,9 @@ auth.preauth.newuser.roles={{ inception_project_server_preauth_default_roles }}
auth.user.{{ user_role.username }}.roles={{ user_role.roles }}
{% endfor %}
{% endif %}
{% for additional_setting in inception_project_additional_settings %}
{{ setting }}
{% endfor %}
{% if inception_project_disable_crsf %}
wicket.core.csrf.enabled=false
wicket.core.csrf.no-origin-action=allow
@ -20,6 +23,7 @@ wicket.core.csrf.conflicting-origin-action=allow
{% if inception_project_server_behind_reverse_proxy %}
# server.tomcat.internal-proxies=127\.0\.[0-1]\.1
server.tomcat.remote-ip-header=x-forwarded-for
server.forward-headers-strategy=NATIVE
server.tomcat.accesslog.request-attributes-enabled=true
server.tomcat.protocol-header=x-forwarded-proto
server.tomcat.protocol-header-https-value=https