109 lines
4.7 KiB
YAML
109 lines
4.7 KiB
YAML
---
|
|
mongodb_install_from_external_repo: False
|
|
mongodb_repo_keys:
|
|
- 2930ADAE8CAF5059EE73BB4B58712A2291FA4AD5
|
|
- EA312927
|
|
- 0C49F3730359A14518585931BC711F9BA15703C6
|
|
mongodb_apt_repository: "deb http://repo.mongodb.org/apt/ubuntu {{ ansible_distribution_release }}/mongodb-org/{{ mongodb_version }} multiverse"
|
|
|
|
mongodb_old_repositories:
|
|
- "deb http://repo.mongodb.org/apt/ubuntu {{ ansible_distribution_release }}/mongodb-org/3.0 multiverse"
|
|
- "deb http://downloads-distro.mongodb.org/repo/ubuntu-upstart dist 10gen"
|
|
|
|
mongodb_install_packages: True
|
|
mongodb_install_server: True
|
|
mongodb_install_conf: True
|
|
mongodb_upgrade_from_older_version: False
|
|
mongodb_version: 3.6
|
|
# Set to 'latest' if you want to get the latest available package
|
|
mongodb_pkg_state: present
|
|
mongodb_server_pkgs_external_repo:
|
|
- mongodb-org
|
|
- mongodb-org-mongos
|
|
- mongodb-org-server
|
|
- mongodb-org-shell
|
|
- mongodb-org-tools
|
|
|
|
mongodb_client_pkgs_external_repo:
|
|
- mongodb-org-shell
|
|
|
|
mongodb_server_pkgs:
|
|
- mongodb
|
|
- mongodb-server
|
|
- mongo-tools
|
|
|
|
mongodb_client_pkgs:
|
|
- mongodb-clients
|
|
|
|
mongodb_start_server: 'yes'
|
|
mongodb_tcp_port: 27017
|
|
mongo_bind_ip: 0.0.0.0
|
|
mongodb_http_interface: 'false'
|
|
mongodb_user: mongodb
|
|
mongodb_group: mongodb
|
|
mongodb_logdir: /var/log/mongodb
|
|
mongodb_log_file: mongod.log
|
|
mongodb_logpath: '{{ mongodb_logdir }}/{{ mongodb_log_file }}'
|
|
mongodb_dbpath: /var/lib/mongodb
|
|
mongodb_directoryperdb: 'false'
|
|
mongodb_conf_file: /etc/mongod.conf
|
|
mongodb_daemon: /usr/bin/mongod
|
|
mongod_additional_options: ""
|
|
mongodb_allowed_hosts:
|
|
- 127.0.0.1/8
|
|
- '{{ ansible_default_ipv4.address }}/32'
|
|
|
|
mongodb_storage_engine: wiredTiger
|
|
|
|
mongodb_ssl_enabled: True
|
|
mongodb_ssl_letsencrypt_managed: True
|
|
mongodb_ssl_letsencrypt_ca_dir: '/etc/ssl/certs'
|
|
# Default CA file on Ubuntu
|
|
mongodb_ssl_letsencrypt_ca_filename: 'ca-certificates.crt'
|
|
# Options: disabled, requireSSL, allowSSL, preferSSL
|
|
mongodb_ssl_mode: requireSSL
|
|
mongodb_ssl_cert_dir: /etc/pki/mongodb
|
|
mongodb_ssl_certkey_file: '{{ mongodb_ssl_cert_dir }}/mongodb.pem'
|
|
mongodb_ssl_CA_file: '{{ mongodb_ssl_letsencrypt_ca_dir }}/{{ mongodb_ssl_letsencrypt_ca_filename }}'
|
|
mongodb_ssl_allowConnectionsWithoutCertificates: 'true'
|
|
mongodb_ssl_disabled_protocols: 'TLS1_0,TLS1_1'
|
|
|
|
# Do not change the default. We do not manage a logrotate configuration yet
|
|
mongodb_logrotate_management: True
|
|
mongodb_systemlog_external_logrotate: False
|
|
mongodb_systemlog_destination: file
|
|
mongodb_log_retain_days: 7
|
|
# Not used anymore inside the template. Now we use different values based on mongodb_systemlog_external_logrotate
|
|
mongodb_systemlog_logappend: 'true'
|
|
mongodb_systemlog_logrotate: reopen
|
|
|
|
mongodb_cluster_enabled: False
|
|
mongodb_authorization_enabled: False
|
|
mongodb_replicaset: storagedev
|
|
mongodb_replica_keyfile: '{{ mongodb_dbpath }}/replica_keyfile'
|
|
mongodb_oplog_size: 2000
|
|
|
|
# Prometheus metrics
|
|
mongodb_prometheus_exporter_enabled: False
|
|
mongodb_prometheus_exporter_version: '0.30.0'
|
|
mongodb_prometheus_exporter_dir: 'mongodb_exporter-{{ mongodb_prometheus_exporter_version }}.linux-amd64'
|
|
mongodb_prometheus_exporter_file: '{{ mongodb_prometheus_exporter_dir }}.tar.gz'
|
|
mongodb_prometheus_exporter_download_url: 'https://github.com/percona/mongodb_exporter/releases/download/v{{ mongodb_prometheus_exporter_version }}/{{ mongodb_prometheus_exporter_file }}'
|
|
mongodb_prometheus_exporter_port: 9216
|
|
mongodb_prometheus_exporter_loglevel: error
|
|
mongodb_prometheus_exporter_collstat_limit: '20'
|
|
mongodb_prometheus_exporter_opts: '--web.listen-address=":{{ mongodb_prometheus_exporter_port }}" --log.level={{ mongodb_prometheus_exporter_loglevel }}'
|
|
mongodb_prometheus_exporter_connection_opts: '--mongodb.uri="mongodb://{{ mongodb_prometheus_exporter_connection_user }}:{{ mongodb_prometheus_exporter_connection_password }}@{{ mongodb_prometheus_exporter_connection_host }}/{{ mongodb_prometheus_exporter_connection_params }}"'
|
|
mongodb_prometheus_exporter_collect_opts: '--mongodb.global-conn-pool --mongodb.direct-connect=true --collector.topmetrics --discovering-mode --collector.dbstats --collector.collstats-limit={{ mongodb_prometheus_exporter_collstat_limit }}'
|
|
mongodb_prometheus_exporter_enable_compatible_mode: False
|
|
# List the additional options here
|
|
mongodb_prometheus_exporter_additional_opts: ''
|
|
mongodb_prometheus_exporter_user: prometheus_mongodb
|
|
mongodb_prometheus_exporter_home: '/opt/{{ mongodb_prometheus_exporter_user }}'
|
|
mongodb_prometheus_exporter_dist_dir: '{{ mongodb_prometheus_exporter_home }}/dist'
|
|
mongodb_prometheus_exporter_cmd: '{{ mongodb_prometheus_exporter_dist_dir }}/{{ mongodb_prometheus_exporter_dir }}/mongodb_exporter'
|
|
mongodb_prometheus_exporter_connection_host: 'localhost:27017'
|
|
mongodb_prometheus_exporter_connection_user: monitor
|
|
#mongodb_prometheus_exporter_connection_password: 'use a vault'
|
|
mongodb_prometheus_exporter_connection_params: 'admin?ssl=true'
|