-
Notifications
You must be signed in to change notification settings - Fork 0
/
cloud-openproject
77 lines (69 loc) · 2.12 KB
/
cloud-openproject
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
- hosts: local
connection: local
roles:
- basis
- backup
- postgres
- nginx
- openproject
- checkmk
vars:
users_local: [] #some local users only specific to this node!
users: "{{ users_local + users_admin }}"
fail2ban_activate_modules:
- sshd
- nginx
openproject_db:
type: pgsql
name: openproject
user: openprojectuser
pass: FancyOpenProjectDbPasswordVeryLong
openproject_mail_smtp_host: "{{ mail_domain }}"
openproject_mail_smtp_port: "{{ mail_port }}"
openproject_mail_smtp_user: "{{ development_mail_address }}"
openproject_mail_smtp_pass: "{{ development_mail_pass }}"
openproject_mail_smtp_domain: "{{ openproject_mail_smtp_host }}"
openproject_mail_admin: "{{ noreply_mail_address }}"
openproject_domain: "project.{{ domain_external }}"
openproject_http_port: 6000
openproject_webste:
domain: "project.{{ domain_external }}"
letsencrypt: true
state: present
owner: openproject
port: 80
root_setup: false
index: noindex
root: noroot
options:
access_log: "/var/log/nginx/project.{{ domain_external }}-access.log"
error_log: "/var/log/nginx/project.{{ domain_external }}-error.log"
pre_options: |
upstream openproject {
server 127.0.0.1:{{ openproject_http_port }};
}
locations:
- location: "/"
options: |
proxy_pass_header Server;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Proto https;
proxy_redirect off;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Scheme $scheme;
proxy_pass http://openproject/;
# Websites
web_sites:
- "{{ openproject_webste }}"
# Databases
db_configs:
- "{{ openproject_db }}"
# Backup
backup_dbs:
- "{{ db_configs | json_query('[*].{type: type, name: name}') }}"
backup_targets:
db: "{{ backup_dbs | flatten }}"
file:
- "/etc/letsencrypt"
vars_files:
- "group_vars/environment.yaml"