mg/homeserver
1
0
Fork 0
Code Issues 1 Pull requests 3 Activity Actions

redeployment forgejo + setup ldap #1

Merged
mg merged 123 commits from gb into master 2024-04-04 09:48:10 +02:00
Conversation 0 Commits 123 Files changed 46 +9 -8
3 changed files with 9 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files
Showing only changes of commit f5308176fe - Show all commits

5
host_vars/ldap.mgrote.net.yml
View file

@ -31,7 +31,7 @@ ufw_rules:
### mgrote_lldap ### mgrote_lldap
lldap_package_url: "https://download.opensuse.org/repositories/home:/Masgalor:/LLDAP/xUbuntu_22.04/amd64/lldap_0.5.0-1+3.1_amd64.deb" lldap_package_url: "https://download.opensuse.org/repositories/home:/Masgalor:/LLDAP/xUbuntu_22.04/amd64/lldap_0.5.0-1+3.1_amd64.deb"
lldap_logging_verbose: false lldap_logging_verbose: "false"
lldap_http_port: 17170 lldap_http_port: 17170
lldap_http_host: "0.0.0.0" lldap_http_host: "0.0.0.0"
lldap_ldap_host: "0.0.0.0" lldap_ldap_host: "0.0.0.0"
@ -49,9 +49,10 @@ lldap_smtp_server: "docker10.mgrote.net"
lldap_smtp_port: "1025" lldap_smtp_port: "1025"
lldap_smtp_smtp_encryption: "NONE" lldap_smtp_smtp_encryption: "NONE"
lldap_smtp_user: "info@mgrote.net" lldap_smtp_user: "info@mgrote.net"
lldap_smtp_enable_password_reset: true lldap_smtp_enable_password_reset: "true"
# "meta vars"; daraus werden die db-url und die postgres-db abgeleitet # "meta vars"; daraus werden die db-url und die postgres-db abgeleitet
lldap_db_name: "lldap" lldap_db_name: "lldap"
lldap_db_user: "lldap" lldap_db_user: "lldap"
lldap_db_pass: "{{ lookup('keepass', 'lldap_db_pass', 'password') }}" lldap_db_pass: "{{ lookup('keepass', 'lldap_db_pass', 'password') }}"
lldap_db_host: "localhost" lldap_db_host: "localhost"
...

4
roles/mgrote_lldap/defaults/main.yml
View file

@ -1,6 +1,6 @@
--- ---
lldap_package_url: "https://download.opensuse.org/repositories/home:/Masgalor:/LLDAP/xUbuntu_22.04/amd64/lldap_0.5.0-1+3.1_amd64.deb" lldap_package_url: "https://download.opensuse.org/repositories/home:/Masgalor:/LLDAP/xUbuntu_22.04/amd64/lldap_0.5.0-1+3.1_amd64.deb"
lldap_logging_verbose: false lldap_logging_verbose: "false"
lldap_http_port: "17170" lldap_http_port: "17170"
lldap_http_host: "0.0.0.0" lldap_http_host: "0.0.0.0"
lldap_ldap_host: "0.0.0.0" lldap_ldap_host: "0.0.0.0"
@ -18,4 +18,4 @@ lldap_smtp_server: "mail.domain.net"
lldap_smtp_port: "25" lldap_smtp_port: "25"
lldap_smtp_smtp_encryption: "NONE" lldap_smtp_smtp_encryption: "NONE"
lldap_smtp_user: "info@mgrote.net" lldap_smtp_user: "info@mgrote.net"
lldap_smtp_enable_password_reset: true lldap_smtp_enable_password_reset: "true"

8
roles/mgrote_lldap/templates/lldap_config.toml.j2
View file

@ -1,7 +1,7 @@
{{ file_header | default () }} {{ file_header | default () }}
## Tune the logging to be more verbose by setting this to be true. ## Tune the logging to be more verbose by setting this to be true.
## You can set it with the LLDAP_VERBOSE environment variable. ## You can set it with the LLDAP_VERBOSE environment variable.
verbose="{{ lldap_logging_verbose }}" verbose={{ lldap_logging_verbose }}
## The host address that the LDAP server will be bound to. ## The host address that the LDAP server will be bound to.
## To enable IPv6 support, simply switch "ldap_host" to "::": ## To enable IPv6 support, simply switch "ldap_host" to "::":
@ -20,7 +20,7 @@ http_host = "{{ lldap_http_host }}"
## The port on which to have the HTTP server, for user login and ## The port on which to have the HTTP server, for user login and
## administration. ## administration.
http_port = "{{ lldap_http_port }}" http_port = {{ lldap_http_port }}
## The public URL of the server, for password reset links. ## The public URL of the server, for password reset links.
http_url = "{{ lldap_public_url }}" http_url = "{{ lldap_public_url }}"
@ -113,11 +113,11 @@ key_seed = "{{ lldap_key_seed }}"
## (example with "password"): LLDAP_SMTP_OPTIONS__PASSWORD ## (example with "password"): LLDAP_SMTP_OPTIONS__PASSWORD
[smtp_options] [smtp_options]
## Whether to enabled password reset via email, from LLDAP. ## Whether to enabled password reset via email, from LLDAP.
enable_password_reset="{{ lldap_smtp_enable_password_reset }}" enable_password_reset={{ lldap_smtp_enable_password_reset }}
## The SMTP server. ## The SMTP server.
server="{{ lldap_smtp_server }}" server="{{ lldap_smtp_server }}"
## The SMTP port. ## The SMTP port.
port="{{ lldap_smtp_port }}" port={{ lldap_smtp_port }}
## How the connection is encrypted, either "NONE" (no encryption), "TLS" or "STARTTLS". ## How the connection is encrypted, either "NONE" (no encryption), "TLS" or "STARTTLS".
smtp_encryption = "{{ lldap_smtp_smtp_encryption }}" smtp_encryption = "{{ lldap_smtp_smtp_encryption }}"
## The SMTP user, usually your email address. ## The SMTP user, usually your email address.