ansible-taler-exchange

Ansible playbook to deploy a production Taler Exchange
Log | Files | Refs | Submodules | README | LICENSE

test-public.yml (3055B)

      1 ---
      2 # Pregenerated dhparam.pem is less secure
      3 # but significantly faster.
      4 USE_PREGENERATED_DHPARAM: true
      5 # No auditor (yet)
      6 deploy_auditor: false
      7 deploy_monitoring: false
      8 # We use EBICS to talk to the bank.
      9 use_ebics: false
     10 # Use externally created EBICS keys.
     11 ebics_keys_external: false
     12 # Main domain name.
     13 domain_name: "glsint.fdold.eu"
     14 exchange_domain: "exchange.{{ domain_name }}"
     15 # High-level kind of deployment.
     16 # Other customizations depend on this.
     17 # Can be "gls" or "tops" (later: "magnet")
     18 DEPLOYMENT_KIND: "gls"
     19 # Our internal hostname
     20 TARGET_HOST_NAME: "guava.box.fdold.eu"
     21 # Disable restore from backup? MUST be set to "false" once in production!
     22 # This forces a backup to be provided *if* there is no database on the
     23 # target system already. If such a database exists, we will NOT restore
     24 # any backup even if this is 'false'. If no database exists on the target
     25 # system and this option is 'false', then a backup must have been provided
     26 # at the originating host (you get get it using the 'restore.sh' script).
     27 DISABLE_RESTORE_BACKUP: true
     28 # Use nightly Taler distro (true/false).
     29 USE_NIGHTLY: false
     30 # Our currency.
     31 CURRENCY: EUR
     32 # Smallest unit of the currency for wire transfers.
     33 CURRENCY_ROUND_UNIT: "EUR:0.01"
     34 # Base URL of the exchange REST API
     35 EXCHANGE_BASE_URL: "https://exchange.{{ domain_name }}/"
     36 # Exchange offline master public key.
     37 EXCHANGE_MASTER_PUB: GW875YV09RZ743X045DNSQC7SFNF0G66707H7PT3TP0RWPAPR340
     38 # URL with merchants accepting this exchange.
     39 EXCHANGE_SHOPPING_URL: "https://shops.taler.gls.de/"
     40 # Name of Terms of service resource file
     41 EXCHANGE_TERMS_ETAG: "exchange-gls-tos-test-v3"
     42 # Name of Privacy policy resource file
     43 EXCHANGE_PP_ETAG: "exchange-pp-v0"
     44 # Full BIC of exchange account
     45 EXCHANGE_BANK_ACCOUNT_BIC: "GENODEM1GLS"
     46 # Full Payto URI of exchange account (for credit and debit)
     47 EXCHANGE_BANK_ACCOUNT_IBAN: "DE04601202004238636548"
     48 # Full Payto URI of exchange account (for credit and debit)
     49 EXCHANGE_BANK_ACCOUNT_PAYTO: "payto://iban/{{ EXCHANGE_BANK_ACCOUNT_IBAN }}?receiver-name=GLS+Taler+Internal"
     50 # Port to be used by libeufin-nexus for the taler-exchange-wire-gateway
     51 LIBEUFIN_PORT: 8082
     52 # Name of the exchange account at libeufin-nexus
     53 LIBEUFIN_EXCHANGE_ACCOUNT: "exchange"
     54 # Which KYC/AML rules to set up.
     55 # Name of the bank dialect
     56 LIBEUFIN_NEXUS_BANK_DIALECT: "gls"
     57 # SPA dialect (tops, gls, magnet, ...)
     58 EXCHANGE_SPA_DIALECT: "gls"
     59 # Business name of the exchange operator
     60 EXCHANGE_OPERATOR_LEGAL_NAME: "GLS Taler Internal"
     61 # Where to send people after they passed KYC.
     62 KYC_THANK_YOU_URL: https://taler.gls.de/thank-you-kyc
     63 # Tool to use for sanction list checking
     64 EXCHANGE_SANCTION_HELPER: taler-exchange-helper-sanctions-dummy
     65 
     66 # If set to true, set up an additional user to allow faking wire transfers and
     67 # inspecting challenger auth codes.
     68 # This setting MUST NOT be enabled in production
     69 # deployments under any circumstance.
     70 dangerously_enable_devtesting: true
     71 
     72 devtesting_ssh_keys:
     73   - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINHSjJ/zPwQnqBrKp0qK+OdsZYfQ8DHY2dyJakNozBi7 fdold-work@sapota"