vars.yml (5617B)
1 # Public variables for the Taler Operations AG (TOPS) deployment 2 # Deploy challenger? 3 deploy_challenger: true 4 # What kind of environment are we deploying? 5 DEPLOYMENT_KIND: "tops" 6 # Disable restore from backup? MUST be set to "false" once in production! 7 # This forces a backup to be provided *if* there is no database on the 8 # target system already. If such a database exists, we will NOT restore 9 # any backup even if this is 'false'. If no database exists on the target 10 # system and this option is 'false', then a backup must have been provided 11 # at the originating host (you get get it using the 'restore.sh' script). 12 DISABLE_RESTORE_BACKUP: false 13 # Use EBICS? (starts libeufin-nexus-fetch/submit services) 14 USE_EBICS: false 15 # Write EBICS configuration (with values in secret config) 16 configure_ebics: true 17 # Main domain name. 18 domain_name: "taler-ops.ch" 19 exchange_domain: "exchange.{{ domain_name }}" 20 # Our internal hostname 21 TARGET_HOST_NAME: "spec.taler-ops.ch" 22 # Suite for taler packages. 23 taler_repo_suites: trixie 24 # Deploy EBICS configuration (true/false). 25 use_ebics: false 26 # Our currency. 27 CURRENCY: CHF 28 # Smallest unit of the currency for wire transfers. 29 CURRENCY_ROUND_UNIT: "CHF:0.01" 30 # Sanction list to use, comment out to disable 31 # SANCTION_LIST: sanctions-swiss.json 32 # Base URL of the exchange REST API 33 EXCHANGE_BASE_URL: "https://exchange.{{ domain_name }}/" 34 # Base URL of the auditor REST API 35 AUDITOR_BASE_URL: "https://auditor.{{ domain_name }}/" 36 # Exchange offline master public key. 37 EXCHANGE_MASTER_PUB: 9V0G82S7JQW2ZRYF7BMGKKQ1TNR1VNVXZJSNQ2VSDGWC80D9W0YG 38 # Auditor offline public key. 39 AUDITOR_PUB: P6B7ZS7Y1Y12S0VP0PAJ1GQGSHW8RE4NSBTP8PR254J18SK24MH0 40 # URL with merchants accepting this exchange. 41 EXCHANGE_SHOPPING_URL: "https://map.taler-ops.ch/" 42 # Name of Terms of service resource file 43 EXCHANGE_TERMS_ETAG: "exchange-tos-tops-v0" 44 # Name of Privacy policy resource file 45 EXCHANGE_PP_ETAG: "exchange-pp-v0" 46 # Full BIC of exchange account 47 EXCHANGE_BANK_ACCOUNT_BIC: "POFICHBEXXX" 48 # Full Payto URI of exchange account (for credit and debit) 49 EXCHANGE_BANK_ACCOUNT_IBAN: "CH9709000000166556130" 50 # Full Payto URI of exchange account (for credit and debit) 51 EXCHANGE_BANK_ACCOUNT_PAYTO: "payto://iban/{{ EXCHANGE_BANK_ACCOUNT_IBAN }}?receiver-name=Taler+Operations+AG" 52 # Port to be used by libeufin-nexus for the taler-exchange-wire-gateway 53 LIBEUFIN_PORT: 8082 54 # Name of the exchange account at libeufin-nexus 55 LIBEUFIN_EXCHANGE_ACCOUNT: "exchange" 56 # Name of the bank dialect 57 LIBEUFIN_NEXUS_BANK_DIALECT: "postfinance" 58 # SPA dialect (tops, gls, magnet, ...) 59 EXCHANGE_SPA_DIALECT: "tops" 60 # Business name of the exchange operator 61 EXCHANGE_OPERATOR_LEGAL_NAME: "Taler Operations AG" 62 # Where to send people after they passed KYC. 63 KYC_THANK_YOU_URL: https://taler-ops.ch/en/thank-you-kyc.html 64 # Template to use for identification of individuals with KYCAID 65 KYCAID_TEMPLATE_INDIVIDUAL: tmpl_xxx 66 # Template to use for identification of businesses with KYCAID 67 KYCAID_TEMPLATE_BUSINESS: tmpl_xxx 68 # Regex specifying allowed phone numbers for the SMS check 69 EXCHANGE_AML_PROGRAM_TOPS_SMS_HINT: "Swiss number required" 70 EXCHANGE_AML_PROGRAM_TOPS_SMS_EXAMPLE: "+41948224521" 71 EXCHANGE_AML_PROGRAM_TOPS_SMS_REGEX: "\\\\+41[0-9]+" 72 # Regex specifying allowed country names for the postal address check 73 EXCHANGE_AML_PROGRAM_TOPS_POSTAL_COUNTRY_HINT: "Swiss address required" 74 EXCHANGE_AML_PROGRAM_TOPS_POSTAL_EXAMPLE: "Max Mustermann\\nBahnhofsplatz 1\\n4201 Biel/Bienne" 75 EXCHANGE_AML_PROGRAM_TOPS_POSTAL_COUNTRY_REGEX: "CH|Ch|ch" 76 # Tool to use for sanction list checking 77 EXCHANGE_SANCTION_HELPER: taler-exchange-helper-sanctions-dummy 78 79 # Secrets are taken from the vault file and substituted via 80 # the vault_* variables. 81 # 82 # YOU MAY ONLY edit the vault.yml file via 83 # $ ansible-vault edit inventories/host_vars/spec/vault.yml 84 # to decrease the likelihood of unencrypted secrets ending up in git. 85 HAVE_SECRETS: true 86 87 # Symmetric encryption secret for KYC attribute encryption. 88 EXCHANGE_ATTRIBUTE_ENCRYPTION_KEY: "{{ vault_exchange_attribute_encryption_key }}" 89 # EBICS access details 90 LIBEUFIN_NEXUS_EBICS_HOST_BASE_URL: https://ebics.postfinance.ch/ebics/ebics.aspx 91 LIBEUFIN_NEXUS_EBICS_HOST_ID: PFEBICS 92 LIBEUFIN_NEXUS_EBICS_USER_ID: "{{ vault_libeufin_nexus_ebics_user_id }}" 93 LIBEUFIN_NEXUS_EBICS_PARTNER_ID: "{{ vault_libeufin_nexus_ebics_partner_id }}" 94 LIBEUFIN_NEXUS_EBICS_SYSTEM_ID: "{{ vault_libeufin_nexus_ebics_system_id }}" 95 96 # Authorization token for the telesign SMS service 97 # "Basic" is pre-pended by the shell script 98 SMS_CHALLENGER_TELESIGN_AUTH_TOKEN: "{{ vault_sms_challenger_telesign_auth_token }}" 99 100 sms_challenger_clicksend_username: "{{ vault_sms_challenger_clicksend_username }}" 101 vault_sms_challenger_clicksend_api_key: "{{ vault_sms_challenger_clicksend_api_key }}" 102 103 # Authorization data for the pingen postal service 104 POSTAL_CHALLENGER_PINGEN_CLIENT_ID: "{{ vault_postal_challenger_pingen_client_id }}" 105 POSTAL_CHALLENGER_PINGEN_CLIENT_SECRET: "{{ vault_postal_challenger_pingen_client_secret }}" 106 POSTAL_CHALLENGER_PINGEN_ORG_ID: "{{ vault_postal_challenger_pingen_org_id }}" 107 108 # KYCaid access token 109 EXCHANGE_KYCAID_ACCESS_TOKEN: "{{ vault_exchange_kycaid_access_token }}" 110 111 # Bearer access token for the auditor SPA (set via browser extension to set Authorization HTTP header on auditor.$DOMAIN!) 112 AUDITOR_ACCESS_TOKEN: "{{ vault_auditor_access_token }}" 113 114 # Bearer access token for monitoring.$DOMAIN (must be given to grafana) 115 PROMETHEUS_ACCESS_TOKEN: "{{ vault_prometheus_access_token }}" 116 117 # Bearer access token for loki.taler-systems.com (see that nginx config) 118 LOKI_ACCESS_TOKEN: "{{ vault_loki_access_token }}"