ansible-taler-exchange

Ansible playbook to deploy a production Taler Exchange
Log | Files | Refs | README | LICENSE

ModeNameSize
-rw-r--r--.ansible-lint9L
-rw-r--r--.gitignore19L
-rw-r--r--COPYING661L
-rw-r--r--Containerfile31L
-rw-r--r--README588L
-rw-r--r--TIPS.md11L
-rw-r--r--TODO3L
-rw-r--r--ansible.cfg17L
-rwxr-xr-xbackup20L
-rw-r--r--contrib/ci/Containerfile5L
-rwxr-xr-xcontrib/ci/ci.sh44L
-rwxr-xr-xcontrib/ci/jobs/001-build/build.sh7L
-rwxr-xr-xcontrib/ci/jobs/001-build/job.sh6L
-rwxr-xr-xcontrib/decrypt37L
-rwxr-xr-xcontrib/encrypt25L
-rw-r--r--contrib/test-certbot94L
-rwxr-xr-xcontrib/test-fact-helpers.sh54L
-rw-r--r--contrib/tests/test_backup.py180L
-rw-r--r--contrib/tests/test_deployment.py266L
-rw-r--r--contrib/tests/test_deployment_recovery.py233L
-rw-r--r--contrib/tests/test_monitoring.py353L
-rw-r--r--contrib/tests/test_monitoring_listeners.py105L
-rw-r--r--contrib/tests/test_nginx_latency.py62L
-rw-r--r--contrib/tests/test_upgrade_policy.py80L
-rwxr-xr-xdeploy19L
-rwxr-xr-xdeploy-hacktivism-goa.sh25L
-rwxr-xr-xextract-borg-key25L
-rw-r--r--inventories/default18L
-rw-r--r--inventories/group_vars/all/defaults.yml60L
-rw-r--r--inventories/group_vars/testing/test-public.yml59L
-rw-r--r--inventories/group_vars/testing/test-secrets.yml25L
-rw-r--r--inventories/host_vars/fdold-acai-tops/test-public.yml64L
-rw-r--r--inventories/host_vars/fdold-acai-tops/test-secrets.yml24L
-rw-r--r--inventories/host_vars/podman-localhost/test-public.yml61L
-rw-r--r--inventories/host_vars/podman-localhost/test-secrets.yml24L
-rw-r--r--inventories/host_vars/rusty/monitoring-client-secrets.yml42L
-rw-r--r--inventories/host_vars/rusty/monitoring-client.yml57L
-rw-r--r--inventories/host_vars/rusty/vars.yml136L
-rw-r--r--inventories/host_vars/rusty/vault.yml91L
-rw-r--r--inventories/host_vars/spec/monitoring-client-secrets.yml42L
-rw-r--r--inventories/host_vars/spec/monitoring-client.yml57L
-rw-r--r--inventories/host_vars/spec/vars.yml125L
-rw-r--r--inventories/host_vars/spec/vault.yml98L
-rw-r--r--inventories/host_vars/taler-hacktivism-exchange-ansible/public.yml31L
-rw-r--r--inventories/host_vars/taler-hacktivism-exchange-ansible/secrets.yml6L
-rw-r--r--playbooks/backup.yml12L
-rw-r--r--playbooks/borg-ssh-export.yml11L
-rw-r--r--playbooks/borg-start.yml12L
-rw-r--r--playbooks/pixel-borg.yml12L
-rw-r--r--playbooks/reboot.yml13L
-rw-r--r--playbooks/restore.yml48L
-rw-r--r--playbooks/sanctionlist-check.yml12L
-rw-r--r--playbooks/setup-hacktivism-goa.yml14L
-rw-r--r--playbooks/setup.yml171L
-rwxr-xr-xreboot19L
-rwxr-xr-xrestore78L
-rw-r--r--roles/auditor/tasks/main.yml136L
-rw-r--r--roles/auditor/templates/etc/nginx/auditor-auth.conf.inc.j24L
-rw-r--r--roles/auditor/templates/etc/nginx/sites-available/auditor-http.conf.j214L
-rw-r--r--roles/auditor/templates/etc/nginx/sites-available/auditor-nginx.conf.j234L
-rw-r--r--roles/auditor/templates/etc/taler-auditor/conf.d/taler-auditor-master.conf.j233L
l---------roles/auditor/templates/etc/taler-auditor/secrets/auditor-accountcredentials-primary.secret.conf.j21L
-rw-r--r--roles/backup/handlers/main.yml4L
-rw-r--r--roles/backup/tasks/main.yml12L
-rw-r--r--roles/borg-ssh-export/tasks/main.yml30L
-rw-r--r--roles/borg-start/tasks/main.yml76L
-rw-r--r--roles/borg-start/templates/root/.ssh/config6L
-rw-r--r--roles/borg-start/templates/root/bin/borg-backup.sh122L
-rw-r--r--roles/cert/tasks/main.yml98L
-rw-r--r--roles/challenger/defaults/main.yml5L
-rw-r--r--roles/challenger/files/etc/challenger/email-message-template.txt1L
-rw-r--r--roles/challenger/files/etc/challenger/postal-message-template.txt20L
-rw-r--r--roles/challenger/files/etc/challenger/sms-message-template.txt1L
-rw-r--r--roles/challenger/files/etc/systemd/system/email-challenger-httpd.service21L
-rw-r--r--roles/challenger/files/etc/systemd/system/postal-challenger-httpd.service23L
-rw-r--r--roles/challenger/files/etc/systemd/system/sms-challenger-httpd.service23L
-rw-r--r--roles/challenger/files/etc/taler-exchange/conf.d/challenger.conf6L
-rw-r--r--roles/challenger/files/usr/local/bin/mock-mfa-email47L
-rw-r--r--roles/challenger/files/usr/local/bin/mock-mfa-sms47L
-rw-r--r--roles/challenger/tasks/main.yml8L
-rw-r--r--roles/challenger/tasks/post-exchange.yml38L
-rw-r--r--roles/challenger/tasks/pre-exchange.yml378L
-rw-r--r--roles/challenger/templates/etc/challenger/challenger-email.conf.j249L
-rw-r--r--roles/challenger/templates/etc/challenger/challenger-postal.conf.j245L
-rw-r--r--roles/challenger/templates/etc/challenger/challenger-sms.conf.j246L
-rw-r--r--roles/challenger/templates/etc/challenger/postal-challenger.env.j26L
-rw-r--r--roles/challenger/templates/etc/challenger/sms-challenger.env.j223L
-rw-r--r--roles/challenger/templates/etc/nginx/conf.d/challenger-tls.conf.inc4L
-rw-r--r--roles/challenger/templates/etc/nginx/sites-available/email-challenger-http.conf.j215L
-rw-r--r--roles/challenger/templates/etc/nginx/sites-available/email-challenger-nginx.conf.j221L
-rw-r--r--roles/challenger/templates/etc/nginx/sites-available/postal-challenger-http.conf.j214L
-rw-r--r--roles/challenger/templates/etc/nginx/sites-available/postal-challenger-nginx.conf.j222L
-rw-r--r--roles/challenger/templates/etc/nginx/sites-available/sms-challenger-http.conf.j214L
-rw-r--r--roles/challenger/templates/etc/nginx/sites-available/sms-challenger-nginx.conf.j222L
-rw-r--r--roles/challenger/templates/etc/taler-exchange/secrets/challenger-email.secret.conf.j213L
-rw-r--r--roles/challenger/templates/etc/taler-exchange/secrets/challenger-postal.secret.conf.j213L
-rw-r--r--roles/challenger/templates/etc/taler-exchange/secrets/challenger-sms.secret.conf.j213L
-rw-r--r--roles/common_packages/files/dhparam_pregenerated.pem13L
-rw-r--r--roles/common_packages/files/etc/apt/keyrings/taler-systems.gpg1756B
-rw-r--r--roles/common_packages/files/etc/apt/preferences.d/limit-taler-repo6L
-rwxr-xr-xroles/common_packages/files/setup-challenger-client-id-fact28L
-rwxr-xr-xroles/common_packages/files/setup-secret-fact19L
-rw-r--r--roles/common_packages/handlers/main.yml5L
-rw-r--r--roles/common_packages/tasks/main.yml126L
-rw-r--r--roles/common_packages/tasks/upgrade.yml84L
-rw-r--r--roles/common_packages/templates/upgrade-policy-rc.d.j217L
-rw-r--r--roles/database/tasks/main.yml19L
-rw-r--r--roles/database_restore/defaults/main.yml6L
-rw-r--r--roles/database_restore/tasks/main.yml309L
-rw-r--r--roles/deployment_state/defaults/main.yml2L
-rw-r--r--roles/deployment_state/tasks/complete.yml7L
-rw-r--r--roles/deployment_state/tasks/main.yml32L
-rw-r--r--roles/devtesting/tasks/disable.yml32L
-rw-r--r--roles/devtesting/tasks/enable.yml65L
-rw-r--r--roles/devtesting/tasks/files/etc/sudoers.d/devtesting2L
-rw-r--r--roles/devtesting/tasks/files/taler-devtesting107L
-rwxr-xr-xroles/devtesting/tasks/files/taler-devtesting-exchange-challenger-setup306L
-rw-r--r--roles/devtesting/tasks/main.yml8L
-rw-r--r--roles/devtesting/tasks/templates/authorized_keys3L
-rw-r--r--roles/exchange-sanctionlist-import/tasks/main.yml35L
-rw-r--r--roles/exchange/defaults/main.yml4L
-rw-r--r--roles/exchange/files/var/lib/taler-exchange/sanctions-swiss.json179782L
-rw-r--r--roles/exchange/handlers/main.yml9L
-rw-r--r--roles/exchange/tasks/main.yml230L
-rw-r--r--roles/exchange/templates/etc/nginx/sites-available/exchange-http.conf.j214L
-rw-r--r--roles/exchange/templates/etc/nginx/sites-available/exchange-nginx.conf.j242L
-rw-r--r--roles/exchange/templates/etc/taler-exchange/conf.d/exchange-business.conf.j276L
-rw-r--r--roles/exchange/templates/etc/taler-exchange/secrets/exchange-accountcredentials-primary.secret.conf.j29L
-rw-r--r--roles/exchange/templates/etc/taler-exchange/secrets/exchange-attributes.secret.conf.j22L
-rw-r--r--roles/exchange_tops/defaults/main.yml11L
-rw-r--r--roles/exchange_tops/tasks/main.yml65L
-rw-r--r--roles/exchange_tops/templates/etc/taler-exchange/conf.d/denominations.conf.j2229L
-rw-r--r--roles/exchange_tops/templates/etc/taler-exchange/conf.d/kyc-rules.conf.j2426L
-rw-r--r--roles/exchange_tops/templates/etc/taler-exchange/secrets/exchange-kyc-provider-business.secret.conf.j28L
-rw-r--r--roles/exchange_tops/templates/etc/taler-exchange/secrets/exchange-kyc-provider-individual.secret.conf.j28L
-rw-r--r--roles/exchange_tops/templates/etc/taler-exchange/taler-exchange.env.j29L
-rw-r--r--roles/hacktivism_goa/README.md41L
-rw-r--r--roles/hacktivism_goa/defaults/main.yml24L
-rw-r--r--roles/hacktivism_goa/files/denominations-goa.conf331L
-rw-r--r--roles/hacktivism_goa/files/terms/no-privacy-v0.en.rst15L
-rw-r--r--roles/hacktivism_goa/files/terms/no-terms-v0.en.rst16L
-rw-r--r--roles/hacktivism_goa/tasks/coins.yml31L
-rw-r--r--roles/hacktivism_goa/tasks/db.yml10L
-rw-r--r--roles/hacktivism_goa/tasks/health.yml31L
-rw-r--r--roles/hacktivism_goa/tasks/main.yml60L
-rw-r--r--roles/hacktivism_goa/tasks/offline.yml50L
-rw-r--r--roles/hacktivism_goa/tasks/packages.yml39L
-rw-r--r--roles/hacktivism_goa/tasks/postgres.yml69L
-rw-r--r--roles/hacktivism_goa/tasks/site_config.yml66L
-rw-r--r--roles/hacktivism_goa/tasks/start.yml17L
-rw-r--r--roles/hacktivism_goa/tasks/systemd_container.yml112L
-rw-r--r--roles/hacktivism_goa/templates/etc/taler-exchange/conf.d/setup.conf.j229L
-rw-r--r--roles/hacktivism_goa/templates/etc/taler-exchange/exchange-overrides.conf.j242L
-rw-r--r--roles/hacktivism_goa/templates/etc/taler-exchange/secrets/exchange-accountcredentials.secret.conf.j25L
-rw-r--r--roles/libeufin-nexus/files/etc/sudoers.d/libeufin-nexus-export1L
-rw-r--r--roles/libeufin-nexus/files/etc/sudoers.d/libeufin-nexus-import1L
-rw-r--r--roles/libeufin-nexus/files/home/libeufin-nexus-export/.ssh/authorized_keys3L
-rw-r--r--roles/libeufin-nexus/files/home/libeufin-nexus-import/.ssh/authorized_keys3L
-rw-r--r--roles/libeufin-nexus/files/usr/local/bin/libeufin-nexus-export.sh2L
-rw-r--r--roles/libeufin-nexus/files/usr/local/bin/libeufin-nexus-import.sh2L
-rw-r--r--roles/libeufin-nexus/tasks/main.yml261L
-rw-r--r--roles/libeufin-nexus/templates/etc/libeufin/libeufin-nexus-ebics.conf.j216L
-rw-r--r--roles/libeufin-nexus/templates/etc/libeufin/libeufin-nexus.conf.j259L
-rw-r--r--roles/libeufin-nexus/templates/etc/libeufin/wire-gateway.secret.conf.j22L
-rw-r--r--roles/libeufin-nexus/templates/etc/nginx/sites-available/nexus-http.conf.j214L
-rw-r--r--roles/libeufin-nexus/templates/etc/nginx/sites-available/nexus-nginx.conf.j235L
-rw-r--r--roles/monitoring/defaults/main.yml8L
-rw-r--r--roles/monitoring/files/exchange-latency-routes.json70L
-rw-r--r--roles/monitoring/files/node-exporter-proxy.service30L
-rw-r--r--roles/monitoring/files/validate-bundle.py147L
-rw-r--r--roles/monitoring/handlers/main.yml55L
-rw-r--r--roles/monitoring/tasks/fluent-bit.yml153L
-rw-r--r--roles/monitoring/tasks/main.yml137L
-rw-r--r--roles/monitoring/tasks/preflight.yml91L
-rw-r--r--roles/monitoring/tasks/recover.yml13L
-rw-r--r--roles/monitoring/templates/exchange-latency.conf.j258L
-rw-r--r--roles/monitoring/templates/exchange-latency.lua.j237L
-rw-r--r--roles/monitoring/templates/exchange-timing-logrotate.j213L
-rw-r--r--roles/monitoring/templates/fluent-bit.conf.j255L
-rw-r--r--roles/monitoring/templates/nginx.conf.j266L
-rw-r--r--roles/monitoring/templates/node-exporter-default.j22L
-rw-r--r--roles/pixel_borg/files/home/borg/.ssh/authorized_keys1L
-rw-r--r--roles/pixel_borg/tasks/main.yml63L
-rw-r--r--roles/post_deployment_checks/defaults/main.yml88L
-rw-r--r--roles/post_deployment_checks/tasks/main.yml71L
-rw-r--r--roles/reboot/tasks/main.yml7L
-rw-r--r--roles/start_services/tasks/main.yml45L
-rw-r--r--roles/stop_services/defaults/main.yml3L
-rw-r--r--roles/stop_services/tasks/main.yml33L
-rw-r--r--roles/webserver/files/etc/nginx/conf.d/listen.conf.inc27L
-rw-r--r--roles/webserver/files/etc/nginx/conf.d/log-format-apm.conf27L
-rw-r--r--roles/webserver/handlers/main.yml12L
-rw-r--r--roles/webserver/tasks/main.yml78L
-rw-r--r--roles/webserver/templates/exchange-latency.conf.j240L
-rwxr-xr-xrun-container-koopa.sh45L
-rwxr-xr-xsanction-check30L
-rwxr-xr-xsetup-pixel-borg33L
-rwxr-xr-xstage-activate29L
-rw-r--r--stage-offline.conf10L
-rwxr-xr-xstart-borg-backups28L
-rwxr-xr-xtest101L
-rw-r--r--test-ansible.cfg6L
-rw-r--r--test-master.priv32B
-rw-r--r--tops.conf37L
-rw-r--r--vault_pass.txt.gpg896B