Ian Roddis
177 lines
5.4 KiB
YAML
177 lines
5.4 KiB
YAML
---
|
|
# Shared test variables for all Molecule scenarios.
|
|
# Loaded via vars_files in each role's converge.yml.
|
|
|
|
molecule_test_mode: true
|
|
sovereign_base_dir: /tmp/sovereign_test
|
|
|
|
# Branding
|
|
base_domain: test.example.com
|
|
tenant_name: "Test Corp"
|
|
tenant_primary_color: "#2563eb"
|
|
tenant_accent_color: "#1e40af"
|
|
tenant_logo_local_path: ""
|
|
|
|
# Graylog logging (referenced in every docker-compose template)
|
|
graylog_host: "127.0.0.1"
|
|
graylog_gelf_port: 12201
|
|
sovereign_network_name: sovereign
|
|
|
|
# SMTP
|
|
smtp_host: stalwart
|
|
smtp_port: 587
|
|
smtp_from: "noreply@test.example.com"
|
|
smtp_user: "noreply@test.example.com"
|
|
smtp_password: "test_smtp_password"
|
|
smtp_tls: starttls
|
|
|
|
# Traefik
|
|
traefik_acme_email: "admin@test.example.com"
|
|
traefik_domain: "traefik.test.example.com"
|
|
traefik_dashboard_password: "test_traefik_dash"
|
|
traefik_version: "v3.1"
|
|
traefik_data_dir: /tmp/sovereign_test/traefik
|
|
|
|
# Authentik
|
|
authentik_domain: "auth.test.example.com"
|
|
authentik_version: "2024.10.5"
|
|
authentik_secret_key: "test-secret-key-exactly-50-chars-padded-here12345"
|
|
authentik_db_password: "test_authentik_db"
|
|
authentik_admin_email: "admin@test.example.com"
|
|
authentik_admin_password: "test_authentik_admin"
|
|
authentik_data_dir: /tmp/sovereign_test/authentik
|
|
|
|
# Graylog
|
|
graylog_domain: "logs.test.example.com"
|
|
graylog_version: "6.0"
|
|
graylog_password_secret: "test_graylog_secret_min_16_chars"
|
|
graylog_root_password_sha2: "test_sha256_placeholder"
|
|
graylog_data_dir: /tmp/sovereign_test/graylog
|
|
|
|
# Stalwart
|
|
stalwart_domain: "mail.test.example.com"
|
|
stalwart_admin_password: "test_stalwart_admin"
|
|
stalwart_version: "latest"
|
|
stalwart_data_dir: /tmp/sovereign_test/stalwart
|
|
|
|
# Roundcube
|
|
roundcube_domain: "webmail.test.example.com"
|
|
roundcube_version: "latest"
|
|
roundcube_db_password: "test_roundcube_db"
|
|
roundcube_des_key: "test_24_char_des_key____!"
|
|
roundcube_data_dir: /tmp/sovereign_test/roundcube
|
|
|
|
# Wazuh
|
|
wazuh_domain: "wazuh.test.example.com"
|
|
wazuh_version: "4.9.0"
|
|
wazuh_admin_password: "test_wazuh_admin"
|
|
wazuh_api_password: "test_wazuh_api"
|
|
wazuh_indexer_memory: "512m"
|
|
wazuh_data_dir: /tmp/sovereign_test/wazuh
|
|
|
|
# Headscale
|
|
headscale_domain: "headscale.test.example.com"
|
|
headscale_version: "0.23.0"
|
|
wireguard_domain: "vpn.test.example.com"
|
|
wireguard_port: 51820
|
|
headscale_noise_private_key: ""
|
|
headscale_data_dir: /tmp/sovereign_test/headscale
|
|
|
|
# Matrix / Element
|
|
matrix_domain: "matrix.test.example.com"
|
|
element_domain: "chat.test.example.com"
|
|
matrix_version: "v1.118.0"
|
|
matrix_registration_secret: "test_registration_secret"
|
|
matrix_db_password: "test_matrix_db"
|
|
element_theme: "light"
|
|
matrix_data_dir: /tmp/sovereign_test/matrix
|
|
|
|
# Jitsi
|
|
jitsi_domain: "meet.test.example.com"
|
|
jitsi_version: "stable-9753"
|
|
jitsi_jicofo_auth_password: "test_jicofo"
|
|
jitsi_jvb_auth_password: "test_jvb"
|
|
jitsi_jibri_recorder_password: "test_jibri_recorder"
|
|
jitsi_jibri_xmpp_password: "test_jibri_xmpp"
|
|
jitsi_turn_secret: "test_turn"
|
|
jitsi_data_dir: /tmp/sovereign_test/jitsi
|
|
|
|
# MinIO
|
|
minio_domain: "s3.test.example.com"
|
|
minio_console_domain: "minio.test.example.com"
|
|
minio_version: "latest"
|
|
minio_root_user: "minioadmin"
|
|
minio_root_password: "test_minio"
|
|
minio_nextcloud_bucket: "nextcloud"
|
|
minio_nextcloud_access_key: "nextcloud"
|
|
minio_nextcloud_secret_key: "test_nextcloud_s3"
|
|
minio_data_dir: /tmp/sovereign_test/minio
|
|
|
|
# Nextcloud
|
|
nextcloud_domain: "cloud.test.example.com"
|
|
nextcloud_version: "29"
|
|
nextcloud_admin_user: "admin"
|
|
nextcloud_admin_password: "test_nextcloud"
|
|
nextcloud_db_password: "test_nextcloud_db"
|
|
nextcloud_db_root_password: "test_nextcloud_db_root"
|
|
nextcloud_data_dir: /tmp/sovereign_test/nextcloud
|
|
|
|
# Vaultwarden
|
|
vaultwarden_domain: "vault.test.example.com"
|
|
vaultwarden_version: "latest"
|
|
vaultwarden_admin_token: "test_vaultwarden_admin_token"
|
|
vaultwarden_db_password: "test_vaultwarden_db"
|
|
vaultwarden_data_dir: /tmp/sovereign_test/vaultwarden
|
|
|
|
# Forgejo
|
|
forgejo_domain: "git.test.example.com"
|
|
forgejo_version: "latest"
|
|
forgejo_db_password: "test_forgejo_db"
|
|
forgejo_secret_key: "test_forgejo_secret"
|
|
forgejo_internal_token: "test_forgejo_internal_token"
|
|
forgejo_lfs_jwt_secret: "test_forgejo_lfs_jwt"
|
|
forgejo_admin_user: "admin"
|
|
forgejo_admin_password: "test_forgejo_admin"
|
|
forgejo_admin_email: "admin@test.example.com"
|
|
forgejo_ssh_port: 2222
|
|
forgejo_data_dir: /tmp/sovereign_test/forgejo
|
|
|
|
# Uptime Kuma
|
|
uptimekuma_domain: "status.test.example.com"
|
|
uptimekuma_version: "1"
|
|
uptimekuma_data_dir: /tmp/sovereign_test/uptimekuma
|
|
|
|
# Automatisch
|
|
automatisch_domain: "automate.test.example.com"
|
|
automatisch_version: "latest"
|
|
automatisch_db_password: "test_automatisch_db"
|
|
automatisch_encryption_key: "test_automatisch_encryption_key"
|
|
automatisch_webhook_secret_key: "test_automatisch_webhook_secret"
|
|
automatisch_app_secret_key: "test_automatisch_app_secret"
|
|
automatisch_data_dir: /tmp/sovereign_test/automatisch
|
|
|
|
# Twenty CRM
|
|
twenty_domain: "crm.test.example.com"
|
|
twenty_version: "latest"
|
|
twenty_app_secret: "test_twenty_app_secret"
|
|
twenty_db_password: "test_twenty_db"
|
|
twenty_oidc_client_secret: "test_twenty_oidc_secret"
|
|
twenty_data_dir: /tmp/sovereign_test/twenty
|
|
|
|
# Website
|
|
website_nginx_version: "alpine"
|
|
website_data_dir: /tmp/sovereign_test/website
|
|
|
|
# DNS / BIND9
|
|
bind_version: "9.18-22.04_beta"
|
|
dns_server_ip: "192.0.2.1"
|
|
dns_ns_hostname: "ns1.test.example.com"
|
|
dns_ttl: 3600
|
|
dkim_selector: "default"
|
|
stalwart_dkim_selector: "default"
|
|
stalwart_dkim_public_key: ""
|
|
dmarc_policy: "quarantine"
|
|
dmarc_rua: "mailto:dmarc-reports@test.example.com"
|
|
dmarc_ruf: "mailto:dmarc-forensics@test.example.com"
|
|
dns_data_dir: /tmp/sovereign_test/dns
|