initial: no secrets

group_vars/all.yaml

@@ -0,0 +1,280 @@
+---
+checks:
+extra_sheppy_pubkeys:
+nsca_server: ""
+ldap_server: ""
+nsca_password: ""
+RSYSLOG_SERVER: ""
+influxdb_telegraf_password: ""
+
+icinga_api_user: ""
+icinga_api_pass: ""
+icinga_api_url: "https://XXXXXXXXXXXXXXX:5665"
+icinga_web_url: "https://icinga.atlantishq.de/"
+
+event_dispatcher_host: dispatcher.atlantishq.de
+event_dispatcher_proto: https
+event_dispatcher_port: 443
+event_dispatcher_address: "{{ event_dispatcher_proto }}://{{ event_dispatcher_host }}"
+event_dispatcher_user: ""
+event_dispatcher_pass: ""
+
+ldap_password: ""
+ldap_dc: "atlantishq"
+ldap_org: "atlantishq de"
+ldap_suffix: "dc=atlantishq,dc=de"
+ldap_bind_dn: "cn=Manager,dc=atlantishq,dc=de"
+ldap_user_dn: "ou=People,dc=atlantishq,dc=de"
+ldap_group_dn: "ou=groups,dc=atlantishq,dc=de"
+ldap_connection_url: ldap://192.168.122.112
+ldap_connection_url_ext: "ldaps://ldap.atlantishq.de"
+
+event_dispatcher_token: ""
+
+extra_root_keys:
+    - "# no extra keys"
+
+smtp_internal_host: mail.atlantishq.de
+smtp_internal_host_port: 8025
+smtp_service_user: ""
+smtp_service_pass: ""
+
+pki_domain: pki.atlantishq.de
+
+SOUNDLIB_AWS_ACCESS_KEY_ID: ""
+SOUNDLIB_AWS_SECRET_ACCESS_KEY: ""
+SOUNDLIB_S3_ENDPOINT: ""
+
+# gotify #
+gotify_user: admin
+gotify_password: ""
+
+# overwritten in monitoring master group var
+monitoring_master: false
+
+async_icinga_static_services:
+  - { "name" : "service_names", "timeout" : "5h",  "owner" : "sheppy", "token" : "" }
+
+keycloak_admin_password: ""
+keycloak_postgres_password: ""
+keycloak_address: keycloak.atlantishq.de
+
+harbor_http_secret: ""
+harbor_core_secret: ""
+harbor_jobservice_secret: ""
+harbor_postgres_pass: ""
+harbor_registry_user: harbor
+harbor_registry_password: ""
+harbor_admin_password: ""
+
+keycloak_clients:
+    python-flask-picture-factory:
+        party_secret : "" # pwgen -s 16
+        client_id: z_images
+        client_secret: "" # pwgen -s 32
+        redirect_uris:
+            - "https://images.atlantishq.de/*"
+            - "https://images.athq.de/*"
+            - "https://images.potaris.de/*"
+        description: "Images Factory"
+        keycloak_id: "00000000-0000-0000-0000-000000000001"
+        groups: "images"
+        master_address: "https://images.atlantishq.de"
+        skips:
+            - "/m/"
+            - "/media/"
+            - "/image/"
+            - "/images/"
+            - "/picture/"
+            - "/pictures/"
+
+    simple-log-server:
+        party_secret : ""
+        client_id: z_sls
+        client_secret: ""
+        redirect_uris:
+            - "https://sls.atlantishq.de/*"
+        description: "Simple Log Server"
+        keycloak_id: "00000000-0000-0000-0000-000000000002"
+        groups: "monitoring"
+        master_address: "https://sls.atlantishq.de"
+        skips:
+            - "/submit"
+
+    soundlib-interface:
+        party_secret : ""
+        client_id: z_soundlib
+        client_secret: ""
+        redirect_uris:
+            - "https://sounds.atlantishq.de/*"
+        description: "Soundlib interface"
+        keycloak_id: "00000000-0000-0000-0000-000000000003"
+        groups: "soundlib"
+        master_address: "https://sounds.atlantishq.de"
+        skips:
+
+    pki:
+        party_secret : ""
+        client_id: z_hashicorp_vault
+        client_secret: ""
+        redirect_uris:
+            - "https://pki.atlantishq.de/*"
+        description: "PKI Vault"
+        keycloak_id: "00000000-0000-0000-0000-000000000004"
+        groups: "pki"
+        master_address: "https://pki.atlantishq.de"
+        skips:
+
+    cert-manager:
+        party_secret : ""
+        client_id: z_cert_manager
+        client_secret: ""
+        redirect_uris:
+            - "https://vpn.atlantishq.de/*"
+        description: "AtlantisHQ Certificate Manager"
+        keycloak_id: "00000000-0000-0000-0000-000000000005"
+        groups: "pki"
+        master_address: "https://vpn.atlantishq.de"
+        skips:
+
+    tmnf-replay-server:
+        party_secret : ""
+        client_id: z_trackmania
+        client_secret: ""
+        redirect_uris:
+            - "https://trackmania.atlantishq.de/*"
+        description: "AtlantisHQ Trackmania Replays"
+        keycloak_id: "00000000-0000-0000-0000-000000000006"
+        groups: "trackmania"
+        master_address: "https://trackmania.atlantishq.de"
+        skips:
+            - "/open-info"
+
+    atlantis-hub:
+        party_secret : ""
+        client_id: z_atlantishub
+        client_secret: ""
+        redirect_uris:
+            - "https://hub.atlantishq.de/*"
+        description: "AtlantisHQ Hub"
+        keycloak_id: "00000000-0000-0000-0000-000000000007"
+        groups:
+        master_address: "https://hub.atlantishq.de"
+        skips:
+
+    paperless:
+        party_secret : ""
+        client_id: z_paperless
+        client_secret: ""
+        redirect_uris:
+            - "https://paperless.atlantishq.de/*"
+        description: "AtlantisHQ Paperless Archiving"
+        keycloak_id: "00000000-0000-0000-0000-000000000008"
+        groups: "paperless"
+        master_address: "https://paperless.atlantishq.de"
+        skips:
+
+    icinga:
+        party_secret : ""
+        client_id: z_icinga
+        client_secret: ""
+        redirect_uris:
+            - "https://icinga.atlantishq.de/*"
+        description: "Icinga Web"
+        keycloak_id: "00000000-0000-0000-0000-000000000009"
+        groups: "monitoring,icinga"
+        master_address: "https://icinga.atlantishq.de"
+        skips:
+
+    grafana:
+        party_secret : ""
+        client_id: z_grafana
+        client_secret: ""
+        redirect_uris:
+            - "https://stats.atlantishq.de/*"
+        description: "Grafana"
+        keycloak_id: "00000000-0000-0000-0000-000000000010"
+        groups: "monitoring"
+        master_address: "https://stats.atlantishq.de"
+        skips:
+
+    async-icinga:
+        party_secret : ""
+        client_id: z_async_icinga
+        client_secret: ""
+        redirect_uris:
+            - "https://async-icinga.atlantishq.de/*"
+        description: "Icinga Web"
+        keycloak_id: "00000000-0000-0000-0000-000000000011"
+        groups: "monitoring,icinga"
+        master_address: "https://async-icinga.atlantishq.de"
+        skips:
+            - "/report"
+
+    hedgedoc:
+        party_secret : ""
+        client_id: z_hedgedoc
+        client_secret: ""
+        redirect_uris:
+            - "https://hedgedoc.atlantishq.de/*"
+        description: "Hedgedoc"
+        keycloak_id: "00000000-0000-0000-0000-000000000012"
+        groups: "monitoring"
+        master_address: "https://hedgedoc.atlantishq.de"
+
+    harbor:
+        party_secret: ""
+        client_id: z_harbor
+        client_secret: ""
+        redirect_uris:
+            - "https://harbor-registry.atlantishq.de/*"
+        description: "Harbor Registry"
+        keycloak_id: "00000000-0000-0000-0000-000000000013"
+        groups: "pki"
+        master_address: "https://harbor-registry.atlantishq.de"
+
+    atlantis-verify:
+        party_secret: ""
+        client_id: z_at_verify
+        client_secret: ""
+        redirect_uris:
+            - "https://verify.atlantishq.de/*"
+        description: "Atlantis Verification"
+        keycloak_id: "00000000-0000-0000-0000-000000000014"
+        groups:
+        master_address: "https://verify.atlantishq.de"
+
+    reactive-resume:
+        party_secret: ""
+        client_id: z_reactive_resume
+        client_secret: ""
+        redirect_uris:
+            - "https://resume.atlantishq.de/*"
+        description: "Reactive Resume"
+        keycloak_id: "00000000-0000-0000-0000-000000000015"
+        groups:
+        master_address: "https://resume.atlantishq.de"
+        skips:
+            - "/logo/light.svg"
+
+    money-balancer:
+        party_secret: ""
+        client_id: z_money_balancer
+        client_secret: ""
+        redirect_uris:
+            - "https://money-balancer.atlantishq.de/*"
+        description: "Money Balancer"
+        keycloak_id: "00000000-0000-0000-0000-000000000016"
+        groups:
+        master_address: "https://money-balancer.atlantishq.de"
+
+    atlantis-web-check:
+        party_secret: ""
+        client_id: z_web_check
+        client_secret: ""
+        redirect_uris:
+            - "https://smartchecks.atlantishq.de/*"
+        description: "SMART Web-Checks"
+        keycloak_id: "00000000-0000-0000-0000-000000000017"
+        groups:
+        master_address: "https://smartchecks.atlantishq.de"