|
|
|
|
---
|
|
|
|
|
|
|
|
|
|
zcs_install: False
|
|
|
|
|
zcs_version: 8.8.12
|
|
|
|
|
zcs_archive_name: zcs-8.8.12_GA_3794.RHEL7_64.20190329045002.tgz
|
|
|
|
|
zcs_archive_url: https://files.zimbra.com/downloads/{{ zcs_version }}_GA/{{ zcs_archive_name }}
|
|
|
|
|
zcs_archive_sha1: 9b1e5a13de311aab106953e321fc04970bfd3730
|
|
|
|
|
|
|
|
|
|
# Primary LDAP server of the cluster
|
|
|
|
|
# zcs_primary_ldap: ldap1.example.org
|
|
|
|
|
|
|
|
|
|
# Zimbra components to install
|
|
|
|
|
zcs_components: []
|
|
|
|
|
# - ldap
|
|
|
|
|
# - logger
|
|
|
|
|
# - mta
|
|
|
|
|
# - store
|
|
|
|
|
# - spell
|
|
|
|
|
# - memcached
|
|
|
|
|
# - proxy
|
|
|
|
|
|
|
|
|
|
zcs_main_domain: "{{ ansible_domain }}"
|
|
|
|
|
|
|
|
|
|
zcs_cluster_ip: []
|
|
|
|
|
zcs_smtp_src_ip:
|
|
|
|
|
- 0.0.0.0/0
|
|
|
|
|
zcs_http_src_ip:
|
|
|
|
|
- 0.0.0.0/0
|
|
|
|
|
# Additional list of IP able to access ldap services (zcs_cluster_ip are already allowed)
|
|
|
|
|
zcs_ldap_src_ip: []
|
|
|
|
|
zcs_clients_src_ip:
|
|
|
|
|
- 0.0.0.0/0
|
|
|
|
|
zcs_admin_src_ip: []
|
|
|
|
|
zcs_mysql_src_ip: []
|
|
|
|
|
|
|
|
|
|
# If we should get certificate from Let's Encrypt
|
|
|
|
|
# the letsencrypt role should be deployed also on the primary LDAP server
|
|
|
|
|
# Note that the certificate requested will have all the cluster members as alt names
|
|
|
|
|
# so be sure all the challenges can be resolved
|
|
|
|
|
zcs_letsencrypt: False
|
|
|
|
|
|
|
|
|
|
# The LDAP admin password (used for other servers to join the cluster for example
|
|
|
|
|
# zcs_ldap_admin_pass:
|
|
|
|
|
|
|
|
|
|
# Domain and their configuration. Used to sync LDAP with Zimbra
|
|
|
|
|
zcs_domains: {}
|
|
|
|
|
# zcs_domains:
|
|
|
|
|
# fws.fr:
|
|
|
|
|
# public_url: https://zm.fws.fr
|
|
|
|
|
# admin_url: https://zm.fws.fr:9071
|
|
|
|
|
# ldapsync:
|
|
|
|
|
# ldap:
|
|
|
|
|
# servers:
|
|
|
|
|
# - ldap://dc1.fws.fr:389
|
|
|
|
|
# schema: ad
|
|
|
|
|
# bind_dn: CN=Zimbra,OU=Apps,DC=fws,DC=fr
|
|
|
|
|
# bind_pass: s4cr3t.
|
|
|
|
|
# users:
|
|
|
|
|
# base: OU=People,DC=fws,DC=fr
|
|
|
|
|
# filter: (mail=*)
|
|
|
|
|
# groups:
|
|
|
|
|
# base: OU=Groups,DC=fws,DC=fr
|
|
|
|
|
# cas:
|
|
|
|
|
# enabled: False
|
|
|
|
|
# server_url: https://sso.fws.fr/cas
|
|
|
|
|
|
|
|
|
|
zcs_domain_defaults:
|
|
|
|
|
cas:
|
|
|
|
|
enabled: False
|
|
|
|
|
|
|
|
|
|
# Additional libs needed for CAS
|
|
|
|
|
zcs_cas_libs:
|
|
|
|
|
- url: https://repo1.maven.org/maven2/org/jasig/cas/client/cas-client-core/3.5.1/cas-client-core-3.5.1.jar
|
|
|
|
|
sha1: b2a80ae61c57b4552c1c4573bb3a896c62c0f6f2
|
|
|
|
|
- url: https://repo1.maven.org/maven2/org/slf4j/slf4j-api/1.7.28/slf4j-api-1.7.28.jar
|
|
|
|
|
sha1: 2cd9b264f76e3d087ee21bfc99305928e1bdb443
|
|
|
|
|
|
|
|
|
|
# If defined, will add an always_bcc directive on MTA servers
|
|
|
|
|
# zcs_always_bcc: maillog@example.org
|
