Daniel Berteaud
4 years ago
parent
0e936cb0d7
commit
189c36c663
10 changed files with 103 additions and 23 deletions
@ -0,0 +1,20 @@ |
||||
# ansible-roles |
||||
|
||||
At [Firewall Services](https://www.firewall-services.com), we use Ansible. And we use it **a lot**. Like, there's now nearly nothing we deploy manually, without it. As such we've written a lot of roles, to deploy and manage various applications. This include : |
||||
|
||||
* Basic system configuration |
||||
* Authentication (eg, configure LDAP auth, or join an AD domain automatically) |
||||
* Plumber layers (like deploy a MySQL server, a PHP stack etc.) |
||||
* Authentication services (Samba4 in AD DC mode, Lemonldap::NG etc.) |
||||
* Collaborative apps (like Zimbra, Matrix, Etherpad, Seafile, OnlyOffice, Jitsi etc.) |
||||
* Monitoring tools (deploy Zabbix agent, proxy and server, Fusion Inventory agent, Graylog server) |
||||
* Web applications (GLPI, Ampache, Kanboard, Wordpress, Dolibarr, Matomo, Framadate, Dokuwiki etc.) |
||||
* Dev tools (Deploy a Gitea server) |
||||
* Security tools (OpenXPKI, Bitwareden_RS, manage SSH keys etc.) |
||||
* A lot more :-) |
||||
|
||||
Most of our roles and CentOS centric, and are made to be deployed on CentOS 7 servers. Basic roles (like basic system configuration, postfix etc.) also supports Debian systems, but are less tested. |
||||
|
||||
Our roles are often dependent on other roles. For example, if you deploy glpi, it'll first pull all the required web and PHP stack. |
||||
|
||||
All this is available on our GIT repo : https://git.fws.fr/fws/ansible-roles |
||||
@ -1,5 +1,35 @@ |
||||
{% if jitsi_auth == 'sso' %} |
||||
org.jitsi.jicofo.auth.URL=shibboleth:default |
||||
{% elif jitsi_auth == 'ldap' %} |
||||
org.jitsi.jicofo.auth.URL=XMPP:{{ jitsi_domain }} |
||||
# Default room to which inbound called without a Jitsi-Conference-Room header |
||||
org.jitsi.jigasi.DEFAULT_JVB_ROOM_NAME={{ jitsi_jigasi_default_room }} |
||||
|
||||
net.java.sip.communicator.impl.protocol.SingleCallInProgressPolicy.enabled=false |
||||
|
||||
# Disable packet capture |
||||
net.java.sip.communicator.packetlogging.PACKET_LOGGING_ENABLED=false |
||||
|
||||
{% if jitsi_jigasi %} |
||||
# SIP acount |
||||
net.java.sip.communicator.impl.protocol.sip.account=account |
||||
net.java.sip.communicator.impl.protocol.sip.account.ACCOUNT_UID=SIP\:{{ jitsi_jigasi_sip_user }} |
||||
net.java.sip.communicator.impl.protocol.sip.account.PASSWORD={{ jitsi_jigasi_sip_secret | b64encode }} |
||||
net.java.sip.communicator.impl.protocol.sip.account.PROTOCOL_NAME=SIP |
||||
net.java.sip.communicator.impl.protocol.sip.account.SERVER_ADDRESS={{ jitsi_jigasi_sip_server }} |
||||
net.java.sip.communicator.impl.protocol.sip.account.USER_ID={{ jitsi_jigasi_sip_user }} |
||||
net.java.sip.communicator.impl.protocol.sip.account.KEEP_ALIVE_INTERVAL=25 |
||||
net.java.sip.communicator.impl.protocol.sip.account.KEEP_ALIVE_METHOD=OPTIONS |
||||
net.java.sip.communicator.impl.protocol.sip.account.VOICEMAIL_ENABLED=false |
||||
net.java.sip.communicator.impl.protocol.sip.account.OVERRIDE_ENCODINGS=false |
||||
{% else %} |
||||
# No SIP account configured, jigasi will be disabled |
||||
{% endif %} |
||||
|
||||
# XMPP account |
||||
org.jitsi.jigasi.xmpp.acc.USER_ID=jigasi@auth.{{ jitsi_domain }} |
||||
org.jitsi.jigasi.xmpp.acc.PASS={{ jitsi_jigasi_xmpp_pass }} |
||||
org.jitsi.jigasi.xmpp.acc.ANONYMOUS_AUTH=false |
||||
org.jitsi.jigasi.xmpp.acc.IS_SERVER_OVERRIDDEN=true |
||||
org.jitsi.jigasi.xmpp.acc.SERVER_ADDRESS={{ inventory_hostname }} |
||||
org.jitsi.jigasi.xmpp.acc.JINGLE_NODES_ENABLED=false |
||||
org.jitsi.jigasi.xmpp.acc.AUTO_DISCOVER_STUN=false |
||||
org.jitsi.jigasi.xmpp.acc.IM_DISABLED=true |
||||
org.jitsi.jigasi.xmpp.acc.SERVER_STORED_INFO_DISABLED=true |
||||
org.jitsi.jigasi.xmpp.acc.IS_FILE_TRANSFER_DISABLED=true |
||||
|
||||
Loading…
Reference in new issue