---

kanboard_id: "1"
kanboard_manage_upgrade: True
kanboard_version: '1.2.16'
kanboard_zip_url: https://github.com/kanboard/kanboard/archive/v{{ kanboard_version }}.zip
kanboard_zip_sha1: b26b19e79029ee4371494840d61c4646d9b77390
# enabled prop for the ReverseProxyLdap plugin is managed automatically
# True if kanboard_ldap_auth and kanboard_proxy_auth are both True, or
# False otherwise
kanboard_plugins:
  reverse-proxy-ldap:
    name: ReverseProxyLdap
    version: '1.0.2'
    zip_sha1: d264754e0de2c0e2500b839e8adb693cf59c3f66
  calendar:
    name: Calendar
    version: '1.1.1'
    zip_sha1: de4195ade4391bc6e46f7a993e9220144581f913
    enabled: True
  gantt:
    name: Gantt
    version: '1.0.6'
    zip_sha1: 8ff400fe5c2385fee725219ba1f1f4dca5f3e878
    enabled: True
kanboard_root_dir: /opt/kanboard_{{ kanboard_id }}
kanboard_php_user: php-kanboard_{{ kanboard_id }}
kanboard_php_version: 73
# kanboard_php_fpm_pool: php70
kanboard_mysql_server: "{{ mysql_server | default('localhost') }}"
kanboard_mysql_db: kanboard_{{ kanboard_id }}
kanboard_mysql_user: kanboard_{{ kanboard_id }}
# A random pass will be generated and stored in the meta dir if not set here
#kanboard_mysql_pass: S3cr3t.P@ssw0rd

kanboard_ldap_auth: "{{ (ad_auth | default(False) or ldap_auth | default(False)) | ternary(True,False) }}"
kanboard_ldap_server: "{{ ad_auth | default(False) | ternary('ldap://' + ad_realm | default(samba_realm) | default(ansible_domain) | lower, ldap_uri) }}"
#kanboard_ldap_bind_user:
#kanboard_ldap_bind_pass:
kanboard_ldap_start_tls: True
kanboard_ldap_user_base: "{{ ad_auth | default(False) | ternary((ad_ldap_user_search_base is defined) | ternary(ad_ldap_user_search_base,'DC=' + ad_realm | default(samba_realm) | default(ansible_domain) | regex_replace('\\.',',DC=')), ldap_user_base + ',' + ldap_base) }}"
kanboard_ldap_user_filter: "{{ ad_auth | default(False) | ternary('(&(objectClass=user)(sAMAccountName=%s))','(&(objectClass=inetOrgPerson)(uid=%s))') }}"
kanboard_ldap_user_attr_username: "{{ ad_auth | default(False) | ternary('sAMAccountName','uid') }}"
kanboard_ldap_user_attr_fullname: cn
kanboard_ldap_user_attr_mail: mail
kanboard_ldap_user_attr_groups: memberOf
kanboard_ldap_user_attr_photo: jpegPhoto
kanboard_ldap_user_attr_lang: preferredLanguagepre
kanboard_ldap_admin_group: "{{ ad_auth | default(False) | ternary('CN=Domain Admins,CN=Users,DC=' + ad_realm | default(samba_realm) | default(ansible_domain) | regex_replace('\\.',',DC='), 'cn=admins,' + ldap_group_base + ',' + ldap_base) }}"
kanboard_ldap_manager_group: "{{ kanboard_ldap_admin_group }}"
kanboard_ldap_group_base: "{{ ad_auth | default(False) | ternary((ad_ldap_group_search_base is defined) | ternary(ad_ldap_group_search_base,'DC=' + ad_realm | default(samba_realm) | default(ansible_domain) | regex_replace('\\.',',DC=')), ldap_group_base + ',' + ldap_base) }}"
kanboard_ldap_group_filter: "{{ ad_auth | default(False) | ternary('(&(objectClass=group)(cn=%s))','(&(objectClass=posixGroup)(cn=%s))') }}"
kanboard_ldap_group_user_filter: "{{ ad_auth | default(False) | ternary('','(&(objectClass=posixGroup)(memberUid=%s))') }}"
kanboard_ldap_group_attr_name: cn

kanboard_proxy_auth: False
kanboard_proxy_user_header: REMOTE_USER
kanboard_proxy_admin: admin
kanboard_proxy_domain: "{{ ansible_domain }}"

# kanboard_alias: kanboard
# kanboard_src_ip:
#   - 192.168.7.0/24
#   - 10.2.0.0/24
...