--- matomo_id: 1 matomo_root_dir: /opt/matomo_{{ matomo_id }} matomo_version: 3.13.5 matomo_archive_url: https://builds.matomo.org/matomo-{{ matomo_version }}.tar.gz matomo_archive_sha1: f8f520920f37a85d6114d77a82880097218d8ebc matomo_php_user: php-matomo_{{ matomo_id }} matomo_manage_upgrade: True matomo_php_version: 74 # matomo_php_fpm_pool: matomo matomo_db_server: "{{ mysql_server | default('localhost') }}" matomo_db_port: 3306 matomo_db_name: matomo_{{ matomo_id }} matomo_db_user: matomo_{{ matomo_id }} # matomo_db_pass: # Must be defined # matomo_public_url: https://matomo.example.com # If defined, restrict access to those hosts # matomo_src_ip: # - 192.168.7.0/24 # If defined, will add an alias in apache conf. Else, a vhost will have to be created # matomo_alias: matomo # Auth settings # This is the default settings matomo_ldap_base: enabled: "{{ (ldap_auth | default(False) or ad_auth | default(False)) | ternary(True,False) }}" use_ldap_for_authentication: 1 use_webserver_auth: 1 hostname: "{{ ad_auth | default(False) | ternary('ldaps://' + ad_realm | default(samba_realm) | default(ansible_domain) | lower, ldap_uri | regex_replace('^ldap://(.*)','ldaps://\\1')) }}" port: "" ldap_user_filter: "{{ ad_auth | default(False) | ternary('(&(objectCategory=person)(objectClass=user)(primaryGroupId=513))',ldap_user_object_class | default('(objectClass=inetOrgPerson)')) }}" base_dn: "{{ ad_auth | default(False) | ternary((ad_ldap_user_search_base is defined) | ternary(ad_ldap_user_search_base,'DC=' + ad_realm | default(samba_realm) | default(ansible_domain) | regex_replace('\\.',',DC=')), ldap_user_base + ',' + ldap_base) }}" ldap_user_id_field: "{{ ad_auth | default(False) | ternary('sAMAccountName', 'uid') }}" ldap_alias_field: cn ldap_last_name_field: sn ldap_first_name_field: givenName ldap_mail_field: mail servers[]: ldap admin_user: "" admin_pass: "" # And this the ones which should be overriden host_vars) matomo_ldap: {} # And this is the combination of both, which will be used in the role matomo_ldap_all: "{{ matomo_ldap_base | combine(matomo_ldap) }}}" # List of plugins which can be installed by ansible matomo_plugins: LoginHttpAuth: version: 3.0.1 sha1: 5d56fb010372fa593b050796eeff7fa37f031f60 LoginLdap: version: 4.0.8 sha1: 9f698725b8c3ff07f9feed9bfbb9b4f3f2defea6 ArchiveSite: version: 0.1.1 sha1: f1578a585df347a5e6c4ded34db9d816ef36e8ed CustomAlerts: version: 3.0.6 sha1: 6e7b7cc0e290c73b2b54ae067de6761b62fb56d9 CustomDimensions: version: 3.1.10 sha1: 6dc679652e6d5f4a1808ecd3a095de77a7fc14f4 SecurityInfo: version: 3.0.7 sha1: 2f3bc984e979d8a977b2c580d41985455dc24128 matomo_base_plugins_to_install: - LoginLdap - SecurityInfo matomo_extra_plugins_to_install: [] matomo_plugins_to_install: "{{ matomo_base_plugins_to_install + matomo_extra_plugins_to_install }}" # Should we remove unmanaged plugins, those installed manually, not using ansible matomo_remove_unmanaged_plugins: True