--- kanboard_id: "1" kanboard_manage_upgrade: True kanboard_version: '1.2.16' kanboard_zip_url: https://github.com/kanboard/kanboard/archive/v{{ kanboard_version }}.zip kanboard_zip_sha1: b26b19e79029ee4371494840d61c4646d9b77390 # enabled prop for the ReverseProxyLdap plugin is managed automatically # True if kanboard_ldap_auth and kanboard_proxy_auth are both True, or # False otherwise kanboard_plugins: reverse-proxy-ldap: name: ReverseProxyLdap version: '1.0.2' zip_sha1: d264754e0de2c0e2500b839e8adb693cf59c3f66 calendar: name: Calendar version: '1.1.1' zip_sha1: de4195ade4391bc6e46f7a993e9220144581f913 enabled: True gantt: name: Gantt version: '1.0.6' zip_sha1: 8ff400fe5c2385fee725219ba1f1f4dca5f3e878 enabled: True kanboard_root_dir: /opt/kanboard_{{ kanboard_id }} kanboard_php_user: php-kanboard_{{ kanboard_id }} kanboard_php_version: 73 # kanboard_php_fpm_pool: php70 kanboard_mysql_server: "{{ mysql_server | default('localhost') }}" kanboard_mysql_db: kanboard_{{ kanboard_id }} kanboard_mysql_user: kanboard_{{ kanboard_id }} # A random pass will be generated and stored in the meta dir if not set here #kanboard_mysql_pass: S3cr3t.P@ssw0rd kanboard_ldap_auth: "{{ (ad_auth | default(False) or ldap_auth | default(False)) | ternary(True,False) }}" kanboard_ldap_server: "{{ ad_auth | default(False) | ternary('ldap://' + ad_realm | default(samba_realm) | default(ansible_domain) | lower, ldap_uri) }}" #kanboard_ldap_bind_user: #kanboard_ldap_bind_pass: kanboard_ldap_start_tls: True kanboard_ldap_user_base: "{{ ad_auth | default(False) | ternary((ad_ldap_user_search_base is defined) | ternary(ad_ldap_user_search_base,'DC=' + ad_realm | default(samba_realm) | default(ansible_domain) | regex_replace('\\.',',DC=')), ldap_user_base + ',' + ldap_base) }}" kanboard_ldap_user_filter: "{{ ad_auth | default(False) | ternary('(&(objectClass=user)(sAMAccountName=%s))','(&(objectClass=inetOrgPerson)(uid=%s))') }}" kanboard_ldap_user_attr_username: "{{ ad_auth | default(False) | ternary('sAMAccountName','uid') }}" kanboard_ldap_user_attr_fullname: cn kanboard_ldap_user_attr_mail: mail kanboard_ldap_user_attr_groups: memberOf kanboard_ldap_user_attr_photo: jpegPhoto kanboard_ldap_user_attr_lang: preferredLanguagepre kanboard_ldap_admin_group: "{{ ad_auth | default(False) | ternary('CN=Domain Admins,CN=Users,DC=' + ad_realm | default(samba_realm) | default(ansible_domain) | regex_replace('\\.',',DC='), 'cn=admins,' + ldap_group_base + ',' + ldap_base) }}" kanboard_ldap_manager_group: "{{ kanboard_ldap_admin_group }}" kanboard_ldap_group_base: "{{ ad_auth | default(False) | ternary((ad_ldap_group_search_base is defined) | ternary(ad_ldap_group_search_base,'DC=' + ad_realm | default(samba_realm) | default(ansible_domain) | regex_replace('\\.',',DC=')), ldap_group_base + ',' + ldap_base) }}" kanboard_ldap_group_filter: "{{ ad_auth | default(False) | ternary('(&(objectClass=group)(cn=%s))','(&(objectClass=posixGroup)(cn=%s))') }}" kanboard_ldap_group_user_filter: "{{ ad_auth | default(False) | ternary('','(&(objectClass=posixGroup)(memberUid=%s))') }}" kanboard_ldap_group_attr_name: cn kanboard_proxy_auth: False kanboard_proxy_user_header: REMOTE_USER kanboard_proxy_admin: admin kanboard_proxy_domain: "{{ ansible_domain }}" # kanboard_alias: kanboard # kanboard_src_ip: # - 192.168.7.0/24 # - 10.2.0.0/24 ...