ordered correctly, per tasks/main.yml across Ansible's 9 stages

vars/default_vars.yml

@@ -38,16 +38,17 @@ language_priority: en es
 # Time Zone (php needs timezone to be set)
 local_tz: "{{ ansible_date_time.tz }}"
 
-# Network Parameters
+# Read https://github.com/iiab/iiab/wiki/IIAB-Networking
+# Also readable offline @ http://box/info/IIAB-Networking.html
+
+# NETWORK PARAMETERS FOLLOW ACROSS THE NEXT 60 LINES, as enabled by Ansible's
+# NETWORK role (/opt/iiab/iiab/roles/network/*) in 4-SERVER-OPTIONS.
 
 iiab_hostname: box
 iiab_domain: lan
 lan_ip: 172.18.96.1
 lan_netmask: 255.255.224.0
 
-# Read https://github.com/iiab/iiab/wiki/IIAB-Networking
-# Also readable offline @ http://box/info/IIAB-Networking.html
-
 # Gateway mode
 iiab_lan_enabled: True
 iiab_wan_enabled: True
@@ -66,33 +67,6 @@ host_channel: 6
 hostapd_secure: False
 hostapd_password: changeme
 
-# Intended for developers
-exFAT_enabled: False
-user_wan_iface: auto
-user_lan_iface: auto
-wan_ip: dhcp
-wan_netmask:
-wan_gateway:
-wan_nameserver:
-#only change these if you know what you are doing
-
-# Parameters by Aggregate Roles
-# Each Role must have the following variables which are either True or False:
-#   <role-name>_install
-#   <role-name>_enabled
-
-# Our current convention is to install everything in all aggregates
-# And to enable everything in 1-PREP, 2-COMMON, and 3-BASE
-
-# 1-PREP
-
-# 2-COMMON
-
-# 3-BASE-SERVER
-
-# Apache
-allow_apache_sudo: False
-
 # dhcpd
 dhcpd_install: True
 dhcpd_enabled: False
@@ -120,17 +94,51 @@ gw_squid_whitelist: False
 gw_block_https: False
 iiab_gateway_enabled: True
 
-# Home page
+# Intended for developers
-# Default to the gui where the selection is made or override in local_vars.yml
+user_wan_iface: auto
-iiab_home_url: /home
+user_lan_iface: auto
+wan_ip: dhcp
+wan_netmask:
+wan_gateway:
+wan_nameserver:
+exFAT_enabled: False
+#only change these if you know what you are doing
 
-# You can change iiab_home_url in local_vars.yml in order to get a different home page.
+# Parameters by Aggregate Roles
-# For example one of the following: (assuming they are enabled)
+# Each Role must have the following variables which are either True or False:
+#   <role-name>_install
+#   <role-name>_enabled
 
-# iiab_home_url: /home
+# Our current convention is to install everything in all aggregates
-# iiab_home_url: /xs-portal - the alternate home page
+# And to enable everything in 1-PREP, 2-COMMON, and 3-BASE-SERVER
-# iiab_home_url: /wordpress
+
-# iiab_home_url: /wiki - either dokuwiki or mediawiki
+# 1-PREP
+
+# Docker (lesser-supported)
+docker_install: False
+docker_enabled: False
+
+# 2-COMMON
+
+# 3-BASE-SERVER
+
+# Needed if you want http://box/common/services/power_off.php to work
+allow_apache_sudo: False
+
+# HTTPD role runs here.
+
+# IIAB-ADMIN role runs here.
+
+# MySQL - SEE roles/1-prep/tasks/computed_vars.yml for de facto defaults
+mysql_install: True
+mysql_enabled: True
+# password is fixmysql
+# mysql_root_password: $6$iiab51$3ICIW0CLWxxMW2a3yrHZ38ukZItD5tcadL4rWcE9D.qIGStxhh8rRsaSxoj3b.MYxI/VRDNjpzSYK/V6zkWFI0
+mysql_root_password: fixmysql
+
+# PostgreSQL
+postgresql_install: False
+postgresql_enabled: False
 
 # 4-SERVER-OPTIONS
 
@@ -144,43 +152,52 @@ openvpn_cron_enabled: False
 openvpn_install: True
 openvpn_enabled: False
 
-# Samba. Take a security audit seriously before deploying this.
+# NETWORK role runs here.
-samba_install: False
-samba_enabled: False
 
-# PostgreSQL
+# Homepage
-postgresql_install: False
+# Default to the gui where the selection is made or override in local_vars.yml
-postgresql_enabled: False
+iiab_home_url: /home
+
+# You can change iiab_home_url in local_vars.yml in order to get a different home page.
+# For example one of the following: (assuming they are enabled)
+
+# iiab_home_url: /home
+# iiab_home_url: /xs-portal - the alternate homepage
+# iiab_home_url: /wordpress
+# iiab_home_url: /wiki - either dokuwiki or mediawiki
 
 # authserver
 authserver_install: False
 authserver_enabled: False
 
+# Common UNIX Printing System (CUPS)
+cups_install: True
+cups_enabled: False
+
+# Samba. Take a security audit seriously before deploying this.
+samba_install: False
+samba_enabled: False
+
 # usb-lib
 usb_lib_install: True
 usb_lib_enabled: True
 
-# Docker
+# Toggle iiab-refresh-wiki-docs scraping for offline docs (http://box/info)
-docker_install: False
+nodocs: False
-docker_enabled: False
-
-# Common UNIX Printing System
-cups_install: True
-cups_enabled: False
 
 # 5-XO-SERVICES
 
-# Lesser-supported XO services need additional testing.  Please uncomment
+# Lesser-supported XO services need additional testing.  Please contact
-# the line containing 5-xo-services within /opt/iiab/iiab/iiab.yml and contact
 # http://lists.laptop.org/pipermail/server-devel/ if you're able to help test.
 
 xo_services_install: False
 xo_services_enabled: False
 
-# ejabberd
+# activity-server
-ejabberd_install: False
+activity_server_install: False
-ejabberd_enabled: False
+activity_server_enabled: False
 
+# ejabberd-xs
 ejabberd_xs_install: False
 ejabberd_xs_enabled: False
 
@@ -188,9 +205,113 @@ ejabberd_xs_enabled: False
 idmgr_install: False
 idmgr_enables: False
 
-# activity-server
+# 6-GENERIC-APPS
-activity_server_install: False
+
-activity_server_enabled: False
+# Calibre
+calibre_install: True
+calibre_enabled: False
+calibre_port: 8080
+
+# DokuWiki
+dokuwiki_install: False
+dokuwiki_enabled: False
+
+# Elgg
+elgg_install: True
+elgg_enabled: False
+# elgg_mysql_password: $6$iiab51$jeTwnATcbaa92xo0QBTgjLBU.5aVDDrbKeNyyC99R/TAWz6pvfzj.L7lfnOVVjD78nxqT.gkNn6XZmuRV0W3o1
+elgg_mysql_password: elgg4kids
+
+# ejabberd
+ejabberd_install: False
+ejabberd_enabled: False
+
+# Nextcloud
+nextcloud_install: True
+nextcloud_enabled: False
+
+# ownCloud
+owncloud_install: False
+owncloud_enabled: False
+
+# WordPress
+wordpress_install: True
+wordpress_enabled: False
+
+# 7-EDU-APPS
+
+# KA Lite
+kalite_install: True
+kalite_root: "/library/ka-lite"
+kalite_user: kalite
+kalite_password_hash: $6$<salt>$KHET0XRRsgAY.wOWyTOI3W7dyDh0ESOr48uI5vtk2xdzsU7aw0TF4ZkNuM34RmHBGMJ1fTCmOyVobo0LOhBlJ/
+kalite_password: kalite
+kalite_server_name: kalite
+kalite_server_port: 8008
+kalite_enabled: False
+kalite_cron_enabled: False
+
+# Kiwix
+kiwix_install: True
+kiwix_enabled: True
+kiwix_port: 3000
+iiab_zim_path: /library/zims
+
+# Moodle
+moodle_install: False
+moodle_enabled: False
+
+# OpenStreetMap (OSM)
+osm_install: True
+osm_enabled: False
+# changed in June 2017 from:
+# iiab_install: True
+# iiab_enabled: False
+
+# Pathagar - similar to Calibre, but unmaintained
+pathagar_install: False
+pathagar_enabled: False
+
+# Sugarizer
+sugarizer_install: True
+sugarizer_enabled: False
+
+# 8-MGMT-TOOLS
+
+# AWStats -- sumarizes http access logs
+awstats_install: True
+awstats_enabled: False
+
+# Monit
+monit_install: False
+monit_enabled: False
+watchdog:
+  - sshd
+  - idmgr
+  - ejabberd
+  - httpd
+  - postgresql
+  - squid
+
+# Munin
+munin_install: True
+munin_enabled: False
+
+# Handy for maintaining tables, but DANGEROUS if not locked down
+phpmyadmin_install: False
+phpmyadmin_enabled: False
+
+# sugar-stats
+sugar_stats_install: False
+sugar_stats_enabled: False
+
+# TeamViewer - unmaintained (better to install from http://teamviewer.com)
+teamviewer_install: False
+teamviewer_enabled: False
+
+# vnStat
+vnstat_install: True
+vnstat_enabled: False
 
 # XOVis
 xovis_install: False
@@ -206,134 +327,22 @@ xovis_root: "/opt/xovis"
 xovis_backup_dir: "/library/users"
 xovis_chart_heading: "My School: Usage Data Visualization"
 
-# sugar-stats
+# ================================================================
-sugar_stats_install: False
-sugar_stats_enabled: False
-
-# 6-GENERIC-APPS
-
-# MySQL
-mysql_install: True
-mysql_enabled: False
-# password is fixmysql
-# mysql_root_password: $6$iiab51$3ICIW0CLWxxMW2a3yrHZ38ukZItD5tcadL4rWcE9D.qIGStxhh8rRsaSxoj3b.MYxI/VRDNjpzSYK/V6zkWFI0
-mysql_root_password: fixmysql
-
-# Handy for maintaining tables, but DANGEROUS if not locked down
-phpmyadmin_install: False
-phpmyadmin_enabled: False
-
-# Elgg
-elgg_install: True
-elgg_enabled: False
-# elgg_mysql_password: $6$iiab51$jeTwnATcbaa92xo0QBTgjLBU.5aVDDrbKeNyyC99R/TAWz6pvfzj.L7lfnOVVjD78nxqT.gkNn6XZmuRV0W3o1
-elgg_mysql_password: elgg4kids
-
-# OwnCloud
-owncloud_install: False
-owncloud_enabled: False
-
-# Nextcloud
-nextcloud_install: True
-nextcloud_enabled: False
-
-# WordPress
-wordpress_install: True
-wordpress_enabled: False
-
-# DokuWiki
-dokuwiki_install: False
-dokuwiki_enabled: False
-
-# 7-EDU-APPS
-
-# Moodle
-moodle_install: False
-moodle_enabled: False
-
-# Internet-in-a-Box
-#iiab_install: True
-#iiab_enabled: False
-# above 2 variables changed in June 2017 to:
-osm_install: True
-osm_enabled: False
-
-# Pathagar
-pathagar_install: False
-pathagar_enabled: False
-
-# Calibre
-calibre_install: True
-calibre_enabled: False
-calibre_port: 8080
-
-# RACHEL
-rachel_install: False
-rachel_enabled: False
-rachel_content_found: False
-#rachel_url: /rachel
-rachel_doc_root: "{{ doc_root }}/modules"
-
-# Kiwix-serve
-kiwix_install: True
-kiwix_enabled: True
-kiwix_port: 3000
-iiab_zim_path: /library/zims
-
-# KA Lite
-kalite_install: True
-kalite_root: "/library/ka-lite"
-kalite_user: kalite
-kalite_password_hash: $6$<salt>$KHET0XRRsgAY.wOWyTOI3W7dyDh0ESOr48uI5vtk2xdzsU7aw0TF4ZkNuM34RmHBGMJ1fTCmOyVobo0LOhBlJ/
-kalite_password: kalite
-kalite_server_name: kalite
-kalite_server_port: 8008
-kalite_enabled: False
-kalite_cron_enabled: False
-
-# Sugarizer
-sugarizer_install: True
-sugarizer_enabled: False
-
-# 8-MGMT-TOOLS
-
-# Munin
-munin_install: True
-munin_enabled: False
-
-# Monit
-monit_install: False
-monit_enabled: False
-watchdog:
-  - sshd
-  - idmgr
-  - ejabberd
-  - httpd
-  - postgresql
-  - squid
-
-# vnStat
-vnstat_install: True
-vnstat_enabled: False
-
-# AWStats -- sumarizes http access logs
-awstats_install: True
-awstats_enabled: False
-
-# SchoolTool
-schooltool_install: False
-schooltool_enabled: False
 
 # Ajenti - unmaintained
 # ajenti_install: False
 # ajenti_enabled: False
 
-# TeamViewer - unmaintained (better to install from http://teamviewer.com)
+# RACHEL - no longer in use
-teamviewer_install: False
+# rachel_install: False
-teamviewer_enabled: False
+# rachel_enabled: False
+# rachel_content_found: False
+# #rachel_url: /rachel
+# rachel_doc_root: "{{ doc_root }}/modules"
 
-# Toggle iiab-refresh-wiki-docs scraping for offline docs (http://box/info)
+# SchoolTool - unmaintained
-nodocs: False
+# schooltool_install: False
+# schooltool_enabled: False
 
 # ================================================================
 # Platforms - turn all off and let <OS>.yml turn on as appropriate