mirror of
https://github.com/iiab/iiab.git
synced 2025-02-12 19:22:24 +00:00
351 lines
7.6 KiB
YAML
351 lines
7.6 KiB
YAML
# WARNING: DO NOT MODIFY THIS FILE.
|
|
# CHANGES WILL BE LOST IF YOU DO A GIT PULL OR FETCH.
|
|
# Instead put changes in local_vars.yml which is not tracked by git:
|
|
# http://wiki.iiab.io/local_vars.yml
|
|
|
|
# By convention we use True/False to indicate boolean constants.
|
|
|
|
# Installation Constants
|
|
content_base: "/library"
|
|
#doc_base: "/var"
|
|
doc_base: "{{ content_base }}/www"
|
|
doc_root: "{{ doc_base }}/html"
|
|
|
|
iiab_base: /opt/iiab
|
|
iiab_dir: "{{ iiab_base }}/iiab"
|
|
pip_packages_dir: "{{ iiab_base }}/pip-packages"
|
|
yum_packages_dir: "{{ iiab_base }}/yum-packages"
|
|
downloads_dir: "{{ iiab_base }}/downloads"
|
|
iiab_download_url: http://download.iiab.io/packages
|
|
|
|
# Configuration File(s)
|
|
iiab_config_file: /etc/iiab/iiab.ini
|
|
service_filelist: "{{ iiab_config_file }}"
|
|
|
|
# The following variable may be useful in debugging
|
|
disregard_network: False # use cache or error out if cache does not exist
|
|
|
|
# Users and Passwords
|
|
# obtain a password hash with - python -c 'import crypt; print crypt.crypt("<plaintext>", "$6$<salt>")'
|
|
|
|
iiab_admin_user: iiab-admin
|
|
iiab_admin_passw_hash: $6$xsce51$D.IrrEeLBYIuJkGDmi27pZUGOwPFp98qpl3hxMwWV4hXigFGmdSvy3s/j7tn6OnyTTLmlV7SsN0lCUAFzxSop.
|
|
|
|
# Languages
|
|
default_language: en
|
|
language_priority: en es
|
|
|
|
# Time Zone (php needs timezone to be set)
|
|
local_tz: "{{ ansible_date_time.tz }}"
|
|
|
|
# Network Parameters
|
|
|
|
iiab_hostname: box
|
|
iiab_domain: lan
|
|
lan_ip: 172.18.96.1
|
|
lan_netmask: 255.255.224.0
|
|
|
|
# Read https://github.com/iiab/iiab/wiki/IIAB-Networking
|
|
# Also readable offline @ http://box/info/IIAB-Networking.html
|
|
|
|
# Gateway mode
|
|
iiab_lan_enabled: True
|
|
iiab_wan_enabled: True
|
|
ssh_port: 22
|
|
gui_wan: True
|
|
adm_cons_force_ssl: False
|
|
adm_cons_allow_downloads: False
|
|
|
|
# Internal Wi-Fi Access Point
|
|
# Values are used if there is an internal Wi-Fi adapter and hostapd is enabled
|
|
# The platform variable adapts install to specific hardware (raspberry pi=rpi2)
|
|
hostapd_enabled: True
|
|
host_ssid: "Internet in a Box"
|
|
host_wifi_mode: g
|
|
host_channel: 6
|
|
hostapd_secure: False
|
|
hostapd_password: changeme
|
|
|
|
# Intended for developers
|
|
exFAT_enabled: False
|
|
user_wan_iface: auto
|
|
user_lan_iface: auto
|
|
wan_ip: dhcp
|
|
wan_netmask:
|
|
wan_gateway:
|
|
wan_nameserver:
|
|
#only change these if you know what you are doing
|
|
|
|
# Parameters by Aggregate Roles
|
|
# Each Role must have the following variables which are either True or False:
|
|
# <role-name>_install
|
|
# <role-name>_enabled
|
|
|
|
# Our current convention is to install everything in all aggregates
|
|
# And to enable everything in 1-PREP, 2-COMMON, and 3-BASE
|
|
|
|
# 1-PREP
|
|
|
|
# 2-COMMON
|
|
|
|
# 3-BASE
|
|
|
|
# Apache
|
|
allow_apache_sudo: False
|
|
|
|
# dhcpd
|
|
dhcpd_install: True
|
|
dhcpd_enabled: False
|
|
|
|
# named
|
|
named_install: True
|
|
named_enabled: True
|
|
block_DNS: False
|
|
|
|
# DansGuardian
|
|
dansguardian_install: False
|
|
dansguardian_enabled: False
|
|
|
|
# Squid
|
|
squid_install: False
|
|
squid_enabled: False
|
|
|
|
# Wonder Shaper
|
|
# Unmaintained as of October 2017: https://github.com/iiab/iiab/pull/382
|
|
wondershaper_install: False
|
|
wondershaper_enabled: False
|
|
|
|
# Gateway and Filters
|
|
gw_squid_whitelist: False
|
|
gw_block_https: False
|
|
iiab_gateway_enabled: True
|
|
|
|
# Home page
|
|
# Default to the gui where the selection is made or override in local_vars.yml
|
|
iiab_home_url: /home
|
|
|
|
# You can change iiab_home_url in local_vars.yml in order to get a different home page.
|
|
# For example one of the following: (assuming they are enabled)
|
|
|
|
# iiab_home_url: /home
|
|
# iiab_home_url: /xs-portal - the alternate home page
|
|
# iiab_home_url: /wordpress
|
|
# iiab_home_url: /wiki - either dokuwiki or mediawiki
|
|
|
|
# 4-SERVER-OPTIONS
|
|
|
|
# sshd
|
|
sshd_enabled: True
|
|
|
|
# OpenVPN
|
|
vpn_presence: xscenet.net
|
|
openvpn_server_port: 1194
|
|
openvpn_cron_enabled: False
|
|
openvpn_install: True
|
|
openvpn_enabled: False
|
|
|
|
# Samba. Take a security audit seriously before deploying this.
|
|
samba_install: False
|
|
samba_enabled: False
|
|
|
|
# PostgreSQL
|
|
postgresql_install: False
|
|
postgresql_enabled: False
|
|
|
|
# authserver
|
|
authserver_install: False
|
|
authserver_enabled: False
|
|
|
|
# usb-lib
|
|
usb_lib_install: True
|
|
usb_lib_enabled: True
|
|
|
|
# Docker
|
|
docker_install: False
|
|
docker_enabled: False
|
|
|
|
# Common UNIX Printing System
|
|
cups_install: True
|
|
cups_enabled: False
|
|
|
|
# 5-XO-SERVICES
|
|
|
|
# Lesser-supported XO services need additional testing. Please uncomment
|
|
# the line containing 5-xo-services within /opt/iiab/iiab/iiab.yml and contact
|
|
# http://lists.laptop.org/pipermail/server-devel/ if you're able to help test.
|
|
|
|
xo_services_install: False
|
|
xo_services_enabled: False
|
|
|
|
# ejabberd
|
|
ejabberd_install: False
|
|
ejabberd_enabled: False
|
|
|
|
ejabberd_xs_install: False
|
|
ejabberd_xs_enabled: False
|
|
|
|
# idmgr
|
|
idmgr_install: False
|
|
idmgr_enables: False
|
|
|
|
# activity-server
|
|
activity_server_install: False
|
|
activity_server_enabled: False
|
|
|
|
# XOVis
|
|
xovis_install: False
|
|
xovis_enabled: False
|
|
xovis_target_host: "127.0.0.1:5984"
|
|
xovis_deployment_name: olpc
|
|
|
|
xovis_db_name: xovis
|
|
xovis_db_user: admin
|
|
xovis_db_password: admin
|
|
|
|
xovis_root: "/opt/xovis"
|
|
xovis_backup_dir: "/library/users"
|
|
xovis_chart_heading: "My School: Usage Data Visualization"
|
|
|
|
# sugar-stats
|
|
sugar_stats_install: False
|
|
sugar_stats_enabled: False
|
|
|
|
# 6-GENERIC-APPS
|
|
|
|
# MySQL
|
|
mysql_install: True
|
|
mysql_enabled: False
|
|
# password is fixmysql
|
|
# mysql_root_password: $6$iiab51$3ICIW0CLWxxMW2a3yrHZ38ukZItD5tcadL4rWcE9D.qIGStxhh8rRsaSxoj3b.MYxI/VRDNjpzSYK/V6zkWFI0
|
|
mysql_root_password: fixmysql
|
|
|
|
# Handy for maintaining tables, but DANGEROUS if not locked down
|
|
phpmyadmin_install: False
|
|
phpmyadmin_enabled: False
|
|
|
|
# Elgg
|
|
elgg_install: True
|
|
elgg_enabled: False
|
|
# elgg_mysql_password: $6$iiab51$jeTwnATcbaa92xo0QBTgjLBU.5aVDDrbKeNyyC99R/TAWz6pvfzj.L7lfnOVVjD78nxqT.gkNn6XZmuRV0W3o1
|
|
elgg_mysql_password: elgg4kids
|
|
|
|
# OwnCloud
|
|
owncloud_install: False
|
|
owncloud_enabled: False
|
|
|
|
# Nextcloud
|
|
nextcloud_install: True
|
|
nextcloud_enabled: False
|
|
|
|
# WordPress
|
|
wordpress_install: True
|
|
wordpress_enabled: False
|
|
|
|
# DokuWiki
|
|
dokuwiki_install: False
|
|
dokuwiki_enabled: False
|
|
|
|
# 7-EDU-APPS
|
|
|
|
# Moodle
|
|
moodle_install: False
|
|
moodle_enabled: False
|
|
|
|
# Internet-in-a-Box
|
|
#iiab_install: True
|
|
#iiab_enabled: False
|
|
# above 2 variables changed in June 2017 to:
|
|
osm_install: True
|
|
osm_enabled: False
|
|
|
|
# Pathagar
|
|
pathagar_install: False
|
|
pathagar_enabled: False
|
|
|
|
# Calibre
|
|
calibre_install: True
|
|
calibre_enabled: False
|
|
calibre_port: 8080
|
|
|
|
# RACHEL
|
|
rachel_install: False
|
|
rachel_enabled: False
|
|
rachel_content_found: False
|
|
#rachel_url: /rachel
|
|
rachel_doc_root: "{{ doc_root}}/modules"
|
|
|
|
# Kiwix-serve
|
|
kiwix_install: True
|
|
kiwix_port: 3000
|
|
kiwix_serve_enabled: False
|
|
iiab_zim_path: /library/zims
|
|
|
|
# KA Lite
|
|
kalite_install: True
|
|
kalite_root: "/library/ka-lite"
|
|
kalite_user: kalite
|
|
kalite_password_hash: $6$<salt>$KHET0XRRsgAY.wOWyTOI3W7dyDh0ESOr48uI5vtk2xdzsU7aw0TF4ZkNuM34RmHBGMJ1fTCmOyVobo0LOhBlJ/
|
|
kalite_password: kalite
|
|
kalite_server_name: kalite
|
|
kalite_server_port: 8008
|
|
kalite_enabled: False
|
|
kalite_cron_enabled: False
|
|
|
|
# Sugarizer
|
|
sugarizer_install: True
|
|
sugarizer_enabled: False
|
|
|
|
# 8-MGMT-TOOLS
|
|
|
|
# Munin
|
|
munin_install: True
|
|
munin_enabled: False
|
|
|
|
# Monit
|
|
monit_install: False
|
|
monit_enabled: False
|
|
watchdog:
|
|
- sshd
|
|
- idmgr
|
|
- ejabberd
|
|
- httpd
|
|
- postgresql
|
|
- squid
|
|
|
|
# vnStat
|
|
vnstat_install: True
|
|
vnstat_enabled: False
|
|
|
|
# AWStats -- sumarizes http access logs
|
|
awstats_install: True
|
|
awstats_enabled: False
|
|
|
|
# SchoolTool
|
|
schooltool_install: False
|
|
schooltool_enabled: False
|
|
|
|
# Ajenti
|
|
ajenti_install: False
|
|
ajenti_enabled: False
|
|
|
|
# TeamViewer - unmaintained (better to install from http://teamviewer.com)
|
|
teamviewer_install: False
|
|
teamviewer_enabled: False
|
|
|
|
# Toggle iiab-refresh-wiki-docs scraping for offline docs (http://box/info)
|
|
nodocs: False
|
|
|
|
# ================================================================
|
|
# Platforms - turn all off and let <OS>.yml turn on as appropriate
|
|
|
|
# wide to narrow
|
|
is_debuntu: False
|
|
is_ubuntu: False
|
|
is_debian: False
|
|
is_debian_9: False
|
|
is_debian_8: False
|
|
is_rpi: False
|
|
|
|
is_redhat: False
|
|
is_fedora: False
|
|
is_centos: False
|