Kris Lamoureux
ccf6b10a0e
- Add new primary GPG key in dev config for compose repos - Slight reorganization of the dockerbox production playbook - Remove group management in the docker role - Move HSTS inside the location block - Add git ignore entry for .ansible files - Add X-Forwarded-Proto proxy header
53 lines
1.2 KiB
YAML
53 lines
1.2 KiB
YAML
# base
|
|
allow_reboot: false
|
|
manage_network: false
|
|
|
|
# Import my GPG key for git signature verification
|
|
root_gpgkeys:
|
|
- name: kris@lamoureux.io
|
|
id: 42A3A92C5DA0F3E5F71A3710105B748C1362EB96
|
|
# Older key, but still in use
|
|
- name: kris@lamoureux.io
|
|
id: FBF673CEEC030F8AECA814E73EDA9C3441EDA925
|
|
server: keyserver.ubuntu.com
|
|
|
|
# proxy
|
|
proxy:
|
|
servers:
|
|
- domain: cloud.local.krislamo.org
|
|
proxy_pass: http://127.0.0.1:8000
|
|
|
|
# docker
|
|
docker_official: true # docker's apt repos
|
|
docker_users:
|
|
- vagrant
|
|
|
|
docker_compose_env_nolog: false # dev only setting
|
|
docker_compose_deploy:
|
|
# Traefik
|
|
- name: traefik
|
|
url: https://github.com/krislamo/traefik
|
|
version: d62bd06b37ecf0993962b0449a9d708373f9e381
|
|
enabled: true
|
|
accept_newhostkey: true # Consider verifying manually instead
|
|
trusted_keys:
|
|
- FBF673CEEC030F8AECA814E73EDA9C3441EDA925
|
|
env:
|
|
DASHBOARD: true
|
|
# Nextcloud
|
|
- name: nextcloud
|
|
url: https://github.com/krislamo/nextcloud
|
|
version: fe6d349749f178e91ae7ff726d557f48ebf84356
|
|
env:
|
|
DATA: ./data
|
|
|
|
# traefik
|
|
traefik:
|
|
ENABLE: true
|
|
|
|
# nextcloud
|
|
nextcloud:
|
|
DOMAIN: cloud.local.krislamo.org
|
|
DB_PASSWD: password
|
|
ADMIN_PASSWD: password
|