main.yml

# Defaults variables for role ipsilon

# mysql settings
ipsilon_db_user: ipsilon
ipsilon_db_pass: FindItYourSelf
ipsilon_db_name: ipsilon

# Httpd settings
# Do we want TLS ?
ipsilon_httpd_tls: True
ipsilon_httpd_hostname: "{{ inventory_hostname }}"

# httpd RewriteRules block
# By default our vhost will already redirect to /idp (ipsilon)
# but we can (if defined) inject a block for other rules
# example:
# ipsilon_httpd_rewriterules: |
#   # Injected rules from ipsilon_httpd_rewriterules ansible block
#   RewriteCond $1 ^gitlab
#   RewriteRule ^/?(.*) https://gitlab.com [R,L]
#    


# Which Backend to use : FAS or IPA (boolean but pick one)
# Important to end the fas backend url with /
ipsilon_fas_auth: False
ipsilon_fas_backend: https://accounts.dev.centos.org/

# IPA variant, now the default
# We need to enroll so you can put credentials (for one shot) and just remove from inventory 
ipsilon_ipa_auth:  True
ipsilon_ipa_admin: admin
ipsilon_ipa_admin_pass: ActiveDirectory
# Full path to the ipa host/MasterCRL.bin CRL cert
ipsilon_ipa_crl_path: http://ipa.stg.fedoraproject.org/ipa/crl/MasterCRL.bin

# List of login names that will be granted automatically admins rights in ipsilon
ipsilon_admins:
  - admin
  - arrfab

# OpenID section
# Which trusted roots we allow by default without warning
ipsilon_openid_trusted_roots:
  - https://git.centos.org