mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-08-29 23:08:06 +02:00
Huge role refactoring/cleanup. Other commits will propably follow. Because some bugs will exist. Still important for longrun and also for auto docs/help/slideshow generation
This commit is contained in:
2
roles/web-app-nextcloud/vars/README.md
Normal file
2
roles/web-app-nextcloud/vars/README.md
Normal file
@@ -0,0 +1,2 @@
|
||||
# Variables
|
||||
This folder contains the Nextcloud Variables
|
||||
236
roles/web-app-nextcloud/vars/configuration.yml
Normal file
236
roles/web-app-nextcloud/vars/configuration.yml
Normal file
@@ -0,0 +1,236 @@
|
||||
version: "production" # @see https://nextcloud.com/blog/nextcloud-release-channels-and-how-to-track-them/
|
||||
csp:
|
||||
flags:
|
||||
style-src:
|
||||
unsafe-inline: true
|
||||
script-src-elem:
|
||||
unsafe-inline: true
|
||||
whitelist:
|
||||
font-src:
|
||||
- "data:"
|
||||
domains:
|
||||
canonical:
|
||||
- "cloud.{{ primary_domain }}"
|
||||
docker:
|
||||
services:
|
||||
redis:
|
||||
enabled: true
|
||||
database:
|
||||
enabled: true
|
||||
oidc:
|
||||
enabled: "{{ applications.nextcloud.features.oidc | default(true) }}" # Activate OIDC for Nextcloud
|
||||
# floavor decides which OICD plugin should be used.
|
||||
# Available options: oidc_login, sociallogin
|
||||
# @see https://apps.nextcloud.com/apps/oidc_login
|
||||
# @see https://apps.nextcloud.com/apps/sociallogin
|
||||
flavor: "oidc_login" # Keeping on sociallogin because the other option is not implemented yet
|
||||
features:
|
||||
matomo: true
|
||||
css: false
|
||||
portfolio_iframe: true
|
||||
ldap: true
|
||||
oidc: true
|
||||
central_database: true
|
||||
default_quota: '1000000000' # Quota to assign if no quota is specified in the OIDC response (bytes)
|
||||
legacy_login_mask:
|
||||
enabled: False # If true, then legacy login mask is shown. Otherwise just SSO
|
||||
container:
|
||||
application: "nextcloud-application" # Nextcloud application container name
|
||||
proxy: "nextcloud-web" # Nextcloud Proxy Container Name
|
||||
collabora: "nextcloud-collabora"
|
||||
performance:
|
||||
php:
|
||||
memory_limit: "{{ ((ansible_memtotal_mb | int) / 30)|int }}M" # Dynamic set memory limit
|
||||
upload_limit: "5G" # Set upload limit to 5GB for big media files
|
||||
opcache_memory_consumption: "{{ ((ansible_memtotal_mb | int) / 30)|int }}M" # Dynamic set memory consumption
|
||||
plugins:
|
||||
# List for Nextcloud Plugin Routine
|
||||
# Decides if plugins should be activated or deactivated
|
||||
appointments:
|
||||
# Nextcloud appointments: handles scheduling and appointment management (https://apps.nextcloud.com/apps/appointments)
|
||||
enabled: true
|
||||
bbb:
|
||||
# Nextcloud BigBlueButton integration: enables video conferencing using BigBlueButton (https://apps.nextcloud.com/apps/bbb)
|
||||
enabled: "{{ 'bigbluebutton' in group_names | lower }}"
|
||||
#- bookmarks
|
||||
# # Nextcloud Bookmarks: manage and share your bookmarks easily (https://apps.nextcloud.com/apps/bookmarks)
|
||||
# enabled: false
|
||||
calendar:
|
||||
# Nextcloud calendar: manages calendar events and scheduling (https://apps.nextcloud.com/apps/calendar)
|
||||
enabled: true
|
||||
cfg_share_links:
|
||||
# Nextcloud share links configuration: customizes sharing settings and link options (https://apps.nextcloud.com/apps/cfg_share_links)
|
||||
enabled: true
|
||||
collectives:
|
||||
# Nextcloud collectives: supports collaborative group management and sharing (https://apps.nextcloud.com/apps/collectives)
|
||||
enabled: true
|
||||
contacts:
|
||||
# Nextcloud contacts: manages address book and contact information (https://apps.nextcloud.com/apps/contacts)
|
||||
enabled: true
|
||||
cospend:
|
||||
# Nextcloud cospend: manages shared expenses and spending tracking (https://apps.nextcloud.com/apps/cospend)
|
||||
enabled: true
|
||||
deck:
|
||||
# Nextcloud Deck: organizes tasks and projects using Kanban boards (https://apps.nextcloud.com/apps/deck)
|
||||
# When Taiga is activated, this plugin is deactivated, because Taiga is the prefered application.
|
||||
enabled: "{{ 'taiga' not in group_names | lower }}"
|
||||
drawio:
|
||||
# Nextcloud draw.io: integrates diagram creation and editing tools (https://apps.nextcloud.com/apps/drawio)
|
||||
enabled: true
|
||||
duplicatefinder:
|
||||
# Nextcloud duplicate finder: scans and identifies duplicate files (https://apps.nextcloud.com/apps/duplicatefinder)
|
||||
enabled: true
|
||||
emlviewer:
|
||||
# Nextcloud EML Viewer: previews and manages EML email files (https://apps.nextcloud.com/apps/emlviewer)
|
||||
enabled: true
|
||||
event_update_notification:
|
||||
# Nextcloud event update notification: sends alerts when events are updated (https://apps.nextcloud.com/apps/event_update_notification)
|
||||
enabled: true
|
||||
epubviewer:
|
||||
# Nextcloud EPUB Viewer: enables reading and previewing EPUB e-books (https://apps.nextcloud.com/apps/epubviewer)
|
||||
enabled: true
|
||||
external:
|
||||
# Nextcloud External: Adds links to external services (https://apps.nextcloud.com/apps/external)
|
||||
enabled: true
|
||||
#files_accesscontrol
|
||||
# # Nextcloud Files Access Control: restricts file access based on defined rules (https://apps.nextcloud.com/apps/files_accesscontrol)
|
||||
# enabled: false
|
||||
#files_archive
|
||||
# # Nextcloud Files Archive: compresses and archives files for efficient storage (https://apps.nextcloud.com/apps/files_archive)
|
||||
# enabled: false
|
||||
#files_automatedtagging
|
||||
# # Nextcloud Files Automated Tagging: automatically tags files to improve organization (https://apps.nextcloud.com/apps/files_automatedtagging)
|
||||
# enabled: false
|
||||
files_bpm:
|
||||
# Nextcloud Files BPM: integrates business process management for file workflows (https://apps.nextcloud.com/apps/files_bpm)
|
||||
enabled: true
|
||||
files_downloadactivity:
|
||||
# Nextcloud Files Download Activity: tracks and logs file download events (https://apps.nextcloud.com/apps/files_downloadactivity)
|
||||
enabled: true
|
||||
files_linkeditor:
|
||||
# Nextcloud files link editor: allows customization of shared file links (https://apps.nextcloud.com/apps/files_linkeditor)
|
||||
enabled: true
|
||||
files_mindmap:
|
||||
# Nextcloud Files Mindmap: visualizes file relationships as mind maps (https://apps.nextcloud.com/apps/files_mindmap)
|
||||
enabled: true
|
||||
files_texteditor:
|
||||
# Nextcloud Files Text Editor: provides an online editor for text files (https://apps.nextcloud.com/apps/files_texteditor)
|
||||
# Not available for Nextcloud < 27
|
||||
enabled: false
|
||||
fileslibreofficeedit:
|
||||
# Nextcloud LibreOffice integration: allows online editing of documents with LibreOffice (https://apps.nextcloud.com/apps/fileslibreofficeedit)
|
||||
enabled: true
|
||||
forms:
|
||||
# Nextcloud forms: facilitates creation of forms and surveys (https://apps.nextcloud.com/apps/forms)
|
||||
enabled: true
|
||||
gestion:
|
||||
# Nextcloud Gestion: manages administrative tasks and workflows (https://apps.nextcloud.com/apps/gestion)
|
||||
enabled: true
|
||||
groupfolders:
|
||||
# Nextcloud Group Folders: centralizes shared folders for group collaboration (https://apps.nextcloud.com/apps/groupfolders)
|
||||
enabled: true
|
||||
gpxpod:
|
||||
# Nextcloud GPX pod: visualizes GPS tracks and GPX data (https://apps.nextcloud.com/apps/gpxpod)
|
||||
enabled: true
|
||||
integration_discourse:
|
||||
# Nextcloud Integration Discourse: connects Nextcloud with Discourse forums (https://apps.nextcloud.com/apps/integration_discourse)
|
||||
enabled: false
|
||||
integration_gitlab:
|
||||
# Nextcloud Integration GitLab: connects Nextcloud with GitLab repositories (https://apps.nextcloud.com/apps/integration_gitlab)
|
||||
enabled: "{{ 'gitlab' in group_names | lower }}"
|
||||
integration_github:
|
||||
# Nextcloud Integration GitHub: integrates GitHub repositories with Nextcloud (https://apps.nextcloud.com/apps/integration_github)
|
||||
enabled: false
|
||||
integration_google:
|
||||
# Nextcloud Integration Google: connects Google services with Nextcloud (https://apps.nextcloud.com/apps/integration_google)
|
||||
enabled: true
|
||||
integration_mastodon:
|
||||
# Nextcloud Integration Mastodon: connects Nextcloud with the Mastodon social network (https://apps.nextcloud.com/apps/integration_mastodon)
|
||||
enabled: "{{ 'mastodon' in group_names | lower }}"
|
||||
integration_openai:
|
||||
# Nextcloud Integration OpenAI: brings OpenAI functionalities into Nextcloud (https://apps.nextcloud.com/apps/integration_openai)
|
||||
enabled: false
|
||||
integration_openproject:
|
||||
# Nextcloud Integration OpenProject: integrates project management features from OpenProject (https://apps.nextcloud.com/apps/integration_openproject)
|
||||
enabled: "{{ 'openproject' in group_names | lower }}"
|
||||
integration_peertube:
|
||||
# Nextcloud Integration PeerTube: connects to PeerTube for video sharing (https://apps.nextcloud.com/apps/integration_peertube)
|
||||
enabled: "{{ 'peertube' in group_names | lower }}"
|
||||
#keeweb
|
||||
# # Nextcloud KeeWeb: integrates the KeeWeb password manager within Nextcloud (https://apps.nextcloud.com/apps/keeweb)
|
||||
# # This isn't maintained anymore. The alternatives don't support keepass files
|
||||
# enabled: false
|
||||
keeporsweep:
|
||||
# Nextcloud keep or sweep: helps manage and clean up files and data (https://apps.nextcloud.com/apps/keeporsweep)
|
||||
enabled: true
|
||||
mail:
|
||||
# Nextcloud mail: integrated email client for managing mail accounts (https://apps.nextcloud.com/apps/mail)
|
||||
enabled: true
|
||||
maps:
|
||||
# Nextcloud maps: provides mapping and location services integration (https://apps.nextcloud.com/apps/maps)
|
||||
enabled: true
|
||||
metadata:
|
||||
# Nextcloud Metadata: manages and displays file metadata for enhanced organization (https://apps.nextcloud.com/apps/metadata)
|
||||
enabled: true
|
||||
news:
|
||||
# Nextcloud News: aggregates and displays news feeds directly in Nextcloud (https://apps.nextcloud.com/apps/news)
|
||||
enabled: true
|
||||
oidc_login:
|
||||
# Nextcloud User OIDC: integrates OpenID Connect for user authentication (https://apps.nextcloud.com/apps/oidc_login)
|
||||
enabled: "{{ _applications_nextcloud_oidc_flavor=='oidc_login' | lower }}"
|
||||
incompatible_plugins:
|
||||
- user_oidc # Will be disabled
|
||||
- sociallogin # Will be disabled
|
||||
phonetrack:
|
||||
# Nextcloud phone track: tracks and monitors mobile device usage (https://apps.nextcloud.com/apps/phonetrack)
|
||||
enabled: true
|
||||
polls:
|
||||
# Nextcloud polls: facilitates creation and management of user polls (https://apps.nextcloud.com/apps/polls)
|
||||
enabled: true
|
||||
quota_warning:
|
||||
# Nextcloud quota warning: notifies users when storage limits are reached (https://apps.nextcloud.com/apps/quota_warning)
|
||||
enabled: true
|
||||
recognize:
|
||||
# Nextcloud recognize: performs image recognition tasks (https://apps.nextcloud.com/apps/recognize)
|
||||
enabled: false # Deactivated because it let to bugs
|
||||
richdocuments:
|
||||
# Nextcloud Rich Documents: provides collaborative document editing capabilities (https://apps.nextcloud.com/apps/richdocuments)
|
||||
enabled: false # @todo To set it default to true activate https://hub.docker.com/r/collabora/code before
|
||||
sociallogin:
|
||||
# Nextcloud social login: allows authentication using social networks (https://apps.nextcloud.com/apps/sociallogin)
|
||||
enabled: "{{ _applications_nextcloud_oidc_flavor=='sociallogin' | lower }}"
|
||||
incompatible_plugins:
|
||||
- user_oidc # Will be disabled
|
||||
- oidc_login # Will be disabled
|
||||
spreed:
|
||||
# Nextcloud Spreed: offers video conferencing and chat functionalities (https://apps.nextcloud.com/apps/spreed)
|
||||
enabled: false # @todo to activate it first implement web-app-coturn and activate it
|
||||
tables:
|
||||
# Nextcloud tables: allows creation and editing of tables within the interface (https://apps.nextcloud.com/apps/tables)
|
||||
enabled: true
|
||||
tasks:
|
||||
# Nextcloud tasks: manages personal or group tasks and to-do lists (https://apps.nextcloud.com/apps/tasks)
|
||||
enabled: true
|
||||
#terms_of_service
|
||||
# # Nextcloud Terms of Service: manages user acceptance of terms and conditions (https://apps.nextcloud.com/apps/terms_of_service)
|
||||
# enabled: false
|
||||
twofactor_nextcloud_notification:
|
||||
# Nextcloud two-factor notification: sends notifications for two-factor authentication events (https://apps.nextcloud.com/apps/twofactor_nextcloud_notification)
|
||||
enabled: "{{ not applications.nextcloud.features.oidc | default(true) }}" # Deactivate 2FA if oidc is active
|
||||
twofactor_totp:
|
||||
# Nextcloud two-factor TOTP: provides time-based one-time password authentication (https://apps.nextcloud.com/apps/twofactor_totp)
|
||||
enabled: "{{ not applications.nextcloud.features.oidc | default(true) }}" # Deactivate 2FA if oidc is active
|
||||
user_ldap:
|
||||
# Nextcloud user LDAP: integrates LDAP for user management and authentication (https://apps.nextcloud.com/apps/user_ldap)
|
||||
enabled: "{{ applications.nextcloud.features.ldap | default(true) }}"
|
||||
user_directory:
|
||||
enabled: true # Enables the LDAP User Directory Search
|
||||
user_oidc:
|
||||
# Nextcloud User OIDC: integrates OpenID Connect for user authentication (https://apps.nextcloud.com/apps/user_oidc)
|
||||
enabled: "{{ _applications_nextcloud_oidc_flavor=='user_oidc' | lower }}"
|
||||
incompatible_plugins:
|
||||
- oidc_login
|
||||
- sociallogin
|
||||
whiteboard:
|
||||
# Nextcloud Whiteboard: provides a collaborative drawing and brainstorming tool (https://apps.nextcloud.com/apps/whiteboard)
|
||||
enabled: true
|
||||
39
roles/web-app-nextcloud/vars/main.yml
Normal file
39
roles/web-app-nextcloud/vars/main.yml
Normal file
@@ -0,0 +1,39 @@
|
||||
---
|
||||
# General
|
||||
application_id: "nextcloud" # Application identifier
|
||||
container_port: 80
|
||||
|
||||
# Database
|
||||
database_password: "{{applications.nextcloud.credentials.database_password}}" # Database password
|
||||
database_type: "mariadb" # Database flavor
|
||||
|
||||
# Networking
|
||||
domain: "{{ domains | get_domain(application_id) }}" # Public domain at which Nextcloud will be accessable
|
||||
http_port: "{{ ports.localhost.http[application_id] }}" # Port at which nextcloud is reachable in the local network
|
||||
|
||||
# Control Node
|
||||
nextcloud_control_node_plugin_vars_directory: "{{role_path}}/vars/plugins/" # Folder in which the files for the plugin configuration are stored
|
||||
nextcloud_control_node_plugin_tasks_directory: "{{role_path}}/tasks/plugins/" # Folder which contains the files for extra plugin configuration tasks
|
||||
|
||||
# Host
|
||||
|
||||
## Host Paths
|
||||
nextcloud_host_config_additives_directory: "{{docker_compose.directories.volumes}}cymais/" # This folder is the path to which the additive configurations will be copied
|
||||
nextcloud_host_include_instructions_file: "{{docker_compose.directories.volumes}}includes.php" # Path to the instruction file on the host. Responsible for loading the additional configurations
|
||||
|
||||
# Docker
|
||||
|
||||
## User Configuration
|
||||
nextcloud_docker_user_id: 82 # UID of the www-data user
|
||||
nextcloud_docker_user: "www-data" # Name of the www-data user (Set here to easy change it in the future)
|
||||
|
||||
## Internal Paths
|
||||
nextcloud_docker_work_directory: "/var/www/html/" # Name of the workdir in which the application is stored
|
||||
nextcloud_docker_config_directory: "{{nextcloud_docker_work_directory}}config/" # Folder in which the Nextcloud configurations are stored
|
||||
nextcloud_docker_config_file: "{{nextcloud_docker_config_directory}}config.php" # Path to the Nextcloud configuration file
|
||||
nextcloud_docker_config_additives_directory: "{{nextcloud_docker_config_directory}}cymais/" # Path to the folder which contains additional configurations
|
||||
nextcloud_docker_include_instructions_file: "/tmp/includes.php" # Path to the temporary file which will be included to the config.php to load the additional configurations
|
||||
|
||||
## Execution
|
||||
nextcloud_docker_exec: "docker exec -u {{ nextcloud_docker_user }} {{ applications.nextcloud.container.application }}" # General execute composition
|
||||
nextcloud_docker_exec_occ: "{{nextcloud_docker_exec}} {{ nextcloud_docker_work_directory }}occ" # Execute docker occ command
|
||||
2
roles/web-app-nextcloud/vars/plugins/README.md
Normal file
2
roles/web-app-nextcloud/vars/plugins/README.md
Normal file
@@ -0,0 +1,2 @@
|
||||
# Plugins
|
||||
This folder contains the plugin specific configurations which will be applied
|
||||
7
roles/web-app-nextcloud/vars/plugins/bbb.yml
Normal file
7
roles/web-app-nextcloud/vars/plugins/bbb.yml
Normal file
@@ -0,0 +1,7 @@
|
||||
plugin_configuration:
|
||||
- appid: "bbb"
|
||||
configkey: "api.secret"
|
||||
configvalue: "{{ applications.bigbluebutton.credentials.shared_secret }}"
|
||||
- appid: "bbb"
|
||||
configkey: "api.url"
|
||||
configvalue: "{{ domains | get_url('bigbluebutton', web_protocol) }}{{applications.bigbluebutton.api_suffix}}"
|
||||
86
roles/web-app-nextcloud/vars/plugins/sociallogin.yml
Normal file
86
roles/web-app-nextcloud/vars/plugins/sociallogin.yml
Normal file
@@ -0,0 +1,86 @@
|
||||
plugin_configuration:
|
||||
-
|
||||
appid: "sociallogin"
|
||||
# This configuration allows users to connect multiple accounts to their Nextcloud profile
|
||||
# using the sociallogin app.
|
||||
configkey: "allow_login_connect"
|
||||
configvalue: 1
|
||||
-
|
||||
appid: "sociallogin"
|
||||
configkey: "auto_create_groups"
|
||||
configvalue: ""
|
||||
-
|
||||
appid: "sociallogin"
|
||||
configkey: "button_text_wo_prefix"
|
||||
configvalue: ""
|
||||
-
|
||||
appid: "sociallogin"
|
||||
configkey: "create_disabled_users"
|
||||
configvalue: ""
|
||||
-
|
||||
appid: "sociallogin"
|
||||
# This configuration defines custom OpenID Connect (OIDC) providers for authentication.
|
||||
# In this case, it sets up a Keycloak provider with details like URLs for authorization,
|
||||
# token retrieval, user info, and logout, as well as the client ID and secret.
|
||||
configkey: "custom_providers"
|
||||
configvalue:
|
||||
custom_oidc:
|
||||
- name: "{{ domains | get_domain('keycloak') }}"
|
||||
title: "keycloak"
|
||||
style: "keycloak"
|
||||
authorizeUrl: "{{ oidc.client.authorize_url }}"
|
||||
tokenUrl: "{{ oidc.client.token_url }}"
|
||||
displayNameClaim: ""
|
||||
userInfoUrl: "{{ oidc.client.user_info_url }}"
|
||||
logoutUrl: "{{ oidc.client.logout_url }}"
|
||||
clientId: "{{ oidc.client.id }}"
|
||||
clientSecret: "{{ oidc.client.secret }}"
|
||||
scope: "openid"
|
||||
groupsClaim: ""
|
||||
defaultGroup: ""
|
||||
-
|
||||
appid: "sociallogin"
|
||||
configkey: "disable_notify_admins"
|
||||
configvalue: ""
|
||||
-
|
||||
appid: "sociallogin"
|
||||
configkey: "disable_registration"
|
||||
configvalue: ""
|
||||
-
|
||||
appid: "sociallogin"
|
||||
configkey: "enabled"
|
||||
configvalue: "yes"
|
||||
-
|
||||
appid: "sociallogin"
|
||||
configkey: "hide_default_login"
|
||||
configvalue: ""
|
||||
-
|
||||
appid: "sociallogin"
|
||||
configkey: "no_prune_user_groups"
|
||||
configvalue: ""
|
||||
-
|
||||
appid: "sociallogin"
|
||||
configkey: "oauth_providers"
|
||||
configvalue: "null"
|
||||
-
|
||||
appid: "sociallogin"
|
||||
# This configuration prevents the creation of new Nextcloud users if an account with the
|
||||
# same email address already exists in the system. It helps avoid duplicate accounts.
|
||||
configkey: "prevent_create_email_exists"
|
||||
configvalue: 1
|
||||
-
|
||||
appid: "sociallogin"
|
||||
configkey: "restrict_users_wo_assigned_groups"
|
||||
configvalue: ""
|
||||
-
|
||||
appid: "sociallogin"
|
||||
configkey: "restrict_users_wo_mapped_groups"
|
||||
configvalue: ""
|
||||
-
|
||||
appid: "sociallogin"
|
||||
configkey: "types"
|
||||
configvalue: ""
|
||||
-
|
||||
appid: "sociallogin"
|
||||
configkey: "update_profile_on_login"
|
||||
configvalue: 1
|
||||
184
roles/web-app-nextcloud/vars/plugins/user_ldap.yml
Normal file
184
roles/web-app-nextcloud/vars/plugins/user_ldap.yml
Normal file
@@ -0,0 +1,184 @@
|
||||
plugin_configuration:
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "background_sync_interval"
|
||||
configvalue: 43200
|
||||
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "background_sync_offset"
|
||||
configvalue: 0
|
||||
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "background_sync_prefix"
|
||||
configvalue: "s01"
|
||||
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "enabled"
|
||||
configvalue: "yes"
|
||||
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "s01last_jpegPhoto_lookup"
|
||||
configvalue: 0
|
||||
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "s01ldap_backup_port"
|
||||
configvalue: "{{ ports.localhost.ldap.ldap }}" # This is just optimized for local port @todo implement for external ports as well
|
||||
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "s01ldap_base"
|
||||
configvalue: "{{ldap.dn.root}}"
|
||||
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "s01ldap_base_groups"
|
||||
configvalue: "{{ldap.dn.root}}"
|
||||
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "s01ldap_base_users"
|
||||
configvalue: "{{ldap.dn.ou.users}}"
|
||||
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "s01ldap_cache_ttl"
|
||||
configvalue: 600
|
||||
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "s01ldap_configuration_active"
|
||||
configvalue: 1
|
||||
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "s01ldap_connection_timeout"
|
||||
configvalue: 15
|
||||
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "s01ldap_display_name"
|
||||
configvalue: "cn"
|
||||
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "s01ldap_dn"
|
||||
configvalue: "{{ldap.dn.administrator.data}}"
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "s01ldap_email_attr"
|
||||
configvalue: "mail"
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "s01ldap_experienced_admin"
|
||||
configvalue: 0
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "s01ldap_gid_number"
|
||||
configvalue: "gidNumber"
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "s01ldap_group_display_name"
|
||||
configvalue: "cn"
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "s01ldap_group_filter"
|
||||
configvalue: "(&(|(objectclass=groupOfUniqueNames)(objectclass=posixGroup)))"
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "s01ldap_group_filter_mode"
|
||||
configvalue: 0
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "s01ldap_group_member_assoc_attribute"
|
||||
configvalue: "uniqueMember"
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "s01ldap_groupfilter_objectclass"
|
||||
configvalue: "groupOfUniqueNames\nposixGroup"
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "s01ldap_host"
|
||||
configvalue: "{{ldap.server.domain}}"
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "s01ldap_login_filter"
|
||||
configvalue: "{{ ldap.filters.users.login }}"
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "s01ldap_login_filter_mode"
|
||||
configvalue: 0
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "s01ldap_loginfilter_email"
|
||||
configvalue: 0
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "s01ldap_loginfilter_username"
|
||||
configvalue: 1
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "s01ldap_mark_remnants_as_disabled"
|
||||
configvalue: 0
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "s01ldap_matching_rule_in_chain_state"
|
||||
configvalue: "unknown"
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "s01ldap_nested_groups"
|
||||
configvalue: 0
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "s01ldap_paging_size"
|
||||
configvalue: 500
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "s01ldap_port"
|
||||
configvalue: 389
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "s01ldap_turn_off_cert_check"
|
||||
configvalue: 0
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "s01ldap_turn_on_pwd_change"
|
||||
configvalue: 0
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "s01ldap_user_avatar_rule"
|
||||
configvalue: "default"
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "s01ldap_user_filter_mode"
|
||||
configvalue: 0
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "s01ldap_userfilter_objectclass"
|
||||
configvalue: "inetOrgPerson"
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "s01ldap_userlist_filter"
|
||||
configvalue: |-
|
||||
{% if applications[application_id].plugins.user_ldap.user_directory.enabled %}
|
||||
{{ ldap.filters.users.all }}
|
||||
{% else %}
|
||||
()
|
||||
{% endif %}
|
||||
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "s01use_memberof_to_detect_membership"
|
||||
configvalue: 1
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "types"
|
||||
configvalue: "authentication"
|
||||
-
|
||||
appid: "user_ldap"
|
||||
configkey: "s01ldap_expert_username_attr"
|
||||
configvalue: "{{ldap.user.attributes.id}}"
|
||||
21
roles/web-app-nextcloud/vars/system.yml
Normal file
21
roles/web-app-nextcloud/vars/system.yml
Normal file
@@ -0,0 +1,21 @@
|
||||
nextcloud_system_config:
|
||||
- parameter: "hide_login_form"
|
||||
type: "boolean"
|
||||
value: "{{ (not applications[application_id].legacy_login_mask.enabled) | lower }}"
|
||||
|
||||
- parameter: "auth.webauthn.enabled"
|
||||
type: "boolean"
|
||||
value: "{{ applications[application_id].legacy_login_mask.enabled | lower }}"
|
||||
|
||||
- parameter: "maintenance_window_start"
|
||||
type: "integer"
|
||||
value: "{{ on_calendar_nextcloud }}"
|
||||
|
||||
- parameter: "default_phone_region"
|
||||
value: "{{ HOST_LL | upper }}"
|
||||
|
||||
- parameter: "trusted_domains 0"
|
||||
value: "{{domains | get_domain(application_id)}}"
|
||||
|
||||
- parameter: "overwrite.cli.url"
|
||||
value: "{{ domains | get_url(application_id, web_protocol) }}"
|
||||
Reference in New Issue
Block a user