mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-12-10 19:35:26 +00:00
Kevin Veen-Birkenbach
654131ab89
- Introduce shared CAPTCHA settings and RECAPTCHA_ENABLED/HCAPTCHA_ENABLED flags in group_vars - Wire reCAPTCHA/hCaptcha credentials into EspoCRM, Keycloak, Listmonk and Nextcloud - Replace EspoCRM set_flags.php with generic seed_config.php and hook it into entrypoint/env - Fix run_once handling in sys-ctl-cln-disc-space and minor CSS Jinja spacing issue https://chatgpt.com/share/692a1d4f-1154-800f-a4ae-bb068aa24a53
123 lines
5.0 KiB
Django/Jinja
123 lines
5.0 KiB
Django/Jinja
#############################################
|
||
# EspoCRM Docker Environment (.env) – ENGLISH
|
||
# See: https://hub.docker.com/r/espocrm/espocrm
|
||
#############################################
|
||
|
||
# ------------------------------------------------
|
||
# Database connection
|
||
# ------------------------------------------------
|
||
ESPOCRM_DATABASE_PLATFORM=Mysql
|
||
ESPOCRM_DATABASE_HOST={{ database_host }}
|
||
ESPOCRM_DATABASE_PORT={{ database_port }}
|
||
ESPOCRM_DATABASE_NAME={{ database_name }}
|
||
ESPOCRM_DATABASE_USER={{ database_username }}
|
||
ESPOCRM_DATABASE_PASSWORD={{ database_password }}
|
||
|
||
# Disable EspoCRM’s built-in cron (handled externally)
|
||
CRON_DISABLED=true
|
||
|
||
# ------------------------------------------------
|
||
# Initial admin account
|
||
# ------------------------------------------------
|
||
ESPOCRM_ADMIN_USERNAME={{ applications | get_app_conf(application_id, 'users.administrator.username') }}
|
||
ESPOCRM_ADMIN_PASSWORD={{ applications | get_app_conf(application_id, 'credentials.administrator_password') }}
|
||
|
||
# Public base URL of the EspoCRM instance
|
||
ESPOCRM_SITE_URL={{ ESPOCRM_URL }}
|
||
|
||
# ------------------------------------------------
|
||
# General UI & locale settings
|
||
# ------------------------------------------------
|
||
ESPOCRM_CONFIG_LANGUAGE={{ HOST_LL_CC }}
|
||
ESPOCRM_CONFIG_DATE_FORMAT={{ HOST_DATE_FORMAT }}
|
||
ESPOCRM_CONFIG_TIME_FORMAT={{ HOST_TIME_FORMAT }}
|
||
ESPOCRM_CONFIG_TIME_ZONE={{ HOST_TIMEZONE }}
|
||
# ESPOCRM_CONFIG_WEEK_START: 0 = Sunday, 1 = Monday
|
||
ESPOCRM_CONFIG_WEEK_START=1
|
||
ESPOCRM_CONFIG_DEFAULT_CURRENCY={{ HOST_CURRENCY }}
|
||
#ESPOCRM_CONFIG_THOUSAND_SEPARATOR={{ HOST_THOUSAND_SEPARATOR }}
|
||
#ESPOCRM_CONFIG_DECIMAL_MARK={{HOST_DECIMAL_MARK}}
|
||
|
||
# ------------------------------------------------
|
||
# Logger
|
||
# ------------------------------------------------
|
||
ESPOCRM_CONFIG_LOGGER_LEVEL={{ 'DEBUG' if MODE_DEBUG | bool else 'INFO' }}
|
||
ESPOCRM_CONFIG_LOGGER_PATH=php://stdout
|
||
ESPOCRM_CONFIG_LOGGER_ROTATION=false
|
||
|
||
# ------------------------------------------------
|
||
# System SMTP settings
|
||
# ------------------------------------------------
|
||
ESPOCRM_CONFIG_SMTP_SERVER={{ SYSTEM_EMAIL.HOST }}
|
||
ESPOCRM_CONFIG_SMTP_PORT={{ SYSTEM_EMAIL.PORT }}
|
||
ESPOCRM_CONFIG_SMTP_SECURITY={{ "TLS" if SYSTEM_EMAIL.START_TLS else "SSL"}}
|
||
ESPOCRM_CONFIG_SMTP_AUTH=true
|
||
ESPOCRM_CONFIG_SMTP_USERNAME={{ users['contact'].email }}
|
||
ESPOCRM_CONFIG_SMTP_PASSWORD={{ users['contact'].mailu_token }}
|
||
ESPOCRM_CONFIG_OUTBOUND_EMAIL_FROM_NAME={{ applications | get_app_conf(application_id, 'email.from_name')}}
|
||
ESPOCRM_CONFIG_OUTBOUND_EMAIL_FROM_ADDRESS={{ users['contact'].email }}
|
||
|
||
# ------------------------------------------------
|
||
# LDAP settings (optional)
|
||
# Applied only if the feature flag is true
|
||
# ------------------------------------------------
|
||
{% if applications | get_app_conf(application_id, 'features.ldap') %}
|
||
ESPOCRM_CONFIG_AUTHENTICATION_METHOD=Ldap
|
||
ESPOCRM_CONFIG_LDAP_HOST={{ LDAP.SERVER.DOMAIN }}
|
||
ESPOCRM_CONFIG_LDAP_PORT={{ LDAP.SERVER.PORT }}
|
||
# ESPOCRM_CONFIG_LDAP_SECURITY: "", SSL or TLS
|
||
ESPOCRM_CONFIG_LDAP_SECURITY={{ LDAP.SERVER.SECURITY }}
|
||
ESPOCRM_CONFIG_LDAP_USERNAME={{ LDAP.DN.ADMINISTRATOR.DATA }}
|
||
ESPOCRM_CONFIG_LDAP_PASSWORD={{ LDAP.BIND_CREDENTIAL }}
|
||
ESPOCRM_CONFIG_LDAP_BASE_DN={{ LDAP.DN.OU.USERS }}
|
||
ESPOCRM_CONFIG_LDAP_USER_LOGIN_FILTER=(sAMAccountName=%USERNAME%)
|
||
{% endif %}
|
||
|
||
# ------------------------------------------------
|
||
# OpenID Connect settings (optional)
|
||
# Applied only if the feature flag is true
|
||
# ------------------------------------------------
|
||
{% if ESPOCRM_OIDC_ENABLED | bool %}
|
||
|
||
# ------------------------------------------------
|
||
# OpenID Connect settings
|
||
# ------------------------------------------------
|
||
ESPOCRM_CONFIG_OIDC_ALLOW_ADMIN_USER=true
|
||
ESPOCRM_CONFIG_AUTHENTICATION_METHOD=Oidc
|
||
ESPOCRM_CONFIG_OIDC_FALLBACK=false # set true if you want LDAP as fallback
|
||
|
||
ESPOCRM_CONFIG_OIDC_CLIENT_ID={{ OIDC.CLIENT.ID }}
|
||
ESPOCRM_CONFIG_OIDC_CLIENT_SECRET={{ OIDC.CLIENT.SECRET }}
|
||
|
||
ESPOCRM_CONFIG_OIDC_AUTHORIZATION_ENDPOINT={{ OIDC.CLIENT.AUTHORIZE_URL }}
|
||
ESPOCRM_CONFIG_OIDC_TOKEN_ENDPOINT={{ OIDC.CLIENT.TOKEN_URL }}
|
||
ESPOCRM_CONFIG_OIDC_USER_INFO_ENDPOINT={{ OIDC.CLIENT.USER_INFO_URL }}
|
||
ESPOCRM_CONFIG_OIDC_JWKS_ENDPOINT={{ OIDC.CLIENT.CERTS }}
|
||
|
||
ESPOCRM_CONFIG_OIDC_AUTHORIZATION_REDIRECT_URI={{ ESPOCRM_URL }}/oidc/callback
|
||
#ESPOCRM_CONFIG_OIDC_SCOPES=openid,profile,email # Defined in main.yml
|
||
|
||
ESPOCRM_CONFIG_OIDC_CREATE_USER=true
|
||
ESPOCRM_CONFIG_OIDC_SYNC=true
|
||
ESPOCRM_CONFIG_OIDC_USERNAME_CLAIM={{ OIDC.ATTRIBUTES.USERNAME }}
|
||
# ESPOCRM_CONFIG_OIDC_SYNC_TEAMS=true
|
||
# ESPOCRM_CONFIG_OIDC_GROUP_CLAIM=group
|
||
{% endif %}
|
||
|
||
## Seed Configuration
|
||
|
||
ESPOCRM_SEED_DEBUG={{ MODE_DEBUG | lower }}
|
||
|
||
ESPOCRM_SCRIPT_SEED={{ ESPOCRM_SCRIPT_SEED_DOCKER }}
|
||
|
||
## Espo init toggles controlled at container start (used by custom entrypoint)
|
||
ESPOCRM_SEED_MAINTENANCE_MODE={{ ESPOCRM_MAINTENANCE_MODE }}
|
||
ESPOCRM_SEED_CRON_DISABLED={{ ESPOCRM_CRON_DISABLED }}
|
||
ESPOCRM_SEED_USE_CACHE={{ ESPOCRM_USE_CACHE }}
|
||
|
||
## ReCAPTCHA
|
||
ESPOCRM_SEED_RECAPTCHA_VERSION="v3"
|
||
ESPOCRM_SEED_RECAPTCHA_ENABLED="{{ ESPOCRM_RECAPTCHA_ENABLED }}"
|
||
ESPOCRM_SEED_RECAPTCHA_PUBLIC_KEY="{{ ESPOCRM_RECAPTCHA_KEY }}"
|
||
ESPOCRM_SEED_RECAPTCHA_SECRET_KEY="{{ ESPOCRM_RECAPTCHA_SECRET }}"
|