mirror of
http://172.20.10.11:3000/gitadmin/INSIGHT-MVP.git
synced 2026-06-25 07:56:39 +02:00
36196457ea
- Alle Ansible-Rollen erstellt: common, disk_setup, docker, postgresql, pgbouncer, redis, nginx, zabbix_agent - ansible.cfg mit Pipeline-Optimierung - hosts.yml mit echten IPs (DBS01=.20, APS01=.21, WEB01=.22) - group_vars für alle Server (dbs, aps, web) - Zabbix-Server auf sentinel.xinion.de gesetzt - vault.yml.example als Vorlage für Secrets - site.yml nutzt import_playbook (DBS01→APS01→WEB01) - BRIEFING.md für alle 4 Repos angelegt (Platform, Apps, Infra, Shared) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
36 lines
952 B
Text
36 lines
952 B
Text
---
|
|
# vault.yml.example — VORLAGE für ansible/vault.yml
|
|
# NIEMALS echte Passwörter committen!
|
|
# vault.yml mit Ansible Vault verschlüsseln:
|
|
# ansible-vault create ansible/vault.yml
|
|
# ansible-vault edit ansible/vault.yml
|
|
|
|
# PostgreSQL Passwörter
|
|
postgresql_users:
|
|
- name: insight_app
|
|
password: "CHANGE_ME_STRONG_PASSWORD"
|
|
role_attr_flags: "LOGIN NOSUPERUSER NOCREATEDB NOCREATEROLE"
|
|
- name: pgbouncer
|
|
password: "CHANGE_ME_PGBOUNCER_PASSWORD"
|
|
role_attr_flags: "LOGIN NOSUPERUSER NOCREATEDB NOCREATEROLE"
|
|
|
|
postgresql_grants:
|
|
- db: insight_core
|
|
role: insight_app
|
|
privs: "ALL"
|
|
- db: insight_crm
|
|
role: insight_app
|
|
privs: "ALL"
|
|
|
|
# PgBouncer Auth
|
|
pgbouncer_users:
|
|
- name: insight_app
|
|
password: "CHANGE_ME_STRONG_PASSWORD"
|
|
- name: pgbouncer
|
|
password: "CHANGE_ME_PGBOUNCER_PASSWORD"
|
|
|
|
# Redis
|
|
redis_password: "CHANGE_ME_REDIS_PASSWORD"
|
|
|
|
# Zabbix (falls PSK verwendet)
|
|
# zabbix_psk_key: "CHANGE_ME_PSK"
|