environments/global/common.yaml

   1 ---
   2 lookup_options:
   3   base_installation::mounts:
   4     merge: unique
   5   classes:
   6     merge: deep
   7   base_installation::system_users:
   8     merge: unique
   9   letsencrypt::hosts:
  10     merge: unique
  11
  12 classes:
  13   stdlib: ~
  14
  15 base_installation::ldap_base: "dc=immae,dc=eu"
  16 base_installation::ldap_dn: "cn=%{facts.ec2_metadata.hostname},ou=hosts,dc=immae,dc=eu"
  17 base_installation::ldap_cn: "%{facts.ec2_metadata.hostname}"
  18 base_installation::ldap_server: "ldap.immae.eu"
  19 base_installation::ldap_uri: "ldaps://ldap.immae.eu"
  20 # FIXME: get all mounts without needing that hack?
  21 base_installation::mounts:
  22   - "%{facts.ldapvar.self.vars.mounts.0}"
  23   - "%{facts.ldapvar.self.vars.mounts.1}"
  24 base_installation::puppet_conf_path: "/etc/puppetlabs/puppet"
  25 base_installation::puppet_code_path: "/etc/puppetlabs/code"
  26 base_installation::puppet_pass_seed: "/etc/puppetlabs/puppet/password_seed"
  27 base_installation::puppet_ssl_path: "/etc/puppetlabs/ssl"
  28 base_installation::system_locales: ["fr_FR.UTF-8", "en_US.UTF-8"]
  29 base_installation::system_timezone: "Europe/Paris"
  30 base_installation::system_users:
  31   - userid: 1000
  32     username: "immae"
  33     groups: ["wheel"]
  34     keys:
  35       - host: "immae.eu"
  36         key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQDi5PgLBwMRyRwzJPnSgUyRAuB9AAxMijsw1pR/t/wmxQne1O5fIPOleHx+D8dyZbwm+XkzlcJpgT0Qy3qC9J8BPhshJvO/tA/8CI/oS/FE0uWsyACH1DMO2dk4gRRZGSE9IuzDMRPlnfZ3n0tdsPzzv3GH4It/oPIgsvkTowKztGLQ7Xmjr5BxzAhXcIQymqA0U3XWHSdWvnSRDaOFG0PDoVMS85IdwlviVKLnV5Sstb4NC/P28LFfgvW8DO/XrOqujgDomqTmR41dK/AyrGGOb2cQUMO4l8Oa+74aOyKaB61rr/rJkr+wCbEttkTvgFa6zZygSk3edfiWE2rgn4+v"
  37         key_type: "ssh-rsa"
  38 xmr_stak::mining_pool: "pool.minexmr.com:7777"
  39 xmr_stak::wallet: "44CA8TxTFYbQqN2kLyk8AnB6Ghz4mcbGpYC2EyXW7A8H9QspvWnTjDn39XUZDPrFwPa5JNwt4TmAxcooPWv4SaJqL87Bcdo"
  40 letsencrypt::email: "sites+letsencrypt@mail.immae.eu"
  41 letsencrypt::try_for_real_hostname: true