|
| 1 | +- hosts: all |
| 2 | + |
| 3 | + vars: |
| 4 | + nginx_package_name: "nginx" |
| 5 | + ds_port: 9378 |
| 6 | + |
| 7 | + nginx_vhosts: |
| 8 | + - listen: "80 default_server" |
| 9 | + server_name: “” |
| 10 | + server_tokens: "off" |
| 11 | + template: "{{ nginx_vhost_template }}" |
| 12 | + filename: "onlyoffice.conf" |
| 13 | + extra_parameters: | |
| 14 | + location /ds_path/ { |
| 15 | + proxy_set_header Upgrade $http_upgrade; |
| 16 | + proxy_set_header Connection $proxy_connection; |
| 17 | + proxy_set_header X-Forwarded-Host $the_host/ds_path; |
| 18 | + proxy_set_header X-Forwarded-Proto $the_scheme; |
| 19 | + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; |
| 20 | +
|
| 21 | + proxy_pass http://localhost:{{ ds_port }}/; |
| 22 | + proxy_http_version 1.1; |
| 23 | + } |
| 24 | +
|
| 25 | + postgresql_global_config_options: |
| 26 | + - option: listen_addresses |
| 27 | + value: "*" |
| 28 | + - option: unix_socket_directories |
| 29 | + value: '{{ postgresql_unix_socket_directories | join(",") }}' |
| 30 | + - option: log_directory |
| 31 | + value: 'log' |
| 32 | + |
| 33 | + postgresql_hba_entries: |
| 34 | + - type: local |
| 35 | + database: all |
| 36 | + user: postgres |
| 37 | + auth_method: peer |
| 38 | + - type: local |
| 39 | + database: all |
| 40 | + user: all |
| 41 | + auth_method: peer |
| 42 | + - type: host |
| 43 | + database: all |
| 44 | + user: all |
| 45 | + address: 127.0.0.1/32 |
| 46 | + auth_method: md5 |
| 47 | + - type: host |
| 48 | + database: all |
| 49 | + user: all |
| 50 | + address: ::1/128 |
| 51 | + auth_method: md5 |
| 52 | + - type: host |
| 53 | + database: all |
| 54 | + user: all |
| 55 | + address: 0.0.0.0/0 |
| 56 | + auth_method: md5 |
| 57 | + |
| 58 | + postgresql_databases: |
| 59 | + - name: "{{ db_server_name }}" |
| 60 | + |
| 61 | + postgresql_users: |
| 62 | + - name: "{{ db_server_user }}" |
| 63 | + password: "{{ db_server_pass }}" |
| 64 | + |
| 65 | + rabbitmq_users: |
| 66 | + - name: "{{ rabbitmq_server_user }}" |
| 67 | + password: "{{ rabbitmq_server_pass }}" |
| 68 | + vhost: "{{ rabbitmq_server_vpath }}" |
| 69 | + configure_priv: .* |
| 70 | + read_priv: .* |
| 71 | + write_priv: .* |
| 72 | + tags: administrator |
| 73 | + |
| 74 | + rabbitmq_users_remove: [] |
| 75 | + |
| 76 | + redis_bind_interface: 0.0.0.0 |
| 77 | + |
| 78 | + roles: |
| 79 | + - geerlingguy.postgresql |
| 80 | + - onlyoffice.rabbitmq |
| 81 | + - geerlingguy.redis |
| 82 | + - onlyoffice.documentserver |
| 83 | + - geerlingguy.nginx |
0 commit comments