all.yml

###############################################################################
# This is a default ansible deploy configuration of Cider-CI.
#
# It is not included by default!
#
# We recommend to symlink this file from your inventory `group_vars/all.yml`
# file. Then override variables with dedicated group or host files.  See
# http://docs.cider-ci.info/installation/setup-and-deploy/ for details.
#
###############################################################################


#ansible_python_interpreter: /usr/bin/python3

###############################################################################
### general config ############################################################
###############################################################################

# set the hostname where external services,
# like executors can reach the Cider-CI server
ci_server_external_hostname: '{{ci_server_internal_hostname}}'

# changes this if you have https configured
ci_server_base_url: http://{{ ci_server_external_hostname }}

# it is a good idea to set an explicit master secret
ci_master_secret: "{{ lookup('password', inventory_dir + '/' + 'master_secret.txt chars=ascii_letters,digits,hexdigits length=40') }}"

# you will see strange things in the UI, like "created in two minutes" if server
# and executor machines get out of sync
ci_ntp_setup: no
ci_ntp_server: pool.ntp.org

ci_ssh_keys: []
ci_removed_ssh_keys: []

# setup /ramdisk as a tempfs; if you enable this you probably want to configure
# ci_executor_working_dir, and ci_executor_trait_postgresql_data_dir accordingly
ci_executor_ramdisk_setup: no
ci_executor_ramdisk_size: "{{ (ansible_memtotal_mb * 0.5) | round | int }}m"

# a list of words which mark additional traits available on the corresponding executor
ci_executor_custom_traits: []

# the following value is a PG interval!
# https://www.postgresql.org/docs/current/static/datatype-datetime.html
ci_server_trial_dispatch_timeout: 30 Minutes

# reset Debian default and restore Systemd default: prevent system crashes by
# overflowing disks due to excessive logging
journald_forward_to_syslog: 'no'

# This value is NULL or a PostgreSQL interval
# https://www.postgresql.org/docs/current/static/functions-datetime.html
defective_trial_same_executor_redispatch_delay: NULL

# customize the prefix of status pushes to remotes
status_pushes_name_prefix: Cider-CI@{{ci_server_external_hostname}}

### deploy specific config ####################################################

ci_clean_slate: no
ci_create_db_backup_before_deploy: yes
ci_force_local_build: no

###############################################################################
### executor specific config ##################################################
###############################################################################

ci_executor_daily_reboot: false
ci_executor_exec_user: ci-exec-user
ci_executor_working_dir: /tmp/ci_working-dir
ci_executor_service_nrepl_port: 7883
ci_executor_nrepl_enabled: false


### traits ####################################################################
# the default is not to install any of these traits
#
# NOTE: These defaulfs are now set within the role since the ansible precedence
# rules value groups/all.yml higher than the inventory. This is unfortunate and
# opaque. Ansible reads these values even if the role include is disabled.


# ci_executor_trait_ansible: false
# ci_executor_trait_apache2: false
# ci_executor_trait_asdf: false
# ci_executor_trait_asdf_nodejs: false
# ci_executor_trait_asdf_ruby: false
# ci_executor_trait_docker: false
# ci_executor_trait_firefox_esr: false
# ci_executor_trait_git_crypt: false
# ci_executor_trait_gpg: false
# ci_executor_trait_leiningen: false
# ci_executor_trait_lxd: false
# ci_executor_trait_misc: false
# ci_executor_trait_nodejs: false
# ci_executor_trait_openjdk: false
# ci_executor_trait_postgresql10: false
# ci_executor_trait_postgresql11: false
# ci_executor_trait_python3: false
# ci_executor_trait_ruby_install: false
# ci_executor_trait_s3_cache: false
# ci_executor_trait_sqlite: false
# ci_executor_trait_ssh_keys: false
# ci_executor_trait_stress_ng: true
# ci_executor_trait_translation_tools: false
# ci_executor_trait_ubuntu_desktop: false
# ci_executor_trait_wine: false
# ci_executor_trait_xorg: false

### Http Server specific config ###############################################

ci_server_virtual_hosts:
- hostname: "{{ ci_server_internal_hostname }}"
  ip: "{{ ci_server_internal_hostname }}"
  logfile_infix: "{{ ci_server_internal_hostname }}"
  force_redirect_to_https: no
- hostname: NULL
  ip: '*'
  ssl_certificate_file: /etc/ssl/certs/ssl-cert-snakeoil.pem
  ssl_certificate_key_file: /etc/ssl/private/ssl-cert-snakeoil.key
  force_redirect_to_https: no


### Secrets ###################################################################

ci_server_management_admin_secret: "{{ [ci_master_secret, 'admin', ci_master_secret ] | join(' ') | hash('sha256') }}"
ci_server_database_secret: "{{ [ci_master_secret, 'ci_database', ci_master_secret ] | join(' ') | hash('sha256') }}"
ci_server_services_secret: "{{ [ci_master_secret, 'ci_server_services', ci_master_secret ] | join(' ') | hash('sha256') }}"


###############################################################################
### server specific config,
### meant to be overridden under special circumstances only
###############################################################################

ci_server_timezone: Etc/UTC
ci_server_rails_timezone: UTC

ci_server_internal_hostname: localhost

ci_server_postgres_port: 9432

ci_server_dir: /cider-ci/server
ci_server_web_context: /cider-ci

ci_server_services:

  ui:
    name: user-interface
    type: rails
    path: /user-interface
    http_port: 8880
    context: /ui
    xmx: 1024m
    monit_match: java.*user-interface.*puma.*config\.ru
    monit_check_paths:
    - /status
    - /public

  server:
    name: server
    type: java
    path: /server
    http_port: 8881
    xmx: 1024m
    context: /server
    ws_context: /ws
    main: cider_ci.main
    monit_match: java.*cider_ci\.server\.main
    monit_check_paths:
    - /status