mirror of
https://github.com/ansible/awx.git
synced 2026-02-02 01:58:09 -03:30
7b636a7566
HTTPS is, by default, expected to be on port 443.
Also, with HSTS set, we need to be sure that users attempting to arrive
via HTTP are properly redirected to HTTPS.
This does so by:
* Setting up a 301 redirect for any URL to its HTTPS version
* Adjusting the internal port for HTTPS traffic to 8053
* Setting docker-compose to share port 443 → 8053
- This is configurable via an inventory variable
144 lines
5.6 KiB
Plaintext
144 lines
5.6 KiB
Plaintext
localhost ansible_connection=local ansible_python_interpreter="/usr/bin/env python"
|
|
|
|
[all:vars]
|
|
|
|
# Remove these lines if you want to run a local image build
|
|
# Otherwise the setup playbook will install the official Ansible images. Versions may
|
|
# be selected based on: latest, 1, 1.0, 1.0.0, 1.0.0.123
|
|
# by default the base will be used to search for ansible/awx_web and ansible/awx_task
|
|
dockerhub_base=ansible
|
|
|
|
# Openshift Install
|
|
# Will need to set -e openshift_password=developer -e docker_registry_password=$(oc whoami -t)
|
|
# or set -e openshift_token=TOKEN
|
|
# openshift_host=127.0.0.1:8443
|
|
# openshift_project=awx
|
|
# openshift_user=developer
|
|
# openshift_skip_tls_verify=False
|
|
# openshift_pg_emptydir=True
|
|
|
|
# Kubernetes Install
|
|
# kubernetes_context=test-cluster
|
|
# kubernetes_namespace=awx
|
|
# tiller_namespace=kube-system
|
|
# Optional Kubernetes Variables
|
|
# pg_persistence_storageClass=StorageClassName
|
|
# pg_cpu_limit=1000
|
|
# pg_mem_limit=2
|
|
|
|
# Kubernetes and Openshift Install Resource Requests
|
|
# These are the request and limit values for a pod's container for task/web/rabbitmq/memcached/management.
|
|
# The total amount of requested resources for a pod is the sum of all
|
|
# resources requested by all containers in the pod
|
|
# A cpu_request of 1500 is 1.5 cores for the container to start out with.
|
|
# A cpu_limit defines the maximum cores that that container can reserve.
|
|
# A mem_request of 2 is for 2 gigabytes of memory for the container
|
|
# A mem_limit defines the maximum memory that that container can reserve.
|
|
# Default values for these entries can be found in ./roles/kubernetes/defaults/main.yml
|
|
# task_cpu_request=1500
|
|
# task_mem_request=2
|
|
# task_cpu_limit=2000
|
|
# task_mem_limit=4
|
|
# web_cpu_limit=1000
|
|
# web_mem_limit=2
|
|
# rabbitmq_cpu_limit=1000
|
|
# rabbitmq_mem_limit=3
|
|
# memcached_cpu_limit=1000
|
|
# memcached_mem_limit=2
|
|
# management_cpu_limit=2000
|
|
# management_mem_limit=2
|
|
|
|
# Common Docker parameters
|
|
awx_task_hostname=awx
|
|
awx_web_hostname=awxweb
|
|
postgres_data_dir=/tmp/pgdocker
|
|
host_port=80
|
|
host_port_ssl=443
|
|
#ssl_certificate=
|
|
docker_compose_dir=/tmp/awxcompose
|
|
|
|
# Required for Openshift when building the image on your own
|
|
# Optional for Openshift if using Dockerhub or another prebuilt registry
|
|
# Required for Docker Compose Install if building the image on your own
|
|
# Optional for Docker Compose Install if using Dockerhub or another prebuilt registry
|
|
# Define if you want the image pushed to a registry. The container definition will also use these images
|
|
# docker_registry=172.30.1.1:5000
|
|
# docker_registry_repository=awx
|
|
# docker_registry_username=developer
|
|
|
|
|
|
# Docker_image will not attempt to push to remote if the image already exists locally
|
|
# Set this to true to delete images from docker on the build host so that they are pushed to the remote repository
|
|
# docker_remove_local_images=False
|
|
|
|
# Set pg_hostname if you have an external postgres server, otherwise
|
|
# a new postgres service will be created
|
|
# pg_hostname=postgresql
|
|
pg_username=awx
|
|
# pg_password should be random 10 character alphanumeric string, when postgresql is running on kubernetes
|
|
# NB: it's a limitation of the "official" postgres helm chart
|
|
pg_password=awxpass
|
|
pg_database=awx
|
|
pg_port=5432
|
|
#pg_sslmode=require
|
|
|
|
# RabbitMQ Configuration
|
|
rabbitmq_password=awxpass
|
|
rabbitmq_erlang_cookie=cookiemonster
|
|
|
|
# Use a local distribution build container image for building the AWX package
|
|
# This is helpful if you don't want to bother installing the build-time dependencies as
|
|
# it is taken care of already.
|
|
# NOTE: IMPORTANT: If you are running a mininshift install, using this container might not work
|
|
# if you are using certain drivers like KVM where the source tree can't be mapped
|
|
# into the build container.
|
|
# Thus this setting must be set to False which will trigger a local build. To view the
|
|
# typical dependencies that you might need to install see:
|
|
# installer/image_build/files/Dockerfile.sdist
|
|
# use_container_for_build=true
|
|
|
|
# This will create or update a default admin (superuser) account in AWX, if not provided
|
|
# then these default values are used
|
|
admin_user=admin
|
|
admin_password=password
|
|
|
|
# Whether or not to create preload data for demonstration purposes
|
|
create_preload_data=True
|
|
|
|
# AWX Secret key
|
|
# It's *very* important that this stay the same between upgrades or you will lose the ability to decrypt
|
|
# your credentials
|
|
secret_key=awxsecret
|
|
|
|
# Build AWX with official logos
|
|
# Requires cloning awx-logos repo into the project root.
|
|
# Review the trademark guidelines at https://github.com/ansible/awx-logos/blob/master/TRADEMARKS.md
|
|
# awx_official=false
|
|
|
|
# Proxy
|
|
#http_proxy=http://proxy:3128
|
|
#https_proxy=http://proxy:3128
|
|
#no_proxy=mycorp.org
|
|
|
|
# Container networking configuration
|
|
# Set the awx_task and awx_web containers' search domain(s)
|
|
#awx_container_search_domains=example.com,ansible.com
|
|
# Alternate DNS servers
|
|
#awx_alternate_dns_servers="10.1.2.3,10.2.3.4"
|
|
|
|
# AWX project data folder. If you need access to the location where AWX stores the projects
|
|
# it manages from the docker host, you can set this to turn it into a volume for the container.
|
|
#project_data_dir=/var/lib/awx/projects
|
|
|
|
# CA Trust directory. If you need to provide custom CA certificates, supplying
|
|
# this variable causes this directory on the host to be bind mounted over
|
|
# /etc/pki/ca-trust in the awx_task and awx_web containers.
|
|
# NOTE: only obeyed in local_docker install
|
|
#ca_trust_dir=/etc/pki/ca-trust/source/anchors
|
|
|
|
# Include /etc/nginx/awx_extra.conf
|
|
# Note the use of glob pattern for nginx
|
|
# which makes include "optional" - i.e. not fail
|
|
# if file is absent
|
|
#extra_nginx_include="/etc/nginx/awx_extra[.]conf"
|