147 lines
4.5 KiB
YAML
147 lines
4.5 KiB
YAML
---
|
|
hiera_include:
|
|
- glauth
|
|
|
|
# additional altnames
|
|
profiles::pki::vault::alt_names:
|
|
- ldap.main.unkin.net
|
|
- ldap.service.consul
|
|
- ldap.query.consul
|
|
- "ldap.service.%{facts.country}-%{facts.region}.consul"
|
|
|
|
glauth::params::download_version: 2.3.2
|
|
glauth::params::ldap_enabled: true
|
|
glauth::params::ldaps_enabled: true
|
|
glauth::params::basedn: 'dc=main,dc=unkin,dc=net'
|
|
glauth::params::behaviors_ignorecapabilities: true
|
|
glauth::params::ldap_tlscertpath: /etc/pki/tls/vault/certificate.crt
|
|
glauth::params::ldap_tlskeypath: /etc/pki/tls/vault/private.key
|
|
glauth::params::ldaps_cert: /etc/pki/tls/vault/certificate.crt
|
|
glauth::params::ldaps_key: /etc/pki/tls/vault/private.key
|
|
glauth::params::api_cert: /etc/pki/tls/vault/certificate.crt
|
|
glauth::params::api_key: /etc/pki/tls/vault/private.key
|
|
|
|
# configure consul service
|
|
consul::services:
|
|
ldap:
|
|
service_name: 'ldap'
|
|
tags:
|
|
- 'media'
|
|
- 'ldap'
|
|
address: "%{facts.networking.ip}"
|
|
port: 636
|
|
checks:
|
|
- id: 'glauth_http_check'
|
|
name: 'glauth HTTP Check'
|
|
http: "https://%{facts.networking.fqdn}:5555"
|
|
method: 'GET'
|
|
tls_skip_verify: true
|
|
interval: '10s'
|
|
timeout: '1s'
|
|
profiles::consul::client::node_rules:
|
|
- resource: service
|
|
segment: ldap
|
|
disposition: write
|
|
|
|
glauth::users:
|
|
benvin:
|
|
user_name: 'benvin'
|
|
givenname: 'Ben'
|
|
sn: 'Vincent'
|
|
mail: 'benvin@users.main.unkin.net'
|
|
uidnumber: 20000
|
|
primarygroup: 20000
|
|
othergroups:
|
|
- 20010
|
|
- 20011
|
|
- 20012
|
|
- 20013
|
|
- 20014
|
|
- 20015
|
|
loginshell: '/bin/bash'
|
|
homedir: '/home/benvin'
|
|
passsha256: 'd2434f6b4764ef75d5b7b96a876a32deedbd6aa726a109c3f32e823ca66f604a'
|
|
sshkeys:
|
|
- 'ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDZ8SRLlPiDylBpdWR9LpvPg4fDVD+DZst4yRPFwMMhta4mnB1H9XuvZkptDhXywWQ7QIcqa2WbhCen0OQJCtwn3s7EYtacmF5MxmwBYocPoK2AArGuh6NA9rwTdLrPdzhZ+gwe88PAzRLNzjm0ZBR+mA9saMbPJdqpKp0AWeAM8QofRQAWuCzQg9i0Pn1KDMvVDRHCZof4pVlHSTyHNektq4ifovn0zhKC8jD/cYu95mc5ftBbORexpGiQWwQ3HZw1IBe0ZETB1qPIPwsoJpt3suvMrL6T2//fcIIUE3TcyJKb/yhztja4TZs5jT8370G/vhlT70He0YPxqHub8ZfBv0khlkY93VBWYpNGJwM1fVqlw7XbfBNdOuJivJac8eW317ZdiDnKkBTxapThpPG3et9ib1HoPGKRsd/fICzNz16h2R3tddSdihTFL+bmTCa6Lo+5t5uRuFjQvhSLSgO2/gRAprc3scYOB4pY/lxOFfq3pU2VvSJtRgLNEYMUYKk= ben@unkin.net'
|
|
matsol:
|
|
user_name: 'matsol'
|
|
givenname: 'Matt'
|
|
sn: 'Solomon'
|
|
mail: 'matsol@users.main.unkin.net'
|
|
uidnumber: 20001
|
|
primarygroup: 20000
|
|
othergroups:
|
|
- 20010
|
|
- 20011
|
|
- 20012
|
|
- 20013
|
|
- 20014
|
|
- 20015
|
|
loginshell: '/bin/bash'
|
|
homedir: '/home/matsol'
|
|
passsha256: '369263e2455a57c8c21388860c417b640fcf045a303cfc88def18c5197493600'
|
|
|
|
glauth::services:
|
|
svc_jellyfin:
|
|
service_name: 'svc_jellyfin'
|
|
mail: 'jellyfin@service.main.unkin.net'
|
|
uidnumber: 30000
|
|
primarygroup: 20001
|
|
passsha256: '97f7b1eb24deb0a86e812d79c56f4901d39a24128dc9f6fde033e7195f7d0739'
|
|
svc_sonarr:
|
|
service_name: 'svc_sonarr'
|
|
mail: 'sonarr@service.main.unkin.net'
|
|
uidnumber: 30001
|
|
primarygroup: 20001
|
|
passsha256: '2c32d4cb831183cfbef15835cc76f99b401d0159621bc580e852253d4d8f8722'
|
|
svc_radarr:
|
|
service_name: 'svc_radarr'
|
|
mail: 'radarr@service.main.unkin.net'
|
|
uidnumber: 30002
|
|
primarygroup: 20001
|
|
passsha256: '805b0182d90c2b5b3ba43e50988447a0bff0115eb5fedd8eeae8eac00ba53025'
|
|
svc_lidarr:
|
|
service_name: 'svc_lidarr'
|
|
mail: 'lidarr@service.main.unkin.net'
|
|
uidnumber: 30003
|
|
primarygroup: 20001
|
|
passsha256: '6d04cd2a45784bacbd50e6714710b55805c7e9886665a6d7790e6d8712b67aff'
|
|
svc_readarr:
|
|
service_name: 'svc_readarr'
|
|
mail: 'readarr@service.main.unkin.net'
|
|
uidnumber: 30004
|
|
primarygroup: 20001
|
|
passsha256: '751f22fbd9c052b2cd0c1cb4be514d8710f1a51f84ce44f607ab3a5591162f8c'
|
|
svc_prowlarr:
|
|
service_name: 'svc_prowlarr'
|
|
mail: 'prowlarr@service.main.unkin.net'
|
|
uidnumber: 30005
|
|
primarygroup: 20001
|
|
passsha256: 'd1e6bcc4a9f2d15b6e3c349155a88e433902dfe765e57bf3c10e6830f151a043'
|
|
|
|
glauth::groups:
|
|
users:
|
|
group_name: 'people'
|
|
gidnumber: 20000
|
|
services:
|
|
group_name: 'services'
|
|
gidnumber: 20001
|
|
jellyfin_access:
|
|
group_name: 'jellyfin_access'
|
|
gidnumber: 20010
|
|
sonarr_access:
|
|
group_name: 'sonarr_access'
|
|
gidnumber: 20011
|
|
radarr_access:
|
|
group_name: 'radarr_access'
|
|
gidnumber: 20012
|
|
lidarr_access:
|
|
group_name: 'lidarr_access'
|
|
gidnumber: 20013
|
|
readarr_access:
|
|
group_name: 'readarr_access'
|
|
gidnumber: 20014
|
|
prowlarr_access:
|
|
group_name: 'prowlarr_access'
|
|
gidnumber: 20015
|