-
Notifications
You must be signed in to change notification settings - Fork 26
/
Copy pathmain.yml
128 lines (128 loc) · 8.63 KB
/
main.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
##### NEXTCLOUD #####
# Nextcloud admin username/password
nextcloud_user: "CHANGEME"
nextcloud_password: "CHANGEME"
# nextcloud administrator e-mail address
nextcloud_admin_email: "[email protected]"
# Fully Qualified Domain Name for the nextcloud instance
nextcloud_fqdn: "cloud.CHANGEME.org"
# nextcloud database type (mysql/pgsql)
nextcloud_db_type: "pgsql"
# nextcloud database host
# use /var/run/postgresql and unset the password to use postgresql local peer authentication
nextcloud_db_host: "localhost"
# nextcloud database name
nextcloud_db_name: "nextcloud"
# nextcloud database user
nextcloud_db_user: "nextcloud"
# nextcloud database password
nextcloud_db_password: "CHANGEME"
# mode for SSL/TLS certificates for the nextcloud webserver virtualhost (letsencrypt/selfsigned)
# letsencrypt: acquire a certificate from letsencrypt.org
# selfsigned: generate a self-signed certificate (will generate warning in browsers and clients)
nextcloud_https_mode: selfsigned
# nextcloud data storage directory
nextcloud_data_dir: "/var/nextcloud/data"
# Nextcloud installation directory (must be under a valid documentroot)
nextcloud_install_dir: "/var/www/{{ nextcloud_fqdn }}"
# full public URL of your nextcloud installation (update this if you changed the install location to a subdirectory)
nextcloud_full_url: "https://{{ nextcloud_fqdn }}/"
# nextcloud version to install
nextcloud_version: "28.0.14"
# base folder for shared files from other users
nextcloud_share_folder: '/SHARED/'
# default app to open on login. You can use comma-separated list of app names, so if the first app is not enabled for a user then Nextcloud will try the second one, and so on.
nextcloud_defaultapp: 'dashboard,files'
# Loglevel to start logging at (integer 1-4, 0=Debug, 1=Info, 2=Warning, 3=Error, 4=Fatal)
nextcloud_loglevel: 1
# workaround for old nextcloud-desktop clients which don't support TLSv1.3
nextcloud_allow_tls12: true
# automatically check the filesystem/data directory for changes made outside Nextcloud (no/yes)
nextcloud_filesystem_check_changes: no
# Nextcloud applications to enable or disable
# state: enable/disable
# app: nextcloud app name
nextcloud_apps:
- { state: "disable", app: "encryption" } # https://nextcloud.com/encryption/
- { state: "disable", app: "files_antivirus" } # https://apps.nextcloud.com/apps/files_antivirus
- { state: "disable", app: "files_versions" } # https://docs.nextcloud.com/server/latest/user_manual/en/files/version_control.html
- { state: "disable", app: "news" } # https://apps.nextcloud.com/apps/news
- { state: "disable", app: "user_external" } # https://apps.nextcloud.com/apps/user_external
- { state: "disable", app: "recommendations" } # https://github.com/nextcloud/recommendations/
- { state: "enable", app: "activity" } # https://docs.nextcloud.com/server/latest/admin_manual/configuration_server/activity_configuration.html
- { state: "enable", app: "calendar" } # https://apps.nextcloud.com/apps/calendar
- { state: "enable", app: "comments" } # comments on files
- { state: "enable", app: "contacts" } # https://apps.nextcloud.com/apps/contacts
- { state: "enable", app: "dav" } # https://docs.nextcloud.com/server/20/user_manual/en/files/access_webdav.html
- { state: "enable", app: "federatedfilesharing" } # https://docs.nextcloud.com/server/latest/admin_manual/configuration_files/federated_cloud_sharing_configuration.html
- { state: "enable", app: "federation" } # https://docs.nextcloud.com/server/latest/admin_manual/configuration_files/federated_cloud_sharing_configuration.html
- { state: "enable", app: "files" } # https://nextcloud.com/files/
- { state: "enable", app: "files_external" } # https://docs.nextcloud.com/server/latest/admin_manual/configuration_files/external_storage_configuration_gui.html
- { state: "enable", app: "files_pdfviewer" } # https://apps.nextcloud.com/apps/files_pdfviewer
- { state: "enable", app: "files_sharing" } # https://docs.nextcloud.com/server/stable/user_manual/en/files/sharing.html
- { state: "enable", app: "files_trashbin" } # https://docs.nextcloud.com/server/latest/admin_manual/configuration_files/trashbin_configuration.html
- { state: "enable", app: "viewer" } # https://github.com/nextcloud/viewer
- { state: "enable", app: "firstrunwizard" } # https://github.com/nextcloud/firstrunwizard
- { state: "enable", app: "groupfolders" } # https://apps.nextcloud.com/apps/groupfolders
- { state: "enable", app: "photos" } # https://github.com/nextcloud/photos
- { state: "disable", app: "music" } # https://apps.nextcloud.com/apps/music
- { state: "enable", app: "maps" } # https://apps.nextcloud.com/apps/maps
- { state: "enable", app: "notifications" } # https://github.com/nextcloud/notifications
- { state: "enable", app: "systemtags" } # https://docs.nextcloud.com/server/latest/user_manual/en/files/access_webgui.html#tagging-files
- { state: "disable", app: "files_automatedtagging" } # https://apps.nextcloud.com/apps/files_automatedtagging
- { state: "enable", app: "tasks" } # https://apps.nextcloud.com/apps/tasks
- { state: "enable", app: "updatenotification" } # https://docs.nextcloud.com/server/latest/admin_manual/maintenance/update.html
- { state: "enable", app: "user_ldap" } # https://docs.nextcloud.com/server/latest/admin_manual/configuration_user/user_auth_ldap.html
- { state: "enable", app: "notes" } # https://apps.nextcloud.com/apps/notes
- { state: "disable", app: "deck" } # https://apps.nextcloud.com/apps/deck
- { state: "enable", app: "admin_audit" } # https://portal.nextcloud.com/article/7/using-the-audit-log-44.html
- { state: "disable", app: "documentserver_community" } # https://apps.nextcloud.com/apps/documentserver_community
- { state: "disable", app: "onlyoffice" } # https://apps.nextcloud.com/apps/onlyoffice
- { state: "disable", app: "bookmarks" } # https://apps.nextcloud.com/apps/bookmarks
- { state: "disable", app: "cookbook" } # https://apps.nextcloud.com/apps/cookbook
- { state: "disable", app: "keeweb" } # https://apps.nextcloud.com/apps/keeweb
- { state: "disable", app: "passman" } # https://apps.nextcloud.com/apps/passman
- { state: "disable", app: "passwords" } # https://apps.nextcloud.com/apps/passwords
- { state: "enable", app: "polls" } # https://apps.nextcloud.com/apps/polls
- { state: "enable", app: "forms" } # https://apps.nextcloud.com/apps/forms
- { state: "disable", app: "apporder" } # https://apps.nextcloud.com/apps/apporder
- { state: "disable", app: "keeporsweep" } # https://apps.nextcloud.com/apps/keeporsweep
- { state: "disable", app: "jitsi" } # https://apps.nextcloud.com/apps/jitsi
- { state: "disable", app: "tables" } # https://apps.nextcloud.com/apps/tables
- { state: "disable", app: "survey_client" } # https://github.com/nextcloud/survey_client
- { state: "disable", app: "integration_whiteboard" } # https://apps.nextcloud.com/apps/integration_whiteboard
# mode for outgoing mail (disabled/smtp/smtp+ssl/sendmail)
nextcloud_smtp_mode: disabled
# outgoing mail settings below are required if nextcloud_smtp_mode: smtp/smtp+ssl
# 'From' address used in mails sent by nextcloud
nextcloud_smtp_from: "{{ msmtp_admin_email | default('[email protected]') }}"
# SMTP mail server address
nextcloud_smtp_host: "{{ msmtp_host | default('smtp.CHANGEME.org') }}"
# SMTP mail server port (e.g. 25/465/587)
nextcloud_smtp_port: "{{ msmtp_port | default('CHANGEME') }}"
# username and password for SMTP authentication
nextcloud_smtp_user: "{{ msmtp_username | default('CHANGEME') }}"
nextcloud_smtp_password: "{{ msmtp_password | default('CHANGEME') }}"
# list of IP addresses allowed to access nextcloud (IP or IP/netmask format)
# set to empty list [] to allow access from any IP address
nextcloud_allowed_hosts: []
# php-fpm: Maximum amount of memory a script may consume (K, M, G)
nextcloud_php_memory_limit: '512M'
# php_fpm: Maximum execution time of each script (seconds)
nextcloud_php_max_execution_time: 30
# php-fpm: Maximum amount of time each script may spend parsing request data (seconds)
nextcloud_php_max_input_time: 60
# php-fpm: Maximum size of POST data that PHP will accept (K, M, G)
nextcloud_php_post_max_size: '4G'
# php-fpm: Maximum allowed size for uploaded files (K, M, G)
nextcloud_php_upload_max_filesize: '4G'
# php-fpm: maximum number of child processes
nextcloud_php_pm_max_children: 30
# php-fpm: number of child processes created on startup.
nextcloud_php_pm_start_servers: 3
# php-fpm: desired minimum number of idle server processes
nextcloud_php_pm_min_spare_servers: 2
# php-fpm: desired maximum number of idle server processes
nextcloud_php_pm_max_max_spare_servers: 4
# enable/disable the nextcloud php-fpm pool (redirect users to maintenance page if disabled)
nextcloud_enable_service: yes