1 # -*- coding: utf-8 -*-
4 # Copyright (C) The Arvados Authors. All rights reserved.
6 # SPDX-License-Identifier: AGPL-3.0
8 {%- set database_host = ("__DATABASE_EXTERNAL_SERVICE_HOST_OR_IP__" or "127.0.0.1") %}
9 {%- set database_name = "__DATABASE_NAME__" %}
10 {%- set database_user = "__DATABASE_USER__" %}
11 {%- set database_password = "__DATABASE_PASSWORD__" %}
13 # The variables commented out are the default values that the formula uses.
14 # The uncommented values are REQUIRED values. If you don't set them, running
15 # this formula will fail.
18 version: '__VERSION__'
19 ## It makes little sense to disable this flag, but you can, if you want :)
20 # use_upstream_repo: true
22 ## Repo URL is built with grains values. If desired, it can be completely
23 ## overwritten with the pillar parameter 'repo_url'
25 # humanname: Arvados Official Repository
30 ## api, workbench and shell require some gems, so you need to make sure ruby
31 ## and deps are installed in order to install and compile the gems.
32 ## We default to `false` in these two variables as it's expected you already
33 ## manage OS packages with some other tool and you don't want us messing up
36 ## We set these to `true` here for testing purposes.
37 ## They both default to `false`.
39 manage_gems_deps: true
47 # - libcurl4-gnutls-dev
57 # file: /etc/arvados/config.yml
60 ## If you're intalling any of the rails apps (api, workbench), the group
61 ## should be set to that of the web server, usually `www-data`
65 ### ARVADOS CLUSTER CONFIG
71 # max concurrent connections per arvados server daemon
72 # connection_pool_max: 32
73 name: {{ database_name }}
74 host: {{ database_host }}
75 password: {{ database_password }}
76 user: {{ database_user }}
79 # Centos7 does not enable SSL by default, so we disable
80 # it here just for testing of the formula purposes only.
81 # You should not do this in production, and should
82 # configure Postgres certificates correctly
83 {%- if grains.os_family in ('RedHat',) %}
90 # When using arvados-snakeoil certs set insecure: true
102 system_root: __SYSTEM_ROOT_TOKEN__
103 management: __MANAGEMENT_TOKEN__
104 anonymous_user: __ANONYMOUS_USER_TOKEN__
108 blob_signing_key: __BLOB_SIGNING_KEY__
115 Email: __INITIAL_USER_EMAIL__
116 Password: __INITIAL_USER_PASSWORD__
119 ## This should usually match all your `keepstore` instances
121 # the volume name will be composed with
122 # <cluster>-nyw5e-<volume>
123 __CLUSTER__-nyw5e-000000000000000:
125 'http://keep0.__CLUSTER__.__DOMAIN__:25107':
130 Root: /var/lib/arvados/keep
133 NewUsersAreActive: true
134 AutoAdminFirstUser: true
135 AutoSetupNewUsers: true
136 AutoSetupNewUsersWithRepository: true
140 ExternalURL: 'https://__CLUSTER__.__DOMAIN__:__CONTROLLER_EXT_SSL_PORT__'
142 'http://controller.internal:8003': {}
145 'http://__CLUSTER__.__DOMAIN__:9006': {}
148 'http://localhost:9005': {}
150 ExternalURL: 'https://keep.__CLUSTER__.__DOMAIN__:__CONTROLLER_EXT_SSL_PORT__'
152 'http://keep.internal:25100': {}
155 'http://keep0.__CLUSTER__.__DOMAIN__:25107': {}
158 'http://api.internal:8004': {}
160 ExternalURL: 'https://collections.__CLUSTER__.__DOMAIN__:__CONTROLLER_EXT_SSL_PORT__'
162 'http://collections.internal:9002': {}
164 ExternalURL: 'https://download.__CLUSTER__.__DOMAIN__:__CONTROLLER_EXT_SSL_PORT__'
166 ExternalURL: 'https://webshell.__CLUSTER__.__DOMAIN__:__CONTROLLER_EXT_SSL_PORT__'
168 ExternalURL: 'wss://ws.__CLUSTER__.__DOMAIN__/websocket'
170 'http://ws.internal:8005': {}
172 ExternalURL: 'https://workbench.__CLUSTER__.__DOMAIN__:__CONTROLLER_EXT_SSL_PORT__'
174 ExternalURL: 'https://workbench2.__CLUSTER__.__DOMAIN__:__CONTROLLER_EXT_SSL_PORT__'