9b1e41d46e3f1d959b52c44d897508398bae3067
[arvados.git] / tools / salt-install / single_host / arvados.sls
1 ---
2 # Copyright (C) The Arvados Authors. All rights reserved.
3 #
4 # SPDX-License-Identifier: AGPL-3.0
5
6 # The variables commented out are the default values that the formula uses.
7 # The uncommented values are REQUIRED values. If you don't set them, running
8 # this formula will fail.
9 arvados:
10   ### GENERAL CONFIG
11   version: '__VERSION__'
12   ## It makes little sense to disable this flag, but you can, if you want :)
13   # use_upstream_repo: true
14
15   ## Repo URL is built with grains values. If desired, it can be completely
16   ## overwritten with the pillar parameter 'repo_url'
17   # repo:
18   #   humanname: Arvados Official Repository
19
20   release: __RELEASE__
21
22   ## IMPORTANT!!!!!
23   ## api, workbench and shell require some gems, so you need to make sure ruby
24   ## and deps are installed in order to install and compile the gems.
25   ## We default to `false` in these two variables as it's expected you already
26   ## manage OS packages with some other tool and you don't want us messing up
27   ## with your setup.
28   ruby:
29     ## We set these to `true` here for testing purposes.
30     ## They both default to `false`.
31     manage_ruby: true
32     manage_gems_deps: true
33     # pkg: ruby
34     # gems_deps:
35     #     - curl
36     #     - g++
37     #     - gcc
38     #     - git
39     #     - libcurl4
40     #     - libcurl4-gnutls-dev
41     #     - libpq-dev
42     #     - libxml2
43     #     - libxml2-dev
44     #     - make
45     #     - python3-dev
46     #     - ruby-dev
47     #     - zlib1g-dev
48
49   # config:
50   #   file: /etc/arvados/config.yml
51   #   user: root
52   ## IMPORTANT!!!!!
53   ## If you're intalling any of the rails apps (api, workbench), the group
54   ## should be set to that of the web server, usually `www-data`
55   #   group: root
56   #   mode: 640
57
58   ### ARVADOS CLUSTER CONFIG
59   cluster:
60     name: __CLUSTER__
61     domain: __DOMAIN__
62
63     database:
64       # max concurrent connections per arvados server daemon
65       # connection_pool_max: 32
66       name: arvados
67       host: 127.0.0.1
68       password: changeme_arvados
69       user: arvados
70       encoding: en_US.utf8
71       client_encoding: UTF8
72
73     tls:
74       # certificate: ''
75       # key: ''
76       # required to test with snakeoil certs
77       insecure: true
78
79     ### TOKENS
80     tokens:
81       system_root: changeme_system_root_token
82       management: changeme_management_token
83       rails_secret: changeme_rails_secret_token
84       anonymous_user: changeme_anonymous_user_token
85
86     ### KEYS
87     secrets:
88       blob_signing_key: changeme_blob_signing_key
89       workbench_secret_key: changeme_workbench_secret_key
90       dispatcher_access_key: changeme_dispatcher_access_key
91       dispatcher_secret_key: changeme_dispatcher_secret_key
92       keep_access_key: changeme_keep_access_key
93       keep_secret_key: changeme_keep_secret_key
94
95     Login:
96       Test:
97         Enable: true
98         javier:
99           User: javier@arva2.arv.local
100           Password: perico
101
102     AuditLogs:
103       Section_to_ignore:
104         - some_random_value
105
106     ### VOLUMES
107     ## This should usually match all your `keepstore` instances
108     Volumes:
109       # the volume name will be composed with
110       # <cluster>-nyw5e-<volume>
111       __CLUSTER__-nyw5e-000000000000000:
112         AccessViaHosts:
113           http://keep0.__CLUSTER__.__DOMAIN__:25107:
114             ReadOnly: false
115         Replication: 2
116         Driver: Directory
117         DriverParameters:
118           Root: /tmp
119
120     Users:
121       NewUsersAreActive: true
122       AutoAdminFirstUser: true
123       AutoSetupNewUsers: true
124       AutoSetupNewUsersWithRepository: true
125
126     Services:
127       Controller:
128         ExternalURL: https://__CLUSTER__.__DOMAIN__:__HOST_SSL_PORT__
129         InternalURLs:
130           http://127.0.0.2:8003: {}
131       DispatchCloud:
132         InternalURLs:
133           http://__CLUSTER__.__DOMAIN__:9006: {}
134       Keepbalance:
135         InternalURLs:
136           http://__CLUSTER__.__DOMAIN__:9005: {}
137       Keepproxy:
138         ExternalURL: https://keep.__CLUSTER__.__DOMAIN__:__HOST_SSL_PORT__
139         InternalURLs:
140           http://127.0.0.2:25100: {}
141       Keepstore:
142         InternalURLs:
143           http://keep0.__CLUSTER__.__DOMAIN__:25107: {}
144       RailsAPI:
145         InternalURLs:
146           http://127.0.0.2:8004: {}
147       WebDAV:
148         ExternalURL: https://collections.__CLUSTER__.__DOMAIN__:__HOST_SSL_PORT__
149         InternalURLs:
150           http://127.0.0.2:9002: {}
151       WebDAVDownload:
152         ExternalURL: https://download.__CLUSTER__.__DOMAIN__:__HOST_SSL_PORT__
153       WebShell:
154         ExternalURL: https://webshell.__CLUSTER__.__DOMAIN__:__HOST_SSL_PORT__
155       Websocket:
156         ExternalURL: wss://ws.__CLUSTER__.__DOMAIN__/websocket
157         InternalURLs:
158           http://127.0.0.2:8005: {}
159       Workbench1:
160         ExternalURL: https://workbench.__CLUSTER__.__DOMAIN__:__HOST_SSL_PORT__
161       Workbench2:
162         ExternalURL: https://workbench2.__CLUSTER__.__DOMAIN__:__HOST_SSL_PORT__