feat(provision): refactor to add other setup examples
[arvados.git] / tools / salt-install / config_examples / single_host / multiple_hostnames / pillars / arvados.sls
1 ---
2 # Copyright (C) The Arvados Authors. All rights reserved.
3 #
4 # SPDX-License-Identifier: AGPL-3.0
5
6 # The variables commented out are the default values that the formula uses.
7 # The uncommented values are REQUIRED values. If you don't set them, running
8 # this formula will fail.
9 arvados:
10   ### GENERAL CONFIG
11   version: '__VERSION__'
12   ## It makes little sense to disable this flag, but you can, if you want :)
13   # use_upstream_repo: true
14
15   ## Repo URL is built with grains values. If desired, it can be completely
16   ## overwritten with the pillar parameter 'repo_url'
17   # repo:
18   #   humanname: Arvados Official Repository
19
20   release: __RELEASE__
21
22   ## IMPORTANT!!!!!
23   ## api, workbench and shell require some gems, so you need to make sure ruby
24   ## and deps are installed in order to install and compile the gems.
25   ## We default to `false` in these two variables as it's expected you already
26   ## manage OS packages with some other tool and you don't want us messing up
27   ## with your setup.
28   ruby:
29     ## We set these to `true` here for testing purposes.
30     ## They both default to `false`.
31     manage_ruby: true
32     manage_gems_deps: true
33     # pkg: ruby
34     # gems_deps:
35     #     - curl
36     #     - g++
37     #     - gcc
38     #     - git
39     #     - libcurl4
40     #     - libcurl4-gnutls-dev
41     #     - libpq-dev
42     #     - libxml2
43     #     - libxml2-dev
44     #     - make
45     #     - python3-dev
46     #     - ruby-dev
47     #     - zlib1g-dev
48
49   # config:
50   #   file: /etc/arvados/config.yml
51   #   user: root
52   ## IMPORTANT!!!!!
53   ## If you're intalling any of the rails apps (api, workbench), the group
54   ## should be set to that of the web server, usually `www-data`
55   #   group: root
56   #   mode: 640
57
58   ### ARVADOS CLUSTER CONFIG
59   cluster:
60     name: __CLUSTER__
61     domain: __DOMAIN__
62
63     database:
64       # max concurrent connections per arvados server daemon
65       # connection_pool_max: 32
66       name: arvados
67       host: 127.0.0.1
68       password: changeme_arvados
69       user: arvados
70       encoding: en_US.utf8
71       client_encoding: UTF8
72
73     tls:
74       # certificate: ''
75       # key: ''
76       # required to test with arvados-snakeoil certs
77       insecure: true
78
79     ### TOKENS
80     tokens:
81       system_root: __SYSTEM_ROOT_TOKEN__
82       management: __MANAGEMENT_TOKEN__
83       rails_secret: __RAILS_SECRET_TOKEN__
84       anonymous_user: __ANONYMOUS_USER_TOKEN__
85
86     ### KEYS
87     secrets:
88       blob_signing_key: __BLOB_SIGNING_KEY__
89       workbench_secret_key: __WORKBENCH_SECRET_KEY__
90
91     Login:
92       Test:
93         Enable: true
94         Users:
95           __INITIAL_USER__:
96             Email: __INITIAL_USER_EMAIL__
97             Password: __INITIAL_USER_PASSWORD__
98
99     ### VOLUMES
100     ## This should usually match all your `keepstore` instances
101     Volumes:
102       # the volume name will be composed with
103       # <cluster>-nyw5e-<volume>
104       __CLUSTER__-nyw5e-000000000000000:
105         AccessViaHosts:
106           'http://keep0.__CLUSTER__.__DOMAIN__:25107':
107             ReadOnly: false
108         Replication: 2
109         Driver: Directory
110         DriverParameters:
111           Root: /tmp
112
113     Users:
114       NewUsersAreActive: true
115       AutoAdminFirstUser: true
116       AutoSetupNewUsers: true
117       AutoSetupNewUsersWithRepository: true
118
119     Services:
120       Controller:
121         ExternalURL: 'https://__CLUSTER__.__DOMAIN__:__HOST_SSL_PORT__'
122         InternalURLs:
123           'http://controller.internal:8003': {}
124       DispatchCloud:
125         InternalURLs:
126           'http://__CLUSTER__.__DOMAIN__:9006': {}
127       Keepbalance:
128         InternalURLs:
129           'http://__CLUSTER__.__DOMAIN__:9005': {}
130       Keepproxy:
131         ExternalURL: 'https://keep.__CLUSTER__.__DOMAIN__:__HOST_SSL_PORT__'
132         InternalURLs:
133           'http://keep.internal:25100': {}
134       Keepstore:
135         InternalURLs:
136           'http://keep0.__CLUSTER__.__DOMAIN__:25107': {}
137       RailsAPI:
138         InternalURLs:
139           'http://api.internal:8004': {}
140       WebDAV:
141         ExternalURL: 'https://collections.__CLUSTER__.__DOMAIN__:__HOST_SSL_PORT__'
142         InternalURLs:
143           'http://collections.internal:9002': {}
144       WebDAVDownload:
145         ExternalURL: 'https://download.__CLUSTER__.__DOMAIN__:__HOST_SSL_PORT__'
146       WebShell:
147         ExternalURL: 'https://webshell.__CLUSTER__.__DOMAIN__:__HOST_SSL_PORT__'
148       Websocket:
149         ExternalURL: 'wss://ws.__CLUSTER__.__DOMAIN__/websocket'
150         InternalURLs:
151           'http://ws.internal:8005': {}
152       Workbench1:
153         ExternalURL: 'https://workbench.__CLUSTER__.__DOMAIN__:__HOST_SSL_PORT__'
154       Workbench2:
155         ExternalURL: 'https://workbench2.__CLUSTER__.__DOMAIN__:__HOST_SSL_PORT__'