config datei für warpauth aktivieren

webserver/docker_warpinfra/tasks/main.yml

@@ -11,6 +11,7 @@
     - /srv/shared/noreply_email_pass
     - /srv/ldap/secret/ldap_admin_pass
     - /srv/ldap/secret/ldap_readonly_pass
+    - /srv/warpinfra/secret/web_secret_key
   register: warpinfra_secrets
 
 - name: get secrets from server 2
@@ -18,6 +19,7 @@
     noreply_email_pass: "{{ warpinfra_secrets.results | selectattr('item', 'equalto', '/srv/shared/noreply_email_pass') | map(attribute='content') | list | first | b64decode | regex_replace('\\s', '') }}" 
     ldap_admin_pass: "{{ warpinfra_secrets.results | selectattr('item', 'equalto', '/srv/ldap/secret/ldap_admin_pass') | map(attribute='content') | list | first | b64decode | regex_replace('\\s', '') }}" 
     ldap_readonly_pass: "{{ warpinfra_secrets.results | selectattr('item', 'equalto', '/srv/ldap/secret/ldap_readonly_pass') | map(attribute='content') | list | first | b64decode | regex_replace('\\s', '') }}" 
+    web_secret_key: "{{ warpinfra_secrets.results | selectattr('item', 'equalto', '/srv/warpinfra/secret/web_secret_key') | map(attribute='content') | list | first | b64decode | regex_replace('\\s', '') }}" 
 
 - name: create folder struct for warpinfra 
   file: 
@@ -33,6 +35,11 @@
   file: 
     path: "/srv/warpinfra/data" 
     state: "directory"
+
+- name: Konfig-Datei erstellen
+  template: 
+    src: "config.ini" 
+    dest: "/srv/warpinfra/etc/config.ini"
   
 - name: clone repo
   git: 

webserver/docker_warpinfra/templates/config.ini

+
+[debug]
+DEBUG = False
+
+[security]
+SECRET_KEY = '{{ web_secret_key }}'
+PW_RESET_TOKEN_LIFETIME = 5
+ALLOWED_HOSTS = infra.warpzone.ms
+
+[ldap]
+LDAP_HOST = ldap
+LDAP_BIND_DN = cn=admin,dc=warpzone,dc=ms
+LDAP_PASSWORD = {{ ldap_admin_pass }}
+
+LDAP_USER_SEARCH_PATH = ou=users,dc=warpzone,dc=ms
+LDAP_GROUP_SEARCH_PATH = dc=warpzone,dc=ms
+LDAP_USER_SEARCH_FILTER = (uid=%(user)s)
+
+LDAP_GROUP_IS_ACTIVE = cn=active,ou=groups,dc=warpzone,dc=ms
+LDAP_GROUP_IS_STAFF = cn=superuser,ou=groups,ou=warpauth,ou=infrastructure,dc=warpzone,dc=ms
+LDAP_GROUP_SUPERUSER = cn=superuser,ou=groups,ou=warpauth,ou=infrastructure,dc=warpzone,dc=ms
+
+
+[email]
+SMTP_HOST = smtp.warpzone.ms
+SMTP_PORT = 25
+SMTP_USERNAME = noreply@warpzone.ms
+SMTP_PASSWORD = {{ noreply_email_pass }}
+SMTP_EMAIL_FROM = infra@warpzone.ms
+SMTP_USE_TLS = True
+SUBJECT_PREFIX = ''
+
+
+[misc]
+LOG_PATH = /var/log/