ansible-roles/roles/lemonldap_ng/templates/lemonldap-ng.ini.j2

; {{ ansible_managed }}

[all]
logLevel                   = notice
logger                     = Lemonldap::NG::Common::Logger::Syslog
userLogger                 = Lemonldap::NG::Common::Logger::Syslog
{% if llng_sessions_backend == 'file' %}
globalStorage        = Apache::Session::File
globalStorageOptions       = {                                                   \
  'Directory'      => '/var/lib/lemonldap-ng/sessions/',                         \
  'LockDirectory'  => '/var/lib/lemonldap-ng/sessions/lock/',                    \
  'generateModule' => 'Lemonldap::NG::Common::Apache::Session::Generate::SHA256' \
}
{% elif llng_sessions_backend == 'mysql' %}
{% for type in llng_session_tables.keys() | list %}
{{ type }}Storage        = Apache::Session::Browseable::MySQL
{{ type }}StorageOptions = { \
  'DataSource'     => 'DBI:mysql:database={{ llng_db_name }};host={{ llng_db_server }};mysql_enable_utf8=1{% if llng_db_ssl %};mysql_ssl=1;mysql_ssl_ca_file={{ llng_db_ssl_ca }};mysql_ssl_verify_server_cert=1{% endif +%}', \
  'UserName'       => '{{ llng_handler_db_user }}', \
  'Password'       => '{{ llng_handler_db_pass }}', \
  'TableName'      => '{{ llng_session_tables[type].name }}', \
{% if llng_session_tables[type].index is defined %}
  'Index'          => '{{ llng_session_tables[type].index }}', \
{% endif %}
  'generateModule' => 'Lemonldap::NG::Common::Apache::Session::Generate::SHA256' \
}
{% endfor %}
{% elif llng_sessions_backend == 'api' %}
globalStorage              = Lemonldap::NG::Common::Apache::Session::REST
globalStorageOptions       = { \
  'baseUrl'  => "{{ llng_api_sessions_url }}", \
{% if llng_api_user is defined and llng_api_pass is defined %}
  'user'     => "{{ llng_api_user }}", \
  'password' => "{{ llng_api_pass }}", \
  'realm'    => "{{ llng_api_realm }}" \
{% endif %}
}
{% endif %}

localSessionStorage        = Cache::FileCache
localSessionStorageOptions = {                        \
  'namespace'          => 'sessions',                 \
  'default_expires_in' => '{{ llng_session_cache }}',                      \
  'directory_umask'    => '007',                      \
  'cache_root'         => '/var/cache/lemonldap-ng',  \
  'cache_depth'        => 3                           \
}

[configuration]
{% if llng_conf_backend == 'file' %}
type                = File
dirName             = /var/lib/lemonldap-ng/conf
{% elif llng_conf_backend == 'api' %}
type                = REST
baseUrl             = {{ llng_api_conf_url }}
{% if llng_api_user is defined and llng_api_pass is defined %}
user                = {{ llng_api_user }}
password            = {{ llng_api_pass }}
realm               = {{ llng_api_realm }}
{% endif %}
proxyOptions        = { timeout => 5 }
{% elif llng_conf_backend == 'mysql' %}
type                = CDBI
dbiChain            = DBI:mysql:database={{ llng_db_name }};host={{ llng_db_server }};mysql_enable_utf8=1{% if llng_db_ssl %};mysql_ssl=1;mysql_ssl_ca_file={{ llng_db_ssl_ca }};mysql_ssl_verify_server_cert=1{% endif +%}
dbiUser             = {{ (llng_manager or llng_portal) | ternary(llng_db_user,llng_handler_db_user) }}
dbiPassword         = {{ (llng_manager or llng_portal) | ternary(llng_db_pass,llng_handler_db_pass) }}
{% endif %}
localStorage        = Cache::FileCache
localStorageOptions = {                              \
  'namespace'          => 'config',                  \
  'default_expires_in' => '600',                     \
  'directory_umask'    => '007',                     \
  'cache_root'         => '/var/cache/lemonldap-ng', \
  'cache_depth'        => 0                          \
}

{% if llng_portal %}
[portal]
staticPrefix                 = /static
templateDir                  = /usr/share/lemonldap-ng/portal/templates
languages                    = fr, en, it, es, de
forceGlobalStorageUpgradeOTT = 1
{% endif %}

{% if llng_manager %}
[manager]
protection     = {{ llng_manager_protection }}
staticPrefix   = /static
languages      = fr, en, it, es, de
templateDir    = /usr/share/lemonldap-ng/manager/htdocs/templates
enabledModules = conf, sessions, notifications, 2ndFA
{% endif %}

[handler]
https         = 1
status        = 0
hideSignature = 1