IIAB/local vars.yml: Difference between revisions

From OLPC
Jump to navigation Jump to search
No edit summary
No edit summary
 
(83 intermediate revisions by the same user not shown)
Line 1: Line 1:
{{xsce}}
{{xsce}}
Below is an EXAMPLE /opt/iiab/iiab/vars/local_vars.yml derived from Tim Moody's of February 24, 2017: (for [[../6.4|IIAB 6.4]] on Raspberry Pi 3 especially!)


COMPARE the more lightweight: [[../local_vars_lite.yml|local_vars_lite.yml]], [[../local_vars_min.yml|local_vars_min.yml]]


Please also see [http://faq.iiab.io FAQ.IIAB.IO], specifically: '''[[../FAQ#What_is_local_vars.yml_and_how_do_I_customize_it.3F|"What is local_vars.yml and how do I customize it?"]]'''
To understand how and why you may want to modify local_vars.yml (to override [https://github.com/iiab/iiab/blob/master/vars/default_vars.yml default_vars.yml]) please read [https://github.com/iiab/iiab/wiki/IIAB-Architecture IIAB Architecture].


Please also ask directly on our support channels, like http://iiab.io forums, the [http://lists.laptop.org/listinfo/server-devel server-devel] mailing list, and [https://webchat.freenode.net/?channels=#schoolserver live irc chat].


Here is an example MEDIUM-sized <code>/etc/iiab/local_vars.yml</code> including a suite of about a dozen Internet-in-a-Box (IIAB) server apps &mdash; that have been well-tested on Raspberry Pi 3 and similar computers: '''https://github.com/iiab/iiab/blob/master/vars/local_vars_medium.yml'''
Or return to our Internet-in-a-Box (IIAB) [[../FAQ|Frequently Asked Questions]], within question [[../FAQ#What_is_local_vars.yml_and_how_do_I_customize_it.3F|"What is local_vars.yml and how do I customize it?"]]


<pre>
# Put variables for your installation that override defaults here


(Compare: MIN-sized with [[../local_vars_min.yml|local_vars_min.yml]] with ~6 apps, and BIG-sized with [[../local_vars_big.yml|local_vars_big.yml]] ~20 apps ...using our '''[[../FAQ#What_services_.28IIAB_apps.29_are_suggested_during_installation.3F|new comparison table]]''')
# PLEASE READ http://wiki.laptop.org/go/IIAB/local_vars.yml
# SEE EXAMPLE http://download.iiab.io/6.4/rpi/local_vars.yml
# SEE EXAMPLE http://download.iiab.io/6.4/rpi/local_vars_lite.yml


# Original Idea: branch github.com/xsce/xsce-local for your deployment


WARNING: on small Internet-in-a-Box devices, it's common to want a [[IIAB/FAQ#Is_a_.22Rapid_Power_Off.22_button_possible_for_low-electricity_environments.3F|"Rapid Power Off" button]] clickable by '''''all''''' users in a clinic or home. Conversely, schoolteachers commonly want to disable this Power Off button, changing the "allow_apache_sudo" flag to "False".
# iiab_admin_user: iiab-admin

# Obtain a password hash with: python -c 'import crypt; print crypt.crypt("<plaintext>", "$6$<salt>")'
# iiab_admin_passw_hash:

iiab_hostname: box
iiab_domain: lan

iiab_home_url: /home
host_ssid: "Internet in a Box"
host_wifi_mode: g
host_channel: 6
hostapd_secure: False
hostapd_password: changeme

dns_jail_enabled: False

# Enables "campus access" to kiwix (3000), kalite (8008) & calibre (8010 or
# 8080) on WAN side of server. See network/templates/gateway/iiab-gen-iptables
# within github.com/iiab/iiab/blob/master/roles/
services_externally_visible: True

# Make this True if client machines should have access to WAN/Internet:
iiab_gateway_enabled: False

# Make this True if you want http://box/common/services/power_off.php to work:
allow_apache_sudo: False

# 3-BASE

squid_install: True
squid_enabled: False

dansguardian_install: True
dansguardian_enabled: False

wondershaper_install: False
wondershaper_enabled: False

# 4-SERVER-OPTIONS

authserver_install: False
authserver_enabled: False

# SECURITY WARNING: See http://wiki.laptop.org/go/IIAB/Security
openvpn_install: True
openvpn_enabled: False
# The following seems necessary on CentOS:
# openvpn_cron_enabled: True
# If changing the above, remember to run "cd /opt/iiab/iiab; ./runtags openvpn"

samba_install: False
samba_enabled: False

# WARNING: Josh Dennis [April 2017] warns that CUPS printing can block Ansible
cups_install: True
cups_enabled: False

# 5-XO-SERVICES

# The 4 below are no longer actively supported.
# Please contact http://lists.laptop.org/pipermail/server-devel/ if you can help!

# Change calibre_port from 8080 to 8010 below, if you enable idmgr

#idmgr_install: False
#idmgr_enabled: False

#activity_server_install: False
#activity_server_install: False

#xo_services_install: False
#xo_services_enabled: False

#ejabberd_install: False
#ejabberd_enabled: False

# 6-GENERIC-APPS

phpmyadmin_install: False
phpmyadmin_enabled: False

elgg_install: True
elgg_enabled: False

nextcloud_install: True
nextcloud_enabled: True

wordpress_install: True
wordpress_enabled: True

dokuwiki_install: False
dokuwiki_enabled: False

# 7-EDU-APPS

# OpenStreetMap: renamed from {iiab_install, iiab_enabled} in June 2017
osm_install: True
osm_enabled: True

kiwix_serve_install: True
kiwix_serve_enabled: True

kalite_install: True
kalite_enabled: True
kalite_cron_enabled: True

# Might stall MongoDB on Power Failure: github.com/xsce/xsce/issues/879
sugarizer_install: True
sugarizer_enabled: True

calibre_install: True
calibre_enabled: True
# Change calibre_port to 8010 if you're using XO laptops needing above idmgr
calibre_port: 8080

# Change to True if you have disk space & don't mind Ansible's ~15 min delay
moodle_install: False
moodle_enabled: False

pathagar_install: False
pathagar_enabled: False

# 8-MGMT-TOOLS

schooltool_install: False
schooltool_enabled: False

debian_schooltool_install: False
debian_schooltool_enabled: False

sugar_stats_install: False
sugar_stats_enabled: False

ajenti_install: False
ajenti_enabled: False

munin_install: True
munin_enabled: True

monit_install: False
monit_enabled: False

xovis_install: False
xovis_enabled: False

vnstat_install: True
vnstat_enabled: True

awstats_install: True
awstats_enabled: True

activity_server_install: False
activity_server_enabled: False
</pre>

Latest revision as of 18:03, 22 April 2019

This IIAB XSCE content does not reflect the opinion of OLPC. These pages were created by members of a volunteer community supporting OLPC and deployments.


Please also see FAQ.IIAB.IO, specifically: "What is local_vars.yml and how do I customize it?"


Here is an example MEDIUM-sized /etc/iiab/local_vars.yml including a suite of about a dozen Internet-in-a-Box (IIAB) server apps — that have been well-tested on Raspberry Pi 3 and similar computers: https://github.com/iiab/iiab/blob/master/vars/local_vars_medium.yml


(Compare: MIN-sized with local_vars_min.yml with ~6 apps, and BIG-sized with local_vars_big.yml ~20 apps ...using our new comparison table)


WARNING: on small Internet-in-a-Box devices, it's common to want a "Rapid Power Off" button clickable by all users in a clinic or home. Conversely, schoolteachers commonly want to disable this Power Off button, changing the "allow_apache_sudo" flag to "False".

Retrieved from "http://wiki.laptop.org/mediawiki/index.php?title=IIAB/local_vars.yml&oldid=301826"