prole/infrastructure/roles/samba_ad_dc/defaults/main.yml
chrisfu 6e2d3e9011 refactor: modernize installer and monitoring setup
- Monitoring: Migrated from manual Grafana/Prometheus manifests to kube-prometheus-stack based setup in etc/init_monitoring.sh. Removed old manifest files from deploy/ and k8s/.
- Installer Core: Refactored installer with new modules for actions, environment handling, and UI screens. Enhanced Milestone logic to support advanced configuration (ArgoCD, Registry namespaces, Kerberos flags, etc.).
- Service & Init Scripts: Updated multiple initialization scripts (init_*.sh) for better integration with OpenBao, Kerberos, and the new monitoring stack. Added new scripts for Nginx Ingress, Ollama parsing, and K3D route fixes.
- Infrastructure: Enhanced Samba AD DC Ansible role with realm derivation, provisioning guidance, and group management. Updated K3s role tasks.
- Configuration: Refined default settings in conf/ to align with the new deployment architecture.
- App & Tools: Updated prole-app Swift code and prole.sh for improved environment variable handling and installation flow.
2026-02-19 21:07:39 -08:00

43 lines
1.3 KiB
YAML

---
# roles/samba_ad_dc_defaults/defaults/main.yml
# DNS
samba_ad_dc_dns_forwarders:
- 10.0.0.5
- 10.0.0.4
# Identity
# When samba_ad_dc_child_id is set (e.g., A000001), the realm/workgroup/netbios
# will be derived automatically as a child of samba_ad_dc_parent_realm.
samba_ad_dc_parent_realm: "PROLE.ORG"
samba_ad_dc_parent_netbios: "{{ samba_ad_dc_parent_realm.split('.')[0] | upper }}"
samba_ad_dc_child_id: ""
samba_ad_dc_realm: >-
{{ (samba_ad_dc_child_id | length > 0)
| ternary((samba_ad_dc_child_id | upper) ~ '.' ~ samba_ad_dc_parent_realm, samba_ad_dc_parent_realm) }}
samba_ad_dc_workgroup: >-
{{ (samba_ad_dc_child_id | length > 0)
| ternary((samba_ad_dc_child_id | upper), "PROLE") }}
samba_ad_dc_netbios_name: "{{ samba_ad_dc_workgroup }}"
samba_ad_dc_server_string: "{{ samba_ad_dc_realm }} AD DC"
# Role/services
samba_ad_dc_server_role: "active directory domain controller"
samba_ad_dc_server_services: "-smb -winbind"
# RFC2307
samba_ad_dc_rfc2307: true
# Homes
samba_ad_dc_template_homedir: "/prole/home/%U"
samba_ad_dc_template_shell: "/bin/bash"
# Shares
samba_ad_dc_sysvol_path: "/var/lib/samba/sysvol"
samba_ad_dc_netlogon_path: "/var/lib/samba/sysvol/{{ samba_ad_dc_realm | lower }}/scripts"
# K3s/Kubeadm access group
samba_kubeadm_group: "kubeadm"
samba_kubeadm_members:
- chrisfu