main.yml

---

manager_packages:
  - ubicast-skyreach
  - ubicast-skyreach-runtime

manager_testing: false
manager_mail: dev-mediaserver@ubicast.eu
manager_hostname: "{{ envsetup_cm_server_name }}"
manager_default_email_sender: "noreply@{{ manager_hostname }}"
manager_email_sender: "{{ envsetup_email_sender | default(manager_default_email_sender, true) }}"
manager_proxy_http: "{{ envsetup_proxy_http }}"

manager_fail2ban_enabled: "{{ envsetup_fail2ban_enabled | d(true) }}"
manager_f2b_filter:
  name: manager
  content: |
    [INCLUDES]
    before = common.conf
    [Definition]
    failregex = INFO Wrong credentials given to login\. IP: <HOST>, username: \S+\.$
                INFO Wrong crendentials given to login\. IP: <HOST>, username: \S+\.$
    ignoreregex =
manager_f2b_jail:
  name: manager
  content: |
    [manager]
    logpath = /home/skyreach/.skyreach/logs/skyreach.log
    enabled = {% if manager_fail2ban_enabled | bool %}true{% else %}false{% endif %}

manager_firewall_enabled: true
manager_ferm_rules_filename: manager
manager_ferm_input_rules:
  - proto:
      - tcp
    dport:
      - 80
      - 443
  - saddr: "{{ groups['all'] | map('extract', hostvars, ['ansible_default_ipv4', 'address']) | list }}"
    proto:
      - tcp
    dport:
      - 3142
manager_ferm_output_rules: []
manager_ferm_global_settings:

...