forked from isard-vdi/isard
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathisardvdi.cfg.example
175 lines (152 loc) · 6.13 KB
/
isardvdi.cfg.example
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
# Isard main config v0.1
## Hostname can be whatever you want to identify this host in
## the system paths. If you have a domain set it here
HOSTNAME=localhost
## Frontend Administration Button
## With this variable you can control if there is a button in the simplified
## interface (frontend) to go to administration login.
## True: show button
## False (or variable not defined): don't show the button
FRONTEND_SHOW_ADMIN_BTN=True
## Generate your own!:
## openssl rand -base64 32
WEBAPP_SESSION_SECRET=xq0Z3MP5ujxrQxtMGxgPiijH9xpuxkyP04R6At/V+g4=
## Initial WEB admin user password
WEBAPP_ADMIN_PWD=IsardVDI
# WEB CERTIFICATES
## You can use your own certificates if you concatenate into
## /opt/isard/certs/default/chain.pem
## You can let isard generate autosigned certs (not recommended as
## html5 viewers will not work.
## Or you can let isard generate letsencrypt certs for your domain.
## For this option to work be sure the domain points to this IP.
## To avoid using letsencrypt set it to defaults enpty.
## Note: if this only an hypervisor you should only set VIDEO_LETSENCRYPT
## variables down this file.
#WEBAPP_LETSENCRYPT_DNS=your.domain.com
WEBAPP_LETSENCRYPT_DNS=
WEBAPP_LETSENCRYPT_EMAIL=
# GRAFANA
## Set grafana URl to your domain or IP
#GRAFANA_URL=your.domain.com
GRAFANA_URL=localhost
# TELEGRAM BOT ALERTS
## TOKEN: https://core.telegram.org/bots#6-botfather
TELEGRAM_BOT_TOKEN=
## CHAT_ID: Add your bot to a group and get the chat_id from
## https://api.telegram.org/bot<YourBOTToken>/getUpdates response
TELEGRAM_BOT_CHAT_ID=
##################################################################
##################################################################
## DO NOT EDIT FROM HERE UNLESS YOU KNOW WHAT YOU ARE DOING !!! ##
##################################################################
##################################################################
# DOCKER IMAGES
# Image prefix that could include registry and repository
DOCKER_IMAGE_PREFIX=registry.gitlab.com/isard/isardvdi/
# Image tag that could be tags or branches from the git repository
DOCKER_IMAGE_TAG=v2.0.0-rc1
# Logging level
LOG_LEVEL=INFO
# HYPERVISOR
## Uncomment to map host interface name inside hypervisor container.
## If static vlans are commented then hypervisor will initiate an
## auto-discovery process. The discovery process will last for 260
## seconds and this will delay the hypervisor from being available.
## So it is recommended to set also the static vlans.
#HYPERVISOR_HOST_TRUNK_INTERFACE=
## This environment variable depends on previous one. When setting
## vlans number comma separated it will disable auto-discovery and
## fix this as forced vlans inside hypervisor.
#HYPERVISOR_STATIC_VLANS=
# Hypervisor video proxy
## Only set this to different LETSENCRYPT domain if you are using
## two different dns for web & hypervisor on the same host and you
## want to use letsencrypt!
## If hypervisor domain is different from web domain then you can use
## your own certificates concatenated in /opt/isard/certs/default/chain.pem
## or set here your hypervisor domain name to let isard generate
## letsencrypt certificate
## Do not set if you don't know what you are doing.
## Default empty
## Set only this environment variables if you are setting an standalone
## hypervisor.
# VIDEO_LETSENCRYPT_DNS=your.video.domain.com
VIDEO_LETSENCRYPT_DNS=
VIDEO_LETSENCRYPT_EMAIL=
# ENGINE config
###########################################################
## Main database reacheable host name
## Defaults: isard-db
RETHINKDB_HOST=isard-db
RETHINKDB_PORT=28015
RETHINKDB_DB=isard
# WEBAPP config
###########################################################
## Main database reacheable host name
## Defaults: isard-db
## Infrastructure: set it in host /etc/hosts: <IP> isard-db
WEBAPP_HOST=isard-webapp
WEBAPP_RETHINKDB_HOST=isard-db
WEBAPP_RETHINKDB_PORT=28015
WEBAPP_RETHINKDB_DB=isard
# BACKEND config
###########################################################
BACKEND_HOST=localhost
BACKEND_REDIS_HOST=isard-redis
BACKEND_REDIS_PASSWORD=
BACKEND_AUTH_AUTOREGISTRATION=true
## Github Login
# Create your Github OAuth credentials at https://github.com/settings/developers
# Homepage URL: https://domain.tld
# Authorization callback URL: https://domain.tld/callback/github
# Change BACKEND_HOST to domain.tld
# BACKEND_AUTH_GITHUB_HOST=api.github.com
# BACKEND_AUTH_GITHUB_ID=id
# BACKEND_AUTH_GITHUB_SECRET=secret
## Google Login
# Create your Google OAUTH credentials at https://console.developers.google.com/apis/credentials
# Authorized redirect URIs: https://domain.tld/callback/google
# Change BACKEND_HOST to domain.tld
# BACKEND_AUTH_GOOGLE_ID=id
# BACKEND_AUTH_GOOGLE_SECRET=secret
# BACKEND_AUTH_SAML_CERT_PATH=/keys/saml.cert
# BACKEND_AUTH_SAML_KEY_PATH=/keys/saml.key
# BACKEND_AUTH_SAML_IDP_URL=https://<yoursamlserver
# BACKEND_AUTH_SAML_IDP_METADATA_PATH=/metadata/shibboleth.xml
# BACKEND_AUTH_SAML_CALLBACK_URL=https://<yourdomain>
# BACKEND_AUTH_SAML_ATTR_ID=uid
# BACKEND_AUTH_SAML_ATTR_NAME=displayName
BACKEND_ISARD_API_HOST=isard-api
BACKEND_MANTEINANCE_ADMINS=admin
# VIDEO config
###########################################################
## Reacheable ip/dns from isard-debug to host holding video haproxy.
## Only to gather statistics
VIDEO_HAPROXY_HOST=isard-video
VIDEO_PORT=443
VIDEO_STATS_PORT=8889
## Squid video proxy acls
### Comma separated fields of hypervisor hostnames allowed to be proxied.
### Must be the same as the Viewer PROXY name in web ui hypervisor config.
VIDEO_HYPERVISOR_HOSTNAMES=isard-hypervisor
VIDEO_HYPERVISOR_PORTS=5900-6899
# GRAFANA Config
###########################################################
GRAFANA_HOST=isard-grafana
## Path as seen from isard-portal haproxy
GRAFANA_PATH=/monitor/
## Port as defined in isard-portal haproxy
GRAFANA_PORT=443
# STATS host
###########################################################
# This will identify all stats from this host in grafana
STATS_HOSTNAME=localhost
# This must be set to your grafana server hostname
STATS_SERVER=isard-grafana
## Stats database
STATS_RETHINKDB_HOST=isard-db
STATS_RETHINKDB_PORT=28015
STATS_RETHINKDB_DB=isard