veza/ansible/roles/sonarqube/defaults/main.yml
2025-12-03 22:56:50 +01:00

66 lines
2.3 KiB
YAML

---
# file: roles/sonarqube/defaults/main.yml
sonarqube_update_sonarqube_now: false
sonarqube_ldap: true
sonarqube_haproxy: true
sonarqube_download_url: "https://binaries.sonarsource.com/Distribution/sonarqube/sonarqube-{{ sonarqube_version }}.zip"
sonarqube_postgres_password: "{{ lookup('hashi_vault', 'secret=talas-kv/data/' + host_vars_location + '/' + ansible_hostname)['sonarqube_postgres_password'] }}"
sonarqube_ce_jmx_config: >-
-Dcom.sun.management.jmxremote=true
-Djava.rmi.server.hostname={{ ansible_host }}
-Dcom.sun.management.jmxremote.port=12345
-Dcom.sun.management.jmxremote.rmi.port=12345
-Dcom.sun.management.jmxremote.ssl=false
-Dcom.sun.management.jmxremote.authenticate=true
-Dcom.sun.management.jmxremote.password.file=/opt/sonarqube/stateless/conf/jmxremote.password
-Dcom.sun.management.jmxremote.access.file=/opt/sonarqube/stateless/conf/jmxremote.access
sonarqube_web_jmx_config: >-
-Dcom.sun.management.jmxremote=true
-Djava.rmi.server.hostname={{ ansible_host }}
-Dcom.sun.management.jmxremote.port=12346
-Dcom.sun.management.jmxremote.rmi.port=12346
-Dcom.sun.management.jmxremote.ssl=false
-Dcom.sun.management.jmxremote.authenticate=true
-Dcom.sun.management.jmxremote.password.file=/opt/sonarqube/stateless/conf/jmxremote.password
-Dcom.sun.management.jmxremote.access.file=/opt/sonarqube/stateless/conf/jmxremote.access
sonarqube_jmx_user_list:
- name: "monitoring"
right: "readonly"
password: "{{ lookup('hashi_vault', 'secret=talas-kv/data/group_vars/all')['zabbix_jmx_monitoring_password'] }}"
- name: "operator"
right: "readwrite"
password: "{{ lookup('hashi_vault', 'secret=talas-kv/data/services/veza')['tomcat_jmx_operator'] }}"
pg_users:
- name: "sonarqube"
attrib: LOGIN
password: "{{ sonarqube_postgres_password }}"
pg_databases:
- name: sonarqube
owner: sonarqube
java_home: "/opt/{{ jvm_latest_17_directory_name }}"
jvm_url_list:
- "https://internal-resources-1.talas.com/openjdk/{{ jvm_latest_17_archive_name }}"
haproxy_frontend:
default_backend: "sonarqube"
haproxy_backend:
- name: "sonarqube"
server:
- name: "myself"
fqdn: "127.0.0.1"
port: "9000"
haproxy_timeout_client: "20m"
haproxy_timeout_server: "20m"
haproxy_https_monitoring:
- "{{ sonarqube_url }}"