---
# Copyright 2016, Rackspace US, Inc.
# Copyright 2017, SUSE LINUX GmbH.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

keystone_distro_packages:
  - ca-certificates
  - cron
  - git-core
  - openssh
  - rsync

keystone_devel_distro_packages:
  - cyrus-sasl-devel
  - libffi-devel
  - libopenssl-devel
  - libxml2-devel
  - libxslt-devel
  - openldap2-devel
  - systemd-devel
  - pkg-config
  - python3-devel

keystone_service_distro_packages:
  - openstack-keystone
  - uwsgi
  - uwsgi-python3

keystone_apache_distro_packages:
  - apache2
  - apache2-utils
  - apache2-mod_proxy_uwsgi

keystone_mod_proxy_uwsgi_distro_packages:
  - apache2-mod_uwsgi

keystone_nginx_distro_packages:
  - nginx

keystone_idp_distro_packages:
  - xmlsec1

keystone_sp_distro_packages:
  - "{{ keystone_sp_apache_mod_auth_openidc | ternary('apache2-mod_auth_openidc',
                                                      'shibboleth-sp') }}"

keystone_developer_mode_distro_packages:
  - "{{ (ansible_distribution_version is version ('42', '>=')) | ternary('patterns-openSUSE-devel_basis', 'patterns-devel-base-devel_basis') }}"

keystone_oslomsg_amqp1_distro_packages:
  - cyrus-sasl
  - cyrus-sasl-plain
  - cyrus-sasl-digestmd5

keystone_apache_default_sites:
  - "/etc/apache2/conf.d/gitweb.conf"

keystone_apache_conf: "/etc/apache2/httpd.conf"
keystone_apache_default_log_folder: "/var/log/apache2"
keystone_apache_default_log_owner: "root"
keystone_apache_default_log_grp: "root"
keystone_apache_security_conf: "{{ keystone_apache_conf }}"

keystone_apache_configs:
  - { src: "keystone-ports.conf.j2", dest: "/etc/apache2/conf.d/ports.conf" }
  - { src: "keystone-httpd.conf.j2", dest: "/etc/apache2/conf.d/keystone-httpd.conf" }
  - { src: "keystone-httpd-mpm.conf.j2", dest: "/etc/apache2/mod_{{ keystone_httpd_mpm_backend }}.conf" }

keystone_apache_modules:
  - name: "authz_host"
    state: "present"
  - name: "access_compat"
    state: "present"
  - name: "version"
    state: "present"
  - name: "ssl"
    state: "{{ (keystone_ssl | bool) | ternary('present', 'absent') }}"
  - name: "shib2"
    state: "{{ keystone_sp_apache_mod_shib | ternary('present', 'absent') }}"
  - name: "auth_openidc"
    state: "{{ keystone_sp_apache_mod_auth_openidc | ternary('present', 'absent') }}"
  - name: "proxy"
    state: "present"
  - name: "proxy_http"
    state: "present"
  - name: "proxy_fcgi"
    state: "present"
  - name: "proxy_wstunnel"
    state: "present"
  - name: "proxy_uwsgi"
    state: "present"
  - name: "headers"
    state: "present"
# This can be enabled when Apache2.5+ is available
#  - name: "mod_journald"
#    state: "present"

keystone_nginx_conf_path: 'conf.d'

keystone_system_service_name: apache2

keystone_uwsgi_bin: '/usr/sbin'

keystone_sshd: sshd