meta/ansible/group_vars/wetgit/main.yml
Coornhert c481ebf9e7 feat: ansible deployment setup voor dt-prod-01
- Forgejo + Redis Docker stack (wetgit-forgejo role)
- FastAPI + Celery systemd services (wetgit-app role)
- Nginx vhosts voor git.wetgit.nl en api.wetgit.nl (wetgit-nginx role)
- SSL via Let's Encrypt (certbot webroot)
- Backup script (forgejo dump, geen downtime)
- Codeberg mirror script
- Cron jobs voor backup/mirror/log cleanup
- Ansible vault voor secrets (encrypted)

Geïsoleerd van dt-platform: eigen poorten, users, directories.
2026-03-29 21:24:47 +02:00

45 lines
1.2 KiB
YAML

# WetGIT - Nederlandse wetgeving als code
# Deployment variables for dt-prod-01
#
# IMPORTANT: This server is shared with dt-platform.
# Do NOT use ports 8001 (dt-chatbot), 8200 (grimoire).
# Do NOT modify /opt/dt-chatbot, /opt/dt-skills-portal, /opt/grimoire.
# Do NOT modify the global nginx.conf — only add vhost configs.
# --- Application ---
app_name: wetgit
app_dir: /opt/wetgit
data_dir: /data/wetgit
# FastAPI backend
backend_port: 8002
backend_workers: 1
backend_host: "127.0.0.1"
# --- Domains ---
server_name: "api.wetgit.nl"
forgejo_domain: "git.wetgit.nl"
# --- Forgejo ---
forgejo_port: 3000
forgejo_data_dir: /opt/wetgit/data
forgejo_admin_user: coornhert
forgejo_admin_email: coornhert@wetgit.nl
# --- Redis (Docker, shared network with Forgejo) ---
redis_port: 6379
redis_host: "127.0.0.1"
# --- Celery ---
celery_concurrency: 2
# --- Codeberg mirror ---
codeberg_api_token: "{{ vault_codeberg_api_token | default('') }}"
# --- AgentMail ---
agentmail_api_key: "{{ vault_agentmail_api_key }}"
# --- Secrets (from vault.yml) ---
# vault_agentmail_api_key
# vault_codeberg_api_token (add when Codeberg account is ready)
# vault_forgejo_admin_password (initial admin password)