#
# This is a inventory with secure passwords and apikeys generated for you.
# Don't push this to a public git repository.
# You can also use Ansible Vault, or similar.
#
# Other external apikeys should be requested and configured (like Google Maps).
#

[all:vars]

# The first time you deploy CAS it will try to create an admin user with this email
# So modify it to some different email/password prior to deploy CAS auth system:
cas_first_admin_email=support@<%= LA_domain %>
#
# This admin user will be generated with the random password: <%= LA_passwords[23] %>
# but hashed, that can be easy modified with a different password with:
#   htpasswd -bnBC 10 "" somedifferentpassword | tr -d ':\n' | sed 's/$2y/$2a/'
# htpasswd in in apache2-utils package, so: sudo apt install apache2-utils
cas_first_admin_bcrypt_password=<%= LA_admin_bcrypt_password %>
# prior to exec CAS deployment for the first time.
#
# Random uuid used for email validation. It can be created with  'uuidgen' or similar:
cas_first_admin_temp_auth_key=<%= LA_apikeys[1] %>
# But this first admin user will not require email validation.

mysql_root_password=<%= LA_passwords[13] %>
postgresql_password=<%= LA_passwords[10] %>
mongodb_root_password=<%= LA_passwords[12] %>

collectory_db_password=<%= LA_passwords[6] %>
image_service_db_password=<%= LA_passwords[9] %>
specieslist_db_password=<%= LA_passwords[15] %>
webapi_db_password=<%= LA_passwords[17] %>
alerts_db_password=<%= LA_passwords[19] %>
doi_db_password=<%= LA_passwords[20] %>
logger_db_password=<%= LA_passwords[11] %>
ecodata_password=<%= LA_passwords[25] %>

# LA API keys
#
# This should be generated by an LA admin in:
# <%= LA_urls_prefix %><%= LA_cas_url %>/apikey
# More info about how to generate them:
# https://github.com/AtlasOfLivingAustralia/documentation/wiki/API-Keys#ala-new-keys

# Used in several (specieslist, biocache, sandbox).
api_key = <%= LA_apikeys[2] %>
registry_api_key = <%= LA_apikeys[2] %>

# Used in bie and biocache-hub
bie_index_api_key = <%= LA_apikeys[3] %>

# Used in biocache-hub
biocache_api_key = <%= LA_apikeys[4] %>
image_service_apiKey = <%= LA_apikeys[5] %>

# Used only in bie-hub
speciesList_api_key = <%= LA_apikeys[6] %>

# Used in biocache service if you are using the DOI service
doi_service_apiKey = <%= LA_apikeys[7] %>

# Used in biocache service if you are using the alerts service
alerts_apikey = <%= LA_apikeys[8] %>

# Used by spatial-hub and spatial-service to allow task creation
spatial_service_api_key=<%= LA_apikeys[10] %>

# Used by spatial-hub and spatial-service to allow task creation
spatial_service_api_key=<%= LA_apikeys[10] %>
spatial_service_service_key=<%= LA_apikeys[10] %>
spatial_service_slave_key=<%= LA_apikeys[10] %>

# used in pipelines to access collectory and images API
pipelines_api_key = <%= LA_apikeys[11] %>

data_quality_api_key = <%= LA_apikeys[12] %>
dataquality.apiKey = <%= LA_apikeys[12] %>
dq_db_password = <%= LA_passwords[24] %>

ecodata_api_key = <%= LA_apikeys[13] %>

# External old API access to collectory to lookup collections/institutions, etc
# Used in collectory, userdetails, and other (sandbox, fieldscapture).
# In disuse by new software versions
api_key = <%= LA_apikeys[9] %>

# Other (external) api keys.
# More info about how to generate them:
# https://github.com/AtlasOfLivingAustralia/documentation/wiki/API-Keys#non-ala-keys
google_apikey  = get-a-google-api-key
google_api_key = get-a-google-api-key
google_apiKey = get-a-google-api-key
google_maps_api_key = get-a-google-api-key

# Trove API Key (used by species)
trove_api_key = get-an-api-key
# BHL API key (used also by species)
bhl_api_key = get-an-api-key
# Maxmind (the company providing the geoip database)
maxmind_account_id = get-a-maxmind-id
maxmind_license_key = get-a-maxmind-key
# JournalMap (used by spatial-service)
journalmap_api_key = get-a-journalmap-api-key

# Used by ecodata
scistarter_api_key= get-a-scistarter-api-key

[geoserver:vars]

# For now we don't set/change the geoserver default password (it is 'geoserver')
# via ansible because it does not works well:
# https://github.com/AtlasOfLivingAustralia/ala-install/issues/556
# Change it later manually:
# geoserver_password=<%= LA_passwords[8] %>
layers_db_password=<%= LA_passwords[10] %>
postgresql_password=<%= LA_passwords[10] %>

[geonetwork:vars]

# layers and pg should share the same password as by default their share the same user
geonetwork_db_password=<%= LA_passwords[10] %>
geonetwork_password=<%= LA_passwords[7] %>
layers_db_password=<%= LA_passwords[10] %>
postgresql_password=<%= LA_passwords[10] %>

[spatial-service:vars]

layers_db_password=<%= LA_passwords[10] %>
postgresql_password=<%= LA_passwords[10] %>

[cas-servers:vars]

mysql_root_password=<%= LA_passwords[13] %>
mongodb_root_password=<%= LA_passwords[12] %>
ticket_registry_db_password=<%= LA_passwords[16] %>
apikey_db_password=<%= LA_passwords[0] %>
bootadmin_password=<%= LA_passwords[1] %>
cas_db_password=<%= LA_passwords[2] %>
cas_flyway_password=<%= LA_passwords[3] %>
cas_services_password=<%= LA_passwords[4] %>
cas_tickets_password=<%= LA_passwords[5] %>
user_store_db_encoding_salt=<%= LA_passwords[18] %>
cas_audit_password=<%= LA_passwords[21] %>
user_store_db_password=<%= LA_passwords[22] %>
user_create_password=<%= LA_passwords[24] %>
cas_spring_session_password=<%= LA_passwords[27] %>

[ecodata:vars]

es_api_basic_auth_password=<%= LA_passwords[26] %>

[ecodata-reporting:vars]

es_api_basic_auth_password=<%= LA_passwords[26] %>