---
# See https://github.com/antevens/letsencrypt-freeipa for the letsencrypt hints
ipa_server_install: False
ipa_server_use_dns: True

ipa_server_domain: example.org
ipa_server_realm: '{{ ipa_server_domain | upper }}'

ipa_server_packages:
  - ipa-server

ipa_server_dns_packages:
  - ipa-server-dns

# Comando di installazione
# installazione di rng-tools
ipa_installation_options: "--ca-cert-file=/etc/pki/ipa/{{ ipa_letsencrypt_ca_filename }} --dirsrv-cert-file=/etc/pki/ipa/cert.pem --dirsrv-cert-file=/etc/pki/ipa/cert-key.pem --dirsrv-pin='' --http-cert-file=/etc/pki/ipa/cert.pem --http-cert-file=/etc/pki/ipa/cert-key.pem --http-pin='' --no-pkinit -r {{ ipa_server_realm }} -n {{ ipa_server_domain }} -a {{ ipa_admin_password }} -p {{ ipa_manager_password }} --hostname={{ ansible_fqdn }} -U --setup-dns --no-forwarders --no-reverse --zonemgr=s2i2s-master@isti.cnr.it"
 
ipa_ssl_letsencrypt_managed: True
ipa_letsencrypt_ca_filename: lets-encrypt-x3-cross-signed.pem