From bda8eaa320fba7676f39cf920a39f38b469be82b Mon Sep 17 00:00:00 2001
From: Fabio Sinibaldi <fabio.sinibaldi@isti.cnr.it>
Date: Fri, 24 Jul 2026 15:43:56 +0200
Subject: [PATCH] variables defaults and specific

---
 ansible/inventories/group_vars/all/vault.yaml | 23 +++++++-----
 .../group_vars/pangolin/mini1.yaml            |  9 +++++
 .../roles/pangolin/defaults/main.yaml         | 37 +++++++++++++++++++
 3 files changed, 60 insertions(+), 9 deletions(-)
 create mode 100644 ansible/playbooks/roles/pangolin/defaults/main.yaml

diff --git a/ansible/inventories/group_vars/all/vault.yaml b/ansible/inventories/group_vars/all/vault.yaml
index c7b0203..20a360f 100644
--- a/ansible/inventories/group_vars/all/vault.yaml
+++ b/ansible/inventories/group_vars/all/vault.yaml
@@ -1,10 +1,15 @@
 $ANSIBLE_VAULT;1.1;AES256
-63363932663263346563646533323931303266346338383735666332363465373331653562663262
-3837343464366635373863353833316532663539303938310a623664663134633033613839343835
-32646630616663323035313563376133396563666434336561363930643832663763353136336135
-6630656261323031610a626134346232383266343962393262353962613533373931656561396666
-36616666383135663133646462333134653461326634336463353234383632396461663866383836
-64316464626236663163323535643734633539653733353039336337626661373234356562653464
-62613965616138633234396236656465316663616438326265356363623037663238656464633236
-34663832343031663136643063356330366564393362643238386364373461396636363637346434
-3937
+64343439326561656337616462326636363536366438383335356662626138353862383433313832
+6636646438386161386230316262343734626639613264610a336331316539323335323235633130
+30376236363635636533663333613135306462333632396265613863643862333266346265636265
+3030353239373836610a316136353164656438613130653535666135623134616364333666323634
+63303563383031346636396133353265373765373364386266346435313364353530633664636538
+65653266643736666261383463643863666132616534316162373234323738336536323834666333
+61383730613866646339396534376462303661656438343435326535626237616263303734326664
+64356163323537633263303132643664356661643733313265326233363533313932333964303637
+33326264333034623334656339316233343034623034396432346661623430333435373239653736
+63613437346266393039343435346139313465376630623032353761306562623862663334326364
+62663363633131613362373237333431316530336362303633623932383239633664633562326336
+32633363353131396361376438616132393732613330313032656238373838323237636438663630
+66663436613963626361336631303963346365303464656334633437373966643839373532616632
+6131353533393865666562313639363536653564386262373735
diff --git a/ansible/inventories/group_vars/pangolin/mini1.yaml b/ansible/inventories/group_vars/pangolin/mini1.yaml
index aceaaee..20664df 100644
--- a/ansible/inventories/group_vars/pangolin/mini1.yaml
+++ b/ansible/inventories/group_vars/pangolin/mini1.yaml
@@ -3,3 +3,12 @@ pangolin_dashboard_url: "https://pangolin.hassallab.it"
 pangolin_base_domain: "hassallab.it"
 pangolin_secret: "{{ pangolin_crypted_secret }}"
 pangolin_admin_email: "hassallah@mail.com"
+
+pangolin_gerbil_subnet_group: "10.42.0.0/16"
+
+# Email (SMTP) settings
+pangolin_email_smtp_host: "mail.com"
+pangolin_email_smtp_port: 587
+pangolin_email_smtp_user: "pango.lin@mail.com"
+pangolin_email_smtp_pass: "{{ pangolin_mail_crypted_password }}"
+pangolin_email_no_reply: "no-reply@mail.com"
\ No newline at end of file
diff --git a/ansible/playbooks/roles/pangolin/defaults/main.yaml b/ansible/playbooks/roles/pangolin/defaults/main.yaml
new file mode 100644
index 0000000..6e2e2c2
--- /dev/null
+++ b/ansible/playbooks/roles/pangolin/defaults/main.yaml
@@ -0,0 +1,37 @@
+---
+# Derived Variables
+pangolin_cors_origin: "{{ pangolin_dashboard_url }}"
+
+# Logging
+pangolin_log_level: "info"
+
+# CORS
+pangolin_cors_credentials: false
+
+# Cert Resolver for Pangolin config
+pangolin_cert_resolver: "letsencrypt"
+
+# Gerbil (WireGuard) settings
+pangolin_gerbil_start_port: 51820
+pangolin_gerbil_use_subdomain: false
+pangolin_gerbil_block_size: 24
+pangolin_gerbil_site_block_size: 30
+pangolin_gerbil_subnet_group: "100.89.137.0/20"
+
+# Rate limits
+pangolin_rate_limit_window_minutes: 1
+pangolin_rate_limit_max_requests: 500
+
+# Email (SMTP) settings
+pangolin_email_smtp_host: "smtp.example.com"
+pangolin_email_smtp_port: 587
+pangolin_email_smtp_user: "user@example.com"
+pangolin_email_smtp_pass: "changeme-email-password"
+pangolin_email_no_reply: "no-reply@example.com"
+
+# Feature flags
+pangolin_flag_require_email_verification: false
+pangolin_flag_disable_signup_without_invite: false
+pangolin_flag_disable_user_create_org: false
+pangolin_flag_allow_raw_resources: true
+pangolin_flag_allow_base_domain_resources: true
\ No newline at end of file