install.conf.example

# OpenVox GUI Installer Configuration
# Copy this file to install.conf and edit as needed.
# All variables are optional — defaults are used for any not specified.
#
# Usage: ./install.sh -c install.conf

# ─── General Settings ─────────────────────────────────────────
INSTALL_DIR="/opt/openvox-gui"
APP_PORT="4567"
APP_HOST="0.0.0.0"
UVICORN_WORKERS="2"
APP_DEBUG="false"

# ─── PuppetServer Settings ────────────────────────────────────
# FQDN of the PuppetServer (defaults to hostname -f)
#PUPPET_SERVER_HOST="puppet.example.com"
PUPPET_SERVER_PORT="8140"

# ─── PuppetDB Settings ───────────────────────────────────────
# FQDN of PuppetDB (defaults to hostname -f, often same as PuppetServer)
#PUPPETDB_HOST="puppetdb.example.com"
PUPPETDB_PORT="8081"

# ─── SSL Certificate Settings ────────────────────────────────
# Paths to PuppetServer SSL certs (used for PuppetDB API communication)
# Defaults assume standard Puppet SSL directory layout
#PUPPET_SSL_CERT="/etc/puppetlabs/puppet/ssl/certs/$(hostname -f).pem"
#PUPPET_SSL_KEY="/etc/puppetlabs/puppet/ssl/private_keys/$(hostname -f).pem"
#PUPPET_SSL_CA="/etc/puppetlabs/puppet/ssl/certs/ca.pem"

# ─── GUI SSL Settings (incoming HTTPS on port 4567) ────────────
# Enable SSL on the GUI itself using Puppet certs (or custom certs)
#SSL_ENABLED="false"
#SSL_CERT_PATH="/etc/puppetlabs/puppet/ssl/certs/$(hostname -f).pem"
#SSL_KEY_PATH="/etc/puppetlabs/puppet/ssl/private_keys/$(hostname -f).pem"

# ─── Puppet Directory Settings ───────────────────────────────
PUPPET_CONFDIR="/etc/puppetlabs/puppet"
PUPPET_CODEDIR="/etc/puppetlabs/code"

# ─── Authentication Settings ─────────────────────────────────
# Auth backend: "local" (username/password) or "none" (no auth)
AUTH_BACKEND="local"
ADMIN_USERNAME="admin"
# Leave empty for auto-generated password (saved to config/.credentials)
ADMIN_PASSWORD=""

# ─── Service Settings ────────────────────────────────────────
SERVICE_USER="puppet"
SERVICE_GROUP="puppet"

# ─── System Integration ──────────────────────────────────────
CONFIGURE_FIREWALL="true"
CONFIGURE_SELINUX="false"

# ─── Frontend Build Settings ───────────────────────────────────
# Build the frontend from source (requires Node.js 18+ and npm).
BUILD_FRONTEND="true"

# Automatically install Node.js 18 if not present.
# Uses dnf module (RHEL 8+) or NodeSource repo (RHEL 7, Debian/Ubuntu).
# Set to "false" if you prefer to install Node.js manually first.
INSTALL_NODEJS="true"

# ─── Proxy Settings ────────────────────────────────────────────
# The installer automatically detects proxy settings from the environment
# (HTTP_PROXY, HTTPS_PROXY, NO_PROXY). These settings override auto-detection.
# Proxy settings are applied to npm, pip, and the application runtime.
#
# Proxy host/port (without credentials):
#PROXY_HOST="proxy.example.com"
#PROXY_PORT="8080"
#
# For authenticated proxies, provide username and password:
#PROXY_USER="proxyuser"
#PROXY_PASSWORD="proxypass"
#
# Or specify full URLs directly (overrides PROXY_HOST/PORT/USER/PASSWORD):
# For authenticated proxy: http://user:pass@proxy.example.com:8080
#HTTP_PROXY=""
#HTTPS_PROXY=""
#
# Hosts to bypass proxy (comma-separated):
#NO_PROXY="localhost,127.0.0.1"
#
# Set to "true" to disable proxy auto-detection entirely:
#PROXY_DISABLED="false"

# ─── Agent Package Mirror (3.3.5-1+) ─────────────────────────────
# Configures a local OpenVox package mirror under PKG_REPO_DIR. The
# mirror is populated from yum.voxpupuli.org / apt.voxpupuli.org /
# downloads.voxpupuli.org and exposed at /packages/* on the
# puppetserver port (8140) so that agents can be installed via
# `curl ... | sudo bash` on the same port that already permits
# catalog requests through enterprise firewalls.
#
# CONFIGURE_PKG_REPO       Master switch for the whole feature
# PKG_REPO_DIR             Where to mirror packages (default /opt/openvox-pkgs)
# INSTALL_PUPPETSERVER_MOUNT  Drop a static-content mount config into
#                          /etc/puppetlabs/puppetserver/conf.d/ so
#                          /packages/* is served on port 8140.
# ENABLE_REPO_SYNC_TIMER   Enable systemd timer for nightly repo sync
# RUN_INITIAL_SYNC         Run sync-openvox-repo.sh during install.
#                          Defaults to false because the initial sync
#                          can download several GB.
CONFIGURE_PKG_REPO="true"
PKG_REPO_DIR="/opt/openvox-pkgs"
INSTALL_PUPPETSERVER_MOUNT="true"
ENABLE_REPO_SYNC_TIMER="true"
RUN_INITIAL_SYNC="false"