Replace config files

inventory/host_vars/odoo-saas.local/config.yml

+---
+# In development environment a user with same name as your system user will be created
+development_user: "{{ lookup('env', 'USER') }}"
+
+system_administrators:
+  - name: odoo
+    ssh_key: "~/.ssh/id_rsa.pub"
+    state: present
+  - name: "{{ development_user }}"
+    ssh_key: "~/.ssh/id_rsa.pub"
+    state: present
+
+developers: []
+
+# Let's Encrypt conf
+certificate_authority_email:
+
+# Set 'development_environment' to "true" to skip SSL and nginx tasks
+development_environment: true
+
+# Proxy and binding settings
+odoo_role_odoo_http_interface: "0.0.0.0"
+odoo_role_odoo_proxy_mode: false
+
+odoo_role_odoo_dbs:
+  - saas
+  - ambtu
+
+odoo_role_test_dbs:
+  - test
+
+odoo_role_dbfilter_enabled: true
+
+# Disable backups
+backups_role_enabled: false
+
+# Disable monitoring
+monitoring_enabled: false
+
+# Secrets
+odoo_role_odoo_db_admin_password: 1234

inventory/host_vars/saas.coopdevs.org/config.yml

+---
+system_administrators:
+  - name: daniel
+    ssh_key: "{{ inventory_dir }}/../pub_keys/daniel.pub"
+    state: present
+  - name: sergi
+    ssh_key: "{{ inventory_dir }}/../pub_keys/sergi.pub"
+    state: present
+  - name: cesar
+    ssh_key: "{{ inventory_dir }}/../pub_keys/cesar.pub"
+    state: present
+  - name: daniquilez
+    ssh_key: "{{ inventory_dir }}/../pub_keys/daniquilez.pub"
+    state: present
+  - name: kon
+    ssh_key: "{{ inventory_dir }}/../pub_keys/kon.pub"
+    state: present
+  - name: jordi
+    ssh_key: "{{ inventory_dir }}/../pub_keys/jordi.pub"
+    state: present
+  - name: lai
+    ssh_key: "{{ inventory_dir }}/../pub_keys/lai.pub"
+    state: present
+
+developers: []
+
+# Let's Encrypt conf
+certificate_authority_email: "info@coopdevs.org"
+
+# Enable backups
+backups_role_enabled: true
+
+monitoring_enabled: true
+monitoring_nexporter_enabled: true
+monitoring_promtail_enabled: false
+monitoring_postgres_exporter_enabled: true
+monitoring_postgres_exporter_pg_user: monitor
+monitoring_postgres_exporter_pg_port: 5432
+monitoring_backup_exporter_enabled: true
+
+# Set 'development_environment' to "true" to skip SSL and nginx tasks
+development_environment: false
+
+# Proxy and binding settings
+odoo_role_odoo_http_interface: "127.0.0.1"
+odoo_role_odoo_proxy_mode: true
+
+odoo_role_enable_dbfilter_from_header: true
+
+odoo_role_odoo_dbs:
+  - saas
+  - ambtu
+
+domains:
+  - saas.coopdevs.org
+  - odoo.ambtu.coop
+
+# Firewall basic configuration
+firewall_enabled: True
+firewall_allowed_tcp_ports:
+  - "22"  # for SSH
+  - "80"  # for HTTP. Nginx redirects it to 443
+  - "443" # for HTTPS.
+
+basic_auth_users:
+  - { 'path': '/etc/odoo/.htpasswd', 'name': odoo, 'password': '{{ basic_auth_api_password }}' }
+  - { 'path': '/etc/nginx/.pexporter.htpasswd', 'name': 'pexporter', 'password': '{{ basic_auth_user_pexporter_password }}' }
+  - { 'path': '/etc/nginx/.bexporter.htpasswd', 'name': 'bexporter', 'password': '{{ basic_auth_user_bexporter_password }}' }

inventory/host_vars/saas.coopdevs.org/secrets.yml

+---
+# Password to manage Odoo databases
+odoo_role_odoo_db_admin_password: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          66626362613532656263643835366339323961366239653737636265303264363932306433343666
+          3932623666333436346562346165306162353331343364630a333839306530353136333765343766
+          33316539363039336336393030393566663939623730653937336130343630633536376239303930
+          6532613165393062660a636435356433343137623436313531343963393137303232643836363362
+          3930
+
+# Backups
+backups_role_postgresql_user_password: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          34353166313432663532636437363466613366346235333265663537393737396433346630353765
+          3934376230346661336362656332623562363039343232350a623465656664353330386464623163
+          39326631663266656136353266306139336462316663396433633239616662303032613539303437
+          3164343831313661610a353836303939333934383635393538303137653636643531376639623130
+          6261
+
+backups_role_restic_repo_password: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          64663633323765323266643033323966383465663034643634313364633638323235393862346161
+          6333623865613764333934303832366230613531316165300a333637653463386636646431323532
+          64343663613765643832386462633832333635383139613833623266363265653863363262303337
+          6231613831363366370a323265353562363235653065653866336365653730616337376363626163
+          6334
+
+backups_role_restic_repo_url: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          32383030303735313933366336343262633137396130616466316533386566633330376335376234
+          6637336435636530663365373034646533356465373137370a653935353837333836343365363933
+          66373563656232616562636332396266353031613564636333313839376339343166316165646165
+          3935356538616136640a336461393531636237643931623130313161393064653634323839363366
+          64303133313431653262653030623135366666643266356636316134383736373531
+
+backups_role_b2_app_key_id: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          65333966643761663263346432376463363665396632643962396235613634653564663630363037
+          3930346162643037366631343232373338636332326435650a616165363735323761613733316131
+          33303463383030356136336163303364653663323032653936383036633237653732613265643062
+          3634393966613133300a366136613938653239336361363863633762663366643738643231373336
+          63633564353064376637326438383333636135663466653234623131363863346634
+
+backups_role_b2_app_key: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          37626336383865666262376334666632356638303439336135393537663537376539386638666164
+          6133653738386666643337666334663264353630646564380a393037343738383437386130343438
+          65663034336332356364316565336565393537376165336164383961363732623564653134633335
+          3066356536333262320a363864653231613863393739396261376363333563353736376262383530
+          33616136333839336237656363656635613333633365326537636563303839323264
+
+basic_auth_api_password: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          61326438666562666531326632346631333336376234393830343330653939653738326136393835
+          6562306661383563363466393635306231633765333436320a336364636336346331313936336334
+          32356465646236623761306661656639623630663936613161333733646638623161353236636264
+          3633646165376634610a386466653136636334663037326463626661646663653364633934383232
+          3736
+
+basic_auth_user_pexporter_password: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          35386464653136616161393833356164663634663637323965373338303432306139323231363535
+          6362376334626230366531373239356565353964396264340a343266373765613737633933363537
+          31623532623239653263303037663832663937386361323061613862363832326436323261393634
+          3030353832383134610a623164656365626131653939616434333566626463333761396135356331
+          6330
+
+monitoring_postgres_exporter_pg_password: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          66626332363831346439643937636664343337623332623434346265663665326232626661306565
+          3965616665393338346566366134663935643163303637340a306331313730623861303537313764
+          39343363376264623638646666306661366665386164343835373263323037333863303633646132
+          3234636438353862610a376364376139356363633765343566326665643437656561333236356239
+          6532
+
+basic_auth_user_bexporter_password: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          63396131323033393838323261393739386530393463313530343431306336623863386132396237
+          3463376332373835633166303665616463393930313932610a346261326236313263343730386566
+          66656235623635623233613165326463313364623338616631366137343965316530333632643362
+          3065323034613962330a626331363863613434393566646135636234316539326332633733653933
+          6339