all.yml

---
# Use python3 interpreter
ansible_python_interpreter: "/usr/bin/python3"
odoo_role_python_version: 3.7.12
# Odoo vars
odoo_role_odoo_core_modules_dict:
  shared:
    - account
    - account_analytic_default
    - account_asset
    - account_bank_statement_import
    - account_cancel
    - account_invoicing
    - analytic
    - auth_crypt
    - auth_signup
    - base
    - base_automation
    - base_iban
    - base_import
    - base_setup
    - base_vat
    - base_vat_autocomplete
    - contacts
    - decimal_precision
    - document
    - mass_mailing
    - mass_mailing_crm
    - product
    - sale_management
    - web
    - web_diagram
    - web_kanban_gauge
    - web_planner
    - web_settings_dashboard
    - web_tour
  demo:
    - hr
    - hr_attendance
    - hr_expense
    - hr_timesheet
  sm:
    - hr
    - hr_attendance
    - hr_expense
    - hr_timesheet
    - l10n_es
  sm-test:
    - hr
    - hr_attendance
    - hr_expense
    - hr_timesheet
    - l10n_es
  alterna:
    - l10n_es
  alterna-test:
    - l10n_es
  ekiwi:
    - l10n_es
  ekiwi-test:
    - l10n_es
  partago:
    - l10n_multilang
  partago-test:
    - l10n_multilang

odoo_role_odoo_community_modules_dict:
  shared:
    - account_banking_mandate
    - account_banking_pain_base
    - account_banking_sepa_credit_transfer
    - account_banking_sepa_direct_debit
    - account_due_list
    - account_financial_report
    - account_move_attachment
    - account_payment_mode
    - account_payment_order
    - account_payment_partner
    - account_payment_return
    - account_payment_return_import_iso20022
    - agreement
    - agreement_legal
    - agreement_sale
    - analytic_tag_dimension
    - auto_setup_bank_account_number
    - base_bank_from_iban
    - base_location_geonames_import
    - base_rest
    - base_technical_features
    - bi_sql_editor
    - bi_view_report
    - community_maps
    - connector
    - contract
    - contract_sale_invoicing
    - contract_variable_quantity
    - crm_claim
    - crm_claim_code
    - dbfilter_from_header
    - document_page
    - document_page_project
    - helpdesk_mgmt
    - helpdesk_mgmt_project
    - helpdesk_mgmt_timesheet
    - helpdesk_mgmt_timesheet_time_control
    - helpdesk_motive
    - helpdesk_type
    - mail_activity_board
    - mail_activity_done
    - mandate_partner_bank_creation
    - mis_builder
    - mis_builder_budget
    - partner_contact_access_link
    - partner_contact_birthdate
    - partner_contact_gender
    - partner_firstname
    - product_analytic
    - project_category
    - project_department
    - project_description
    - project_list
    - project_parent_task_filter
    - project_task_add_very_high
    - project_task_dependency
    - project_task_material
    - project_template
    - project_timeline
    - project_timeline_task_dependency
    - queue_job
    - report_xlsx
    - web_environment_ribbon
    - web_favicon
    - web_no_bubble
    - web_responsive
    - web_searchbar_full_width
  demo:
    - crm_meeting_commercial_partner
    - crm_phonecall
    - crm_phonecall_planner
    - crm_sale_marketing
    - easy_my_coop
    - easy_my_coop_api
    - knowledge
    - sm_carsharing_structure
    - sm_carsharing_structure_sommobilitat
    - sm_connect
    - sm_contributions
    - sm_lopd
    - sm_maintenance
    - sm_member_geolocation
    - sm_partago_accounting
    - sm_partago_db
    - sm_partago_invoicing
    - sm_partago_invoicing_rest_api
    - sm_partago_tariffs
    - sm_partago_usage
    - sm_partago_user
    - sm_partago_user_rest_api
    - sm_pocketbook
    - sm_report_data
    - sm_reports
    - sm_rewards
    - sm_rewards_emc
    - sm_rewards_rest_api
    - sm_teletacs
    - vertical_carsharing
    - vertical_carsharing_emc
    - vertical_carsharing_mail
    - vertical_carsharing_rest_api
    - verbose_name_ticket
  sm:
    - account_chart_update
    - account_lock_date_update
    - crm_metadata
    - crm_metadata_rest_api
    - crm_meeting_commercial_partner
    - crm_partner_creator
    - crm_phonecall
    - crm_phonecall_planner
    - crm_sale_marketing
    - crm_sale_order_line
    - crm_sale_order_line_contract
    - crm_rest_api
    - easy_my_coop
    - easy_my_coop_api
    - easy_my_coop_es
    - knowledge
    - l10n_es_account_asset
    - l10n_es_account_bank_statement_import_n43
    - l10n_es_account_invoice_sequence
    - l10n_es_aeat
    - l10n_es_aeat_mod111
    - l10n_es_aeat_mod115
    - l10n_es_aeat_mod303
    - l10n_es_aeat_mod349
    - l10n_es_auto_reload-banks
    - l10n_es_extra_data
    - l10n_es_mis_report
    - l10n_es_partner
    - l10n_es_toponyms
    - l10n_es_vat_book
    - sm_carsharing_structure
    - sm_carsharing_structure_sommobilitat
    - sm_connect
    - sm_contributions
    - sm_donation_crm
    - sm_lopd
    - sm_maintenance
    - sm_member_geolocation
    - sm_partago_accounting
    - sm_partago_db
    - sm_partago_invoicing
    - sm_partago_invoicing_rest_api
    - sm_partago_tariffs
    - sm_partago_usage
    - sm_partago_user
    - sm_partago_user_rest_api
    - sm_pocketbook
    - sm_report_data
    - sm_reports
    - sm_rewards
    - sm_rewards_emc
    - sm_rewards_rest_api
    - sm_teletacs
    - vertical_carsharing
    - vertical_carsharing_emc
    - vertical_carsharing_mail
    - vertical_carsharing_rest_api
    - verbose_name_ticket
  sm-test:
    - account_chart_update
    - account_lock_date_update
    - crm_metadata
    - crm_metadata_rest_api
    - crm_meeting_commercial_partner
    - crm_partner_creator
    - crm_phonecall
    - crm_phonecall_planner
    - crm_sale_marketing
    - crm_sale_order_line
    - crm_sale_order_line_contract
    - crm_rest_api
    - easy_my_coop
    - easy_my_coop_api
    - easy_my_coop_es
    - knowledge
    - l10n_es_account_asset
    - l10n_es_account_bank_statement_import_n43
    - l10n_es_account_invoice_sequence
    - l10n_es_aeat
    - l10n_es_aeat_mod111
    - l10n_es_aeat_mod115
    - l10n_es_aeat_mod303
    - l10n_es_aeat_mod349
    - l10n_es_auto_reload-banks
    - l10n_es_extra_data
    - l10n_es_mis_report
    - l10n_es_partner
    - l10n_es_toponyms
    - l10n_es_vat_book
    - sm_carsharing_structure
    - sm_carsharing_structure_sommobilitat
    - sm_connect
    - sm_contributions
    - sm_donation_crm
    - sm_lopd
    - sm_maintenance
    - sm_member_geolocation
    - sm_partago_accounting
    - sm_partago_db
    - sm_partago_invoicing
    - sm_partago_invoicing_rest_api
    - sm_partago_tariffs
    - sm_partago_usage
    - sm_partago_user
    - sm_partago_user_rest_api
    - sm_pocketbook
    - sm_report_data
    - sm_reports
    - sm_rewards
    - sm_rewards_emc
    - sm_rewards_rest_api
    - sm_teletacs
    - vertical_carsharing
    - vertical_carsharing_emc
    - vertical_carsharing_mail
    - vertical_carsharing_rest_api
    - verbose_name_ticket
  alterna:
    - l10n_es_account_asset
    - l10n_es_account_bank_statement_import_n43
    - l10n_es_account_invoice_sequence
    - l10n_es_aeat
    - l10n_es_aeat_mod111
    - l10n_es_aeat_mod115
    - l10n_es_aeat_mod303
    - l10n_es_aeat_mod349
    - l10n_es_auto_reload-banks
    - l10n_es_mis_report
    - l10n_es_partner
    - l10n_es_toponyms
    - l10n_es_vat_book
  alterna-test:
    - l10n_es_account_asset
    - l10n_es_account_bank_statement_import_n43
    - l10n_es_account_invoice_sequence
    - l10n_es_aeat
    - l10n_es_aeat_mod111
    - l10n_es_aeat_mod115
    - l10n_es_aeat_mod303
    - l10n_es_aeat_mod349
    - l10n_es_auto_reload-banks
    - l10n_es_mis_report
    - l10n_es_partner
    - l10n_es_toponyms
    - l10n_es_vat_book
  ekiwi:
    - l10n_es_account_asset
    - l10n_es_account_bank_statement_import_n43
    - l10n_es_account_invoice_sequence
    - l10n_es_aeat
    - l10n_es_aeat_mod111
    - l10n_es_aeat_mod115
    - l10n_es_aeat_mod303
    - l10n_es_aeat_mod349
    - l10n_es_auto_reload-banks
    - l10n_es_mis_report
    - l10n_es_partner
    - l10n_es_toponyms
    - l10n_es_vat_book
  ekiwi-test:
    - l10n_es_account_asset
    - l10n_es_account_bank_statement_import_n43
    - l10n_es_account_invoice_sequence
    - l10n_es_aeat
    - l10n_es_aeat_mod111
    - l10n_es_aeat_mod115
    - l10n_es_aeat_mod303
    - l10n_es_aeat_mod349
    - l10n_es_auto_reload-banks
    - l10n_es_mis_report
    - l10n_es_partner
    - l10n_es_toponyms
    - l10n_es_vat_book
  partago:
    - l10n_be_mis_reports
    - l10n_be_vat_reports

odoo_role_odoo_user: odoo

odoo_role_download_strategy: tar
odoo_role_odoo_version: "12.0"
odoo_role_odoo_release: "12.0_2023-04-13"
odoo_role_odoo_url: "https://git.coopdevs.org/coopdevs/odoo/OCB/-/archive/{{ odoo_role_odoo_release }}/OCB-{{ odoo_role_odoo_release }}.tar.gz"
odoo_role_demo_data: false

odoo_role_limit_time_cpu: 6000
odoo_role_limit_time_real: 12000

postgresql_python_library: python3-psycopg2

# Odoo provisioning
odoo_provisioning_version: "v0.7.21"

# Production security defaults
odoo_role_odoo_http_interface: '127.0.0.1'
odoo_role_odoo_proxy_mode: true
odoo_role_enable_queue_job: true
odoo_role_workers: 4
odoo_role_channels: "root:2,root.CONTRACT_INVOICE:1"

# Nginx configuration
nginx_configs:
  upstream:
    - upstream uexporter { server 127.0.0.1:9839; }
    - upstream odoo { server 127.0.0.1:8069; }
    - upstream nexporter { server 127.0.0.1:9100; }
    - upstream pexporter { server 127.0.0.1:9187; }
    - upstream bexporter { server 127.0.0.1:11800; }

nginx_sites:
  odoo:
    - |
      listen 80;
      server_name {{ domains | default([inventory_hostname]) | join(' ') }};
      rewrite ^(.*)$ https://$host$1 permanent;
  odoo.ssl:
    - |
      listen 443 ssl;
      ssl_certificate /etc/letsencrypt/live/{{ inventory_hostname }}/fullchain.pem;
      ssl_certificate_key /etc/letsencrypt/live/{{ inventory_hostname }}/privkey.pem;
      include /etc/letsencrypt/options-ssl-nginx.conf;
      ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
      server_name {{ domains | default([inventory_hostname]) | join(' ') }};
      proxy_read_timeout 300000s;
      proxy_connect_timeout 300000s;
      proxy_send_timeout 300000s;
      client_max_body_size 3000M;
      proxy_set_header X-Forwarded-Host $host;
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      proxy_set_header X-Forwarded-Proto $scheme;
      proxy_set_header X-Real-IP $remote_addr;
      ssl on;
      access_log /var/log/nginx/odoo.access.log;
      error_log /var/log/nginx/odoo.error.log;
      location / {
        proxy_redirect off;
        proxy_pass http://odoo;
      }
      location /longpolling/ {
        proxy_pass http://127.0.0.1:8072;

        proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
        proxy_redirect off;

        proxy_set_header    Host            $host;
        proxy_set_header    X-Real-IP       $remote_addr;
        proxy_set_header    X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header    X-Forwarded-Proto https;
      }
      location /node/ {
        include proxy_params;
        proxy_redirect off;
        proxy_pass http://nexporter/metrics;
        auth_basic           "closed site";
        auth_basic_user_file /etc/nginx/.nexporter.htpasswd;
      }
      location /postgres/ {
        include proxy_params;
        proxy_redirect off;
        proxy_pass http://pexporter/metrics;
        auth_basic           "closed site";
        auth_basic_user_file /etc/nginx/.pexporter.htpasswd;
      }
      location /backup/ {
        include proxy_params;
        proxy_redirect off;
        proxy_pass http://bexporter;
        auth_basic           "closed site";
        auth_basic_user_file /etc/nginx/.bexporter.htpasswd;
      }

      location /uexporter/ {
        include proxy_params;
        proxy_redirect off;
        proxy_pass http://uexporter/;
        auth_basic           "closed site";
        auth_basic_user_file /etc/nginx/.uexporter.htpasswd;
      }
      gzip_types text/css text/less text/plain text/xml application/xml application/json application/javascript;
      gzip on;