secrets.example

# Secrets should **NOT** be stored in github or other public repos
# Include secrets where needed (will override default values)
# Copy this file to ./group_vars/secrets/secrets.yml and edit as needed

# Global settings
# Sets custom org prefix used on deployment server
org_prefix: "org"
org_name: "myOrg"

# License guid value
license_guid_values: "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"

# Splunk defaults do not edit, used for reference when custom settings are changed
stage_spec:
  splunk_default_admin_password: 'changeme'
  ssl:
    splunk_cluster_sslPassword: 'password'
    splunk_clientCert: "$SPLUNK_HOME/etc/auth/server.pem"
    splunk_sslRootCAPath: "/opt/splunk/etc/auth/cacert.pem"
    splunk_serverCert: "$SPLUNK_HOME/etc/auth/server.pem"
    splunkweb_privKeyPath: "etc/auth/splunkweb/privkey.pem"
    splunkweb_serverCert: "etc/auth/splunkweb/cert.pem"
    splunkforwarder_clientCert: "$SPLUNK_HOME/etc/auth/server.pem"
    splunkforwarder_sslRootCAPath: "/opt/splunkforwarder/etc/auth/cacert.pem"

# Staging stage configs
staging:
  splunk_master_ip: "10.10.10.10"
  splunk_master_uri: 'cluster-master.domain.tld:8089'
  splunk_ds_uri: 'deployment-server.domain.tld:8089'
  splunk_lm_uri: 'license-master.domain.tld:8089'
  splunk_lb_hostname: 'load-balancer.domain.tld' # Set this to the ur you access splunk from
  splunk_mailserver: "mail.domain.tld"
  splunk_mailfrom: "splunkn@domain.tld"
  splunk_maxresults: "100"
  splunk_default_admin_password: 'changeme'
  splunk_old_admin_password: 'changeme'
  splunk_current_admin_password: 'changeme'
  splunk_cluster_pass4SymmKey: 'someRandomKey'
  shclustering:
    splunk_shcluster_captain: ''
    splunk_shclustering_pass4SymmKey: ''
    splunk_shcluster_label: ''
    splunk_shcluster_replication_port: ''
    splunk_shcluster_replication_factor: ''
    splunk_shcluster_servers_list: ''
  ca:
    ca_sslPassword: 'password'  # Should differ from splunk_cluster_sslPassword
    ca_domain: "domain.tld"
    ca_descriptor: "CA-servername"
    ca_country: "US"
    ca_state: "Illinois"
    ca_locality: "Chicago"
    ca_organization: "Organization Name"
    ca_organizational_unit: "Security"
    ca_email: "splunk-ca-admin@domain.tld"
  ssl:
    splunk_cluster_sslPassword: 'password'
    splunk_clientCert: "$SPLUNK_HOME/etc/auth/myOrg/XXXHOSTCERTXXX"
    splunk_sslRootCAPath: "/opt/splunk/etc/auth/myOrg/ca-cert-bundle.pem"
    splunk_serverCert: "$SPLUNK_HOME/etc/auth/myOrg/XXXHOSTCERTXXX"
    splunkweb_privKeyPath: "etc/auth/myOrg/XXXHOSTCERTXXX"
    splunkweb_serverCert: "etc/auth/myOrg/XXXHOSTCERTXXX"
    splunkforwarder_clientCert: "$SPLUNK_HOME/etc/auth/myOrg/XXXHOSTCERTXXX"
    splunkforwarder_sslRootCAPath: "/opt/splunkforwarder/etc/auth/myOrg/ca-cert-bundle.pem"