---
# Variables that apply to both the app and monitor server go in this file
# If the monitor or app server need different values define the variable in
# hosts_vars/app.yml or host_vars/mon.yml
securedrop_version: "2.12.3"
securedrop_app_code_sdist_name: "securedrop-app-code-{{ securedrop_version | replace('~', '-') }}.tar.gz"

grsecurity: true
install_local_packages: false

# Are we in CI environment?
ci_builder: false

# Ansible v1 default reference to remote host
remote_host_ref: "{{ ansible_host|default(inventory_hostname) }}"

# Packages required for working on SecureDrop within development VM. Same list
# is used on the build VM to pull in required packages.
development_dependencies: []

# Installing the securedrop-app-code.deb package
securedrop_target_distribution: focal
securedrop_app_code_deb: "securedrop-app-code_{{ securedrop_version }}+{{ securedrop_target_distribution }}_amd64" # do not enter .deb extension

# Enable Tor over SSH by default
enable_ssh_over_tor: true

# If file is present on system at the end of ansible run
# force a reboot. Needed because of the de-coupled nature of
# the many roles of the current prod playbook
securedrop_cond_reboot_file: /tmp/sd-reboot-now
