Update to 2021-12-01 19:13

roles/openxpki/templates/config.d/system/crypto.yaml.j2

@@ -0,0 +1,23 @@
+tokenapi:
+  certsign: OpenXPKI::Crypto::Backend::API
+  crlsign: OpenXPKI::Crypto::Backend::API
+  datasafe: OpenXPKI::Crypto::Backend::API
+  scep: OpenXPKI::Crypto::Tool::LibSCEP::API
+
+token:
+  default:
+    backend: OpenXPKI::Crypto::Backend::OpenSSL
+    api: OpenXPKI::Crypto::Backend::API
+    engine: OpenSSL
+    key_store: OPENXPKI
+    shell: /usr/bin/openssl
+    wrapper: ''
+    randfile: {{ pki_root_dir }}/data/rand
+
+  javaks:
+    backend: OpenXPKI::Crypto::Tool::CreateJavaKeystore
+    api: OpenXPKI::Crypto::Tool::CreateJavaKeystore::API
+    engine: OpenSSL
+    key_store: OPENXPKI
+    shell: /usr/bin/keytool
+    randfile: {{ pki_root_dir }}/data/rand

roles/openxpki/templates/config.d/system/database.yaml.j2

@@ -0,0 +1,8 @@
+main:
+  debug: 0
+  type: MySQL
+  name: '{{ pki_db_name }}'
+  host: '{{ pki_db_server }}'
+  port: '{{ pki_db_port }}'
+  user: '{{ pki_db_user }}'
+  passwd: '{{ pki_db_pass | regex_replace("'","''") }}'

roles/openxpki/templates/config.d/system/realms.yaml.j2

@@ -0,0 +1,6 @@
+{% for realm in pki_realms %}
+{{ realm.name }}:
+  label: {{ realm.description | default(realm.name) }}
+  baseurl: {{ realm.url | default(pki_base_url) }}
+{% endfor %}
+

roles/openxpki/templates/config.d/system/server.yaml.j2

@@ -0,0 +1,37 @@
+name: main
+log4perl: {{ pki_root_dir }}/etc/log.conf
+user: {{ pki_user }}
+group: apache
+socket_file: {{ pki_root_dir }}/run/openxpki.socket
+pid_file: {{ pki_root_dir }}/run/openxpkid.pid
+stderr: /dev/stdout
+tmpdir: {{ pki_root_dir }}/tmp
+environment:
+  PERL5LIB: {{ pki_root_dir }}/lib/perl5
+  OPENXPKI_CONF_PATH: {{ pki_root_dir }}/etc/config.d
+
+session:
+  type: Database
+  table: frontend_session
+
+transport:
+  Simple: 1
+
+service:
+  Default:
+    enabled: 1
+    idle_timeout: 120
+
+  LibSCEP:
+    enabled: 1
+
+# settings for i18n
+i18n:
+  locale_directory: {{ pki_root_dir }}/locale
+  default_language: C
+
+prefork:
+  min_servers: 5
+  min_spare_servers: 5
+  max_servers: 25
+  max_spare_servers: 10

roles/openxpki/templates/config.d/system/watchdog.yaml.j2

@@ -0,0 +1,15 @@
+max_fork_redo: 5
+max_exception_threshhold: 10
+interval_sleep_exception: 60
+max_tries_hanging_workflows:  3
+
+interval_wait_initial: 10
+interval_loop_idle: 5
+interval_loop_run: 1
+interval_sleep_overload: 15
+
+interval_session_purge: 300
+
+# You should not change this unless you know what you are doing
+max_instance_count: 1
+disabled: 0