Additional options

The Ansible role reemo-infra responsible for the installation has additional options. For clarity, these options are organized in the following sections:

  • options/certificates : Traefik certificates and internal PKI for mTLS communications.

  • options/portal : portal URLs, IP filtering, port management, physical separation, SSO per portal, filtering user roles.

  • options/initialization : default values and infrastructure components registered when the database is initialized.

  • options/syslog : Syslog and security log configuration.

  • options/healthcheck : platform health monitoring, Prometheus and Datadog integration.

  • options/mails : transactional email sending.

  • options/maintenance : maintenance mode setup.

  • options/cron : CRON scheduled tasks, LDAP, and image preloading.

  • options/api-interne : internal API access via a dedicated hostname.

  • options/database : database engine configuration (internal or external, MySQL, PostgreSQL, SSL support, NDBCLUSTER).

  • Vault and Secrets Management (CredentialAPI) : application secrets management (Vault, CredentialAPI, Portal Credential), documented in the dedicated INFRA environment section.