Additional options

The Ansible role reemo-infra responsible for the installation has additional options. For clarity, these options are organized in the following sections:

• SSL Certificates : Traefik certificates and internal PKI for mTLS communications.

• User and Administrator Portal : portal URLs, IP filtering, port management, physical separation, SSO per portal, filtering user roles.

• Initialization Variables : default values and infrastructure components registered when the database is initialized.

• Logs : Syslog and security log configuration.

• Health and Monitoring : platform health monitoring, Prometheus and Datadog integration.

• Email Sending : transactional email sending.

• Maintenance Mode : maintenance mode setup.

• CRON, LDAP and Provisioning : CRON scheduled tasks, LDAP, and image preloading.

• Internal API Access : internal API access via a dedicated hostname.

• Database : database engine configuration (internal or external, MySQL, PostgreSQL, SSL support, NDBCLUSTER).

• Vault and Secrets Management (CredentialAPI) : application secrets management (Vault, CredentialAPI, Portal Credential), documented in the dedicated INFRA environment section.