Merge branch 'hostcert-bypass' of github.com:ESGF/esgf-docker into opa-integration

### EDIT THIS

### Example of a group_vars/all.yml

### Provides variables common to both [data] and [index] index nodes

### See: https://github.com/ESGF/esgf-docker/blob/master/docs/deploy-ansible.md

### For more information about configuring an Ansible installation.

## OPTIONAL: Use the images that were built for a particular commit:

#image_tag: a031a2ca

## OPTIONAL: If using an immutable tag, don't do unnecessary pulls:

#image_pull: false

## OPTIONAL: Set the prefix for the images:

#image_prefix: registry.example.com/esgf

## OPTIONAL: Use a different branch for the THREDDS image:

#thredds_image_tag: my-branch

#thredds_image_pull: true

## https://github.com/ESGF/esgf-docker/blob/master/docs/deploy-ansible.md#setting-the-image-version

### EDIT THIS

### Example of a group_vars/data.yml

### Provides variables specific to data nodes (hosts in the [data] group).

### See: https://github.com/ESGF/esgf-docker/blob/master/docs/deploy-ansible.md

### For more information about configuring an Ansible installation.

## Data mounts must be declared here to mount data paths to the Docker containers:

data_mounts:

  # This will mount /datacentre/archive on the host as /data in the containers

  - host_path: /datacentre/archive

    mount_path: /data

## Datasets are used by the THREDDS container to construct the initial catalog

## and by the Nginx file server:

data_datasets:

  # This will expose files at /data/cmip6/[path] in the container

  # as http://esgf-data.example.org/thredds/{dodsC,fileServer}/esg_cmip6/[path]

  - name: CMIP6

    path: esg_cmip6

    location: /data/cmip6

  # Similarly, this exposes files at /data/cordex/[path] in the container

  # as http://esgf-data.example.org/thredds/{dodsC,fileServer}/esg_cordex/[path]

  - name: CORDEX

    path: esg_cordex

    location: /data/cordex

# https://github.com/ESGF/esgf-docker/blob/master/docs/deploy-ansible.md#configuring-the-available-datasets

## OPTIONAL: It's possible to use an existing catalog with the THREDDS server:

#thredds_catalog_host_path: /path/to/existing/catalogs

## You must still configure data_mounts and data_datasets as above, except in this

## case the datasets should correspond the to the datasetRoots in your THREDDS catalogs.

## https://github.com/ESGF/esgf-docker/blob/master/docs/deploy-ansible.md#using-existing-thredds-catalogs

## OPTIONAL: Forwarding access logs for stats using LogStash:

#logstash_enabled: true

## https://github.com/ESGF/esgf-docker/blob/master/docs/deploy-ansible.md#using-external-solr-instances

### EDIT THIS

### Example of a group_vars/index.yml

### Provides variables specific to index nodes (hosts in the [index] group).

### See: https://github.com/ESGF/esgf-docker/blob/master/docs/deploy-ansible.md

### For more information about configuring an Ansible installation.

## OPTIONAL: Configure replicas for the SOLR server:

#solr_replicas:

#  - name: ceda-index-3

#    master_url: https://esgf-index3.ceda.ac.uk/solr

#  - name: llnl

#    master_url: https://esgf-node.llnl.gov/solr

## https://github.com/ESGF/esgf-docker/blob/master/docs/deploy-ansible.md#configuring-solr-replicas

## OPTIONAL: This configuration disables the SOLR installation and uses an existing

## SOLR server instead:

## Disable local Solr instances

#solr_enabled: false

## Set the external URLs for Solr

#solr_master_external_url: http://external.solr:8984/solr

#solr_slave_external_url: http://external.solr:8983/solr

## Configure the replicas

## No local containers will be deployed - esg-search will use the master_url directly

#solr_replicas:

#  - name: ceda-index-3

#    master_url: https://esgf-index3.ceda.ac.uk/solr

#  - name: llnl

#    master_url: https://esgf-node.llnl.gov/solr

## WARNING: If you want to use a Solr instance configured using esgf-ansible as an

## external Solr instance, you will need to configure the firewall on that host to

## expose the port 8984 where the master listens.

## https://github.com/ESGF/esgf-docker/blob/master/docs/deploy-ansible.md#using-external-solr-instances

### EDIT THIS

### Example of a host_vars file specific to the host "esgf.data.example.org".

### Provides variables for only this host machine.

### See: https://github.com/ESGF/esgf-docker/blob/master/docs/deploy-ansible.md

### for more information about configuring an Ansible installation.

## OPTIONAL: Enabling and disabling components:

#thredds_enabled: true/false

#fileserver_enabled: true/false

### See: https://github.com/ESGF/esgf-docker/blob/master/docs/deploy-ansible.md#enabling-and-disabling-components

## OPTIONAL: Enabling SSL for the server

#nginx_config_template: ssl.proxy.conf.j2

#published_port: 443

#ssl_certificate: |

#  -----BEGIN CERTIFICATE-----

#  ...

#ssl_private_key: |

#  -----BEGIN RSA PRIVATE KEY-----

#  ...

### See: https://github.com/ESGF/esgf-docker/blob/master/docs/deploy-ansible.md#enabling-ssl

### EDIT THIS

### Example of a host_vars file specific to the host "esgf.index.example.org".

### Provides variables for only this host machine.

### See: https://github.com/ESGF/esgf-docker/blob/master/docs/deploy-ansible.md

### for more information about configuring an Ansible installation.

## OPTIONAL: Enabling and disabling components:

#solr_enabled: true/false

#search_enabled: true/false

### See: https://github.com/ESGF/esgf-docker/blob/master/docs/deploy-ansible.md#enabling-and-disabling-components

## OPTIONAL: Enabling SSL for the server

#nginx_config_template: ssl.proxy.conf.j2

#published_port: 443

#ssl_certificate: |

#  -----BEGIN CERTIFICATE-----

#  ...

#ssl_private_key: |

#  -----BEGIN RSA PRIVATE KEY-----

#  ...

### See: https://github.com/ESGF/esgf-docker/blob/master/docs/deploy-ansible.md#enabling-ssl