ansible/roles/hackmd/templates/config.json.j2

{
    "production": {
        "domain": "{{ hackmd_domain }}",
        "_hsts": {
            "enable": true,
            "maxAgeSeconds": "31536000",
            "includeSubdomains": true,
            "preload": true
        },
        "csp": {
            "enable": true,
            "directives": {
                "imgSrc": ["self", "unsafe-inline"]
            },
            "upgradeInsecureRequests": "auto",
            "addDefaults": true,
            "addDisqus": true,
            "addGoogleAnalytics": true
        },
        "db": {
            "username": "{{ hackmd_dbuser }}",
            "password": "{{ hackmd_dbpass }}",
            "database": "{{ hackmd_dbname }}",
            "host": "localhost",
            "port": "5432",
            "dialect": "postgres"
        },
        "ldap": {
            "url": "{{ ldap_uri }}",
            "bindDn": "{{ ldap_binddn }}",
            "bindCredentials": "{{ ldap_bindpw }}",
            "searchBase": "{{ ldap_base }}",
            "searchFilter": "(uid={{ '{{' }}username{{ '}}' }})",
            "searchAttributes": ["cn", "uid"],
            "usernameField": "cn",
            "useridField": "uid",
            "tlsca": "/etc/ldap/ssl/BKCA.crt"
            }
        },
        "email": false
    }
}