From efed89b18adb5162ab9345b30fd6fa5e97995c9d Mon Sep 17 00:00:00 2001
From: Maarten de Waard <mrtndwrd@gmail.com>
Date: Mon, 4 Mar 2019 12:13:40 +0100
Subject: [PATCH] document variables in settings.yml.example, set acme_staging
 default to false

---
 ansible/group_vars/cluster/settings.yml.example | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/ansible/group_vars/cluster/settings.yml.example b/ansible/group_vars/cluster/settings.yml.example
index 2006549e1..30b6ab259 100644
--- a/ansible/group_vars/cluster/settings.yml.example
+++ b/ansible/group_vars/cluster/settings.yml.example
@@ -6,5 +6,12 @@ domain: "example.com"
 admin_email: "admin@example.com"
 # Label of this deployment.
 release_name: "test"
+# Keycloak administrator password. If you do not change this value, it gets
+# generated and stored in ./secrets/keycloak_admin_password. You can also choose
+# your own password and fill it in here instead.
 keycloak_password: "{{ lookup('password', './secrets/keycloak_admin_password') }}"
-acme_staging: "true"
+# If this is "true" TLS certificates will be requested at the Let's Encrypt
+# staging server. If this is "false", you use Let's Encrypt's production server.
+# Note that LE's production server has stricter rate limits, so set this to
+# "true" when you are testing something.
+acme_staging: false
-- 
GitLab