artemis-ansible/group_vars/artemis_production.yml at 5b646777274d7e0780c6001821d4882a129625e7 · ls1intum/artemis-ansible · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
---
artemis_server_url: "https://artemis.tum.de"

artemis_version: 7.10.5

var_vault_group: "production/nodes"

var_artemis_localvc_ssh_url: "ssh://git@artemis.tum.de:7921/"

registry_external_host: registry.prod.artemis.cit.tum.de

##############################################################################
# External Systems Configuration
##############################################################################

athena:
  url: "{{ lookup('hashi_vault', 'kv/data/artemis/common/athena').get('url') }}"
  secret: "{{ lookup('hashi_vault', 'kv/data/artemis/common/athena').get('secret') }}"

nebula:
  url: "https://prod.nebula.artemis.cit.tum.de"
  secret: "{{ lookup('hashi_vault', 'kv/data/artemis/common/nebula').get('prod_secret') }}"

weaviate:
  enabled: true
  http_host: weaviate-prod.aet.cit.tum.de
  http_port: 443
  grpc_port: 50051
  scheme: https
  collection_prefix: "Artemis_prod_"
  vectorizer_module: text2vec-openai
  open_ai_embedding_model: "Qwen/Qwen3-Embedding-8B"
  open_ai_base_url: https://logos.aet.cit.tum.de:8080/
  gpu_api_key: "{{ lookup('hashi_vault', 'kv/data/artemis/production/nodes').get('logos_api_key') }}"
  api_key: "{{ lookup('hashi_vault', 'kv/data/itg/services/services_ase/weaviate').get('api_key') }}"

##############################################################################
# Proxy Configuration
##############################################################################

proxy_generate_dh_param: false

# Special TUM certificate config
proxy_certificate_base_path: /opt/certs
proxy_tum_certificate_key_name: artemis_tum_de-key.pem
proxy_tum_certificate_name: artemis_tum_de.pem

servers:
  - name: "artemis.tum.de"
    ssl_certificate_path: "{{ proxy_certificate_base_path }}/{{ proxy_tum_certificate_name }}"
    ssl_certificate_key_path: "{{ proxy_certificate_base_path }}/{{ proxy_tum_certificate_key_name }}"
    default_server: true

redirects:
  - name: "artemis.ase.in.tum.de artemis.in.tum.de artemis.ase.cit.tum.de proxy.prod.artemis.cit.tum.de artemis.cs.tum.edu proxy-internal.prod.artemis.cit.tum.de prod.artemis.cit.tum.de asevm91.cit.tum.de artemis.cit.tum.de"
    ssl_certificate_path: /var/lib/rbg-cert/live/host:f:asevm91.cit.tum.de.fullchain.pem
    ssl_certificate_key_path: /var/lib/rbg-cert/live/host:f:asevm91.cit.tum.de.privkey.pem
    default_server: false
    to: "{{ artemis_server_url }}"

firewall_hostgroup: default
proxy_forward_ssh: true

##############################################################################
# Sentry Env-specific Configuration
##############################################################################
sentry:
  environment: prod
  traces_sample_rate: 0.2

theia:
  portal_url: https://theia.artemis.cit.tum.de
  images:
    java:
      Java-17: "java-17-latest"
    c:
      C: "c-latest"
    javascript:
      Javascript: "javascript-latest"
    ocaml:
      Ocaml: "ocaml-latest"
    python:
      Python: "python-latest"
    rust:
      Rust: "rust-latest"