Replace http with https and fake cert in local VMs

bin/lint

@@ -0,0 +1,3 @@
+#!/bin/sh
+
+exec ansible-lint site.yml playbooks/*.yml --exclude community

inventory/group_vars/all.yml

@@ -254,6 +254,8 @@ retired_core_devs:
 # nginx config
 
 app_root: "{{ current_path }}"
+ssl_certificate: "/etc/letsencrypt/live/{{ certbot_cert_name | default(domain) }}/fullchain.pem"
+ssl_certificate_key:  "/etc/letsencrypt/live/{{ certbot_cert_name | default(domain) }}/privkey.pem"
 
 nginx_official_repo: True
 
@@ -324,8 +326,8 @@ nginx_sites:
       listen [::]:443 ssl http2;
       server_name www.{{ domain }};
 
-      ssl_certificate      /etc/letsencrypt/live/{{ certbot_cert_name | default(domain) }}/fullchain.pem;
-      ssl_certificate_key  /etc/letsencrypt/live/{{ certbot_cert_name | default(domain) }}/privkey.pem;
+      ssl_certificate      {{ ssl_certificate }};
+      ssl_certificate_key  {{ ssl_certificate_key }};
 
       {{ nginx_tls_cipher_suites }}
 
@@ -338,8 +340,8 @@ nginx_sites:
       server_name {{ certbot_domains | default([domain]) | join(' ') }};
       root {{ app_root }}/public;
 
-      ssl_certificate      /etc/letsencrypt/live/{{ certbot_cert_name | default(domain) }}/fullchain.pem;
-      ssl_certificate_key  /etc/letsencrypt/live/{{ certbot_cert_name | default(domain) }}/privkey.pem;
+      ssl_certificate      {{ ssl_certificate }};
+      ssl_certificate_key  {{ ssl_certificate_key }};
 
       {{ nginx_tls_cipher_suites }}
 

inventory/group_vars/local.yml

@@ -0,0 +1,38 @@
+rails_env: "staging"
+
+ssl_certificate: "/etc/ssl/certs/ssl-cert-snakeoil.pem"
+ssl_certificate_key:  "/etc/ssl/private/ssl-cert-snakeoil.key"
+
+# See https://github.com/openfoodfoundation/ofn-install/wiki/Setup for more info
+checkout_zone: Australia
+country_code: AU
+currency: AUD
+locale: en
+language: en_AU.UTF-8
+language_packages:
+  - language-pack-en-base
+l10n_repo: https://github.com/openfoodfoundation/l10n_au.git
+timezone: Melbourne
+
+developer_email: [email protected]
+
+users_sysadmin:
+  - "{{ core_devs }}"
+
+# Test host configuration
+# This is usually set in the host config but the same for all local containers.
+domain: localhost
+
+admin_email: [email protected]
+mail_domain: example.com
+
+# Add missing vars to emulate /local_vagrant/secrets.yml
+db_password: 'f00d'
+admin_password: 'ofn123'
+secret_token: '511a3d0fa1551b9fa75a1aef5b47684905c64807963fa2c190272878366365'
+google_maps_api_key: 'xxx'
+
+mail_host: 'example.com'
+mail_port: 25
+smtp_username: 'admin'
+smtp_password: 'password'