---
glob_django_cas:
  repo: http://gitlab.adm.crans.org/nounous/django-cas.git
  path: /var/local/django-cas
  ldap:
    dn: cn=Utilisateurs,dc=crans,dc=org
    password: "{{ vault.cas.ldap.password }}"
    user: cn=cas,ou=service-users,dc=crans,dc=org
    server: 172.16.10.157
  db:
    host: tealc.adm.crans.org
    password: "{{ vault.cas.database.password }}"
  secret_key: "{{ vault.cas.secret_key }}"
  mail:
    address: root@crans.org
    host: "{{ query('ldap', 'ip', 'redisdead', 'adm') | ansible.utils.ipv4 | first }}"
    port: 25

loc_nginx:
  service_name: cas
  ssl: []
  servers:
    - server_name:
        - cas.crans.org
        - cas.adm.crans.org
        - login.crans.org
        - login.adm.crans.org
        - auth.crans.org
        - auth.adm.crans.org
      default: true
      locations:
        - filter: /cas
          params:
            - rewrite ^/cas$ / redirect
            - rewrite ^/cas/(.*)$ /$1 redirect

        - filter: /static
          params:
            - alias /var/local/django-cas/cas/local_static

        - filter: /
          params:
            - uwsgi_pass unix:///var/run/uwsgi/app/cas/socket
            - include uwsgi_params