---
loc_dhcp:
  authoritative: True
  subnets:
    - network: "185.230.76.0/26"
      deny_unknown: True
      vlan: "cachan_adh"
      default_lease_time: "600"
      max_lease_time: "7200"
      routers: "185.230.76.62"
      dns: ["185.230.76.62"]
      domain_name: "adh.crans.org"
      domain_search: "adh.crans.org"
      options: []
      lease_file: "/var/local/services/dhcp/generated/dhcp.cachan-adh.crans.org.list"
    - network: "100.64.0.0/16"
      deny_unknown: True
      vlan: "adh_nat"
      default_lease_time: "600"
      max_lease_time: "7200"
      routers: "100.64.0.99"
      dns: ["100.64.0.99"]
      domain_name: "adh-nat.crans.org"
      domain_search: "adh-nat.crans.org"
      options: []
      lease_file: "/var/local/services/dhcp/generated/dhcp.adh-nat.crans.org.list"
    - network: "172.16.32.0/22"
      deny_unknown: True
      vlan: "infra"
      default_lease_time: "600"
      max_lease_time: "7200"
      dns: ["172.16.32.99"]
      domain_name: "infra.crans.org"
      domain_search: "infra.crans.org"
      options: []
      lease_file: "/var/local/services/dhcp/generated/dhcp.infra.crans.org.list"
    - network: 100.65.0.0/16
      vlan: "federez"
      default_lease_time: "600"
      max_lease_time: "7200"
      routers: "100.65.0.99"
      dns: ["100.65.0.99"]
      domain_name: "federez.net"
      domain_search: "federez.net"
      ranges:
        - min: 100.65.1.0
          max: 100.65.255.254
      options: []

loc_service_dhcp:
  re2o:
    hostname: "{{ query('ldap', 'ip', 're2o', 'cachan-adm') | ipv4 | first }}"
    user: services
    password: "{{ vault.re2o_service_password }}"
  git:
    remote: https://gitlab.adm.crans.org/nounous/dhcp.git
    version: cachan
  config:
    subnets:
      adh-nat.crans.org: 100.64.0.0/16
      cachan-adh.crans.org: 185.230.76.0/26
      infra.crans.org: 172.16.32.0/22