---
glob_constellation:
  django_secret_key: "{{ vault.constellation_django_secret_key }}"
  admins:
    - ('Root', 'root@crans.org')
  allowed_hosts:
    - 'constellation.crans.org'
    - 'intranet.crans.org'
  email:
    ssl: false
    host: "{{ query('ldap', 'ip', 'redisdead', 'adm') | ipv4 | first }}"
    port: 25
    user: ''
    password: ''
    from: "root@crans.org"
    from_full: "Crans <root@crans.org>"
  database:
    host: "{{ query('ldap', 'ip', 'tealc', 'adm') | ipv4 | first }}"
    port: 5432
    user: 'constellation'
    password: "{{ vault.constellation_django_db_password }}"
    name: 'constellation'
  applications:
    - 'access'
    - 'billing'
    - 'dnsmanager'
    - 'firewall'
    - 'layers'
    - 'management'
    - 'member'
    - 'topography'
    - 'unix'
  comnpay:
    tpe: 'VAD-941-415'
    secret: '{{ vault.comnpay_secret }}'
  debug: false
  owner: root
  group: nounou
  version: master
  settings_local_owner: www-data
  settings_local_group: nounou

loc_nginx:
  service_name: constellation
  ssl: []
  servers:
    - ssl: false
      default: true
      server_name:
        - "constellation.crans.org"
        - "intranet.crans.org"
      locations:
        - filter: "/static"
          params:
            - "alias /var/local/constellation/static/"

        - filter: "/javascript"
          params:
            - "alias /usr/share/javascript/"

        - filter: "/media"
          params:
            - "alias /var/local/constellation/media/"

        - filter: "/"
          params:
            - "uwsgi_pass constellation"
            - "include /etc/nginx/uwsgi_params"
  upstreams:
    - name: 'constellation'
      server: 'unix:///var/run/uwsgi/app/constellation/constellation.sock'