---
glob_printer:
  django_secret_key: "{{ vault.printer.django_secret_key }}"
  admins:
    - ('Root', 'root@crans.org')
  allowed_hosts:
    - helloworld.crans.org
    - imprimante.crans.org
  email:
    ssl: false
    host: "{{ query('ldap', 'ip', 'redisdead', 'adm') | ansible.utils.ipv4 | first }}"
    port: 25
    user: ""
    password: ""
    from: root@crans.org
    from_full: Crans <root@crans.org>
  database:
    host: "{{ query('ldap', 'ip', 'tealc', 'adm') | ansible.utils.ipv4 | first }}"
    port: 5432
    user: helloworld
    password: "{{ vault.printer.django_db_password }}"
    name: helloworld
  note:
    url: https://note.crans.org/
    client_id: "{{ vault.printer.note.client_id }}"
    client_secret: "{{ vault.printer.note.client_secret }}"
    note_id: 2088
    note_alias: Crans
  printer_name: Lexmark_X950_Series
  domain: "{{ query('ldap', 'ip', 'printer', 'lp') | ansible.utils.ipv4 | first }}"
  scan_server:
    address: "{{ query('ldap', 'ip', ansible_hostname, 'lp') | ansible.utils.ipv4 | first }}"
    port: 9751
  debug: false
  owner: www-data
  group: _nounou
  version: main
  settings_local_owner: www-data
  settings_local_group: _nounou
  ldap:
    uri: ldaps://{{ query('ldap', 'ip', 'tealc', 'adm') | ansible.utils.ipv4 | first }}/
    dn_template: uid=%(user)s,ou=passwd,dc=crans,dc=org
    group_search: ou=group,dc=crans,dc=org
    read_group: cn=_user,ou=group,dc=crans,dc=org
    write_group: cn=_nounou,ou=group,dc=crans,dc=org

loc_nginx:
  service_name: printer
  ssl: []
  servers:
    - ssl: false
      default: true
      server_name:
        - helloworld.crans.org
        - imprimante.crans.org
      additional_params:
        - client_max_body_size 100M
      locations:
        - filter: /static
          params:
            - alias /var/lib/django-printer/static/

        - filter: /protected/files
          params:
            - internal
            - alias /var/lib/django-printer/files/

        - filter: /doc
          params:
            - alias /var/www/django-printer-doc/

        - filter: /
          params:
            - uwsgi_pass printer
            - include /etc/nginx/uwsgi_params
  upstreams:
    - name: printer
      server: unix:///var/run/uwsgi/app/django-printer/socket