---
interfaces:
  adm: ens18
  srv: ens19

loc_nginx:
  service_name: thelounge
  servers:
    - server_name:
        - irc.crans.org
        - irc
      default: true
      ssl: crans.org
      locations:
        - filter: ^~ /web/
          params:
            - proxy_pass http://localhost:9000/
            - include "/etc/nginx/snippets/options-proxypass.conf"
        - filter: ~ ^/$
          params:
            - return 302 https://irc.crans.org/web/
        - filter: /
          params:
            - return 302 "https://wiki.crans.org/VieCrans/UtiliserIrc#Via_l.27interface_web"

loc_thelounge:
  public: "true"

loc_inspircd:
  cloak:
    name: crans
    key: "{{ vault.inspircd.cloak.key }}"
  diepass: "{{ vault.inspircd.diepass }}"
  restartpass: "{{ vault.inspircd.restartpass }}"
  opers: "{{ vault.inspircd.opers }}"
  server:
    name: irc.crans.org
    description: Crans IRC server
    network: Crans
  admin:
    name: Pierre-Elliott Bécue
    nick: PEB
    email: root@crans.org
  bind:
    - address: 185.230.79.11
      type: clients
      clair: 6667
      ssl: 6697
    - address: 2a0c:700:2::ff:fe01:2902
      type: clients
      clair: 6667
      ssl: 6697
    - address: 172.16.10.129
      type: clients
      clair: 6667
    - address: 127.0.0.1
      type: servers
      clair: 6668
  connect:
    - name: zamok
      allows:
        ipv4: 185.230.79.1/32
        ipv6: 2a0c:700:2:0:ec4:7aff:fe59:a1ad/128
      threshold: 1
    - name: irc
      allows:
        ipv4: 185.230.79.11/32
        ipv6: 2a0c:700:2::ff:fe01:2902/128
      threshold: 1
    - name: gitlab
      allows:
        ipv4: 185.230.79.14/32
        ipv6: 2a0c:700:2::ff:fe01:502/128
      threshold: 10
      commandrate: 10000
    - name: monitoring
      allows:
        ipv4: 172.16.10.121/32
        ipv6: fd00::10:ff:fe01:2110/128
      threshold: 10
      commandrate: 10000
      modes: true
  dns: 185.230.79.62
  services:
    name: services.irc.crans.org
    port: 6668
    recvpass: "{{ vault.anope.recvpass }}"
    sendpass: "{{ vault.anope.sendpass }}"

loc_anope:
  recvpass: "{{ vault.anope.recvpass }}"
  sendpass: "{{ vault.anope.sendpass }}"
  options_seed: "{{ vault.anope.options_seed }}"
  services_roots: "{{ vault.anope.services_roots }}"