---
interfaces:
  disable: true

loc_unattended:
  blacklist:
    - linux
    - nftables

loc_needrestart:
  override:
    - regex: 'thelounge'
      mode: 'i'

loc_borg:
  to_exclude:
    - /var/mail
    - /var/lib/podman
    - /var/lib/lxcfs
    - /var/lib/mysql

loc_restic:
  config:
    base:
      to_exclude:
        - /var/cache
        - /var/mail
        - /var/lib/podman
        - /var/lib/lxcfs
        - /var/lib/mysql

loc_thelounge:
  host: "\"{{ lookup('ldap', 'ip4', 'zamok', 'adm') }}\""
  oidentd: "\"/usr/local/lib/thelounge/.oidentd.conf\""
  reverseProxy: "true"
  ldap_enable: "true"

loc_crans_scripts:
  group: nounou
  dest:
    - /usr/scripts

loc_nfs_mount:
  mounts:
    - ip: "{{ lookup('ldap', 'ip4', 'cameron', 'san') }}"
      mountpoint: /pool/home
      target: /home
      name: home
      owner: root
      group: root
      mode: '0755'
    - ip: "{{ lookup('ldap', 'ip4', 'cameron', 'san') }}"
      mountpoint: /pool/mail
      target: /var/mail
      name: var-mail
      owner: root
      group: mail
      mode: '0755'