---
glob_django_cas:
  repo: 'http://gitlab.adm.crans.org/nounous/django-cas.git'
  path: '/var/local/django-cas'
  ldap:
    dn: 'cn=Utilisateurs,dc=crans,dc=org'
    password: "{{ vault.cas.ldap.password }}"
    user: 'cn=cas,ou=service-users,dc=crans,dc=org'
    server: "{{ lookup('ldap', 'ip4', 'yson-partou', 'adm') }}"
  db:
    host: tealc.adm.crans.org
    password: "{{ vault.cas.database.password }}"
  secret_key: "{{ vault.cas.secret_key }}"
  mail:
    address: 'root@crans.org'
    host: "{{ lookup('ldap', 'ip4', 'redisdead', 'adm') }}"
    port: 25

loc_nginx:
  service_name: "cas"
  ssl: []
  servers:
    - server_name:
        - cas.crans.org
        - cas.adm.crans.org
        - login.crans.org
        - login.adm.crans.org
        - auth.crans.org
        - auth.adm.crans.org
      default: true
      locations:
        - filter: "/cas"
          params:
            - "rewrite ^/cas$ / redirect"
            - "rewrite ^/cas/(.*)$ /$1 redirect"

        - filter: "/static"
          params:
            - "alias /var/local/django-cas/cas/local_static"

        - filter: "/"
          params:
            - "uwsgi_pass unix:///var/run/uwsgi/app/cas/socket"
            - "include uwsgi_params"