---
glob_keepalived:
  mail_source: keepalived@crans.org
  mail_destination: root@crans.org
  smtp_server: "{{ lookup('ldap', 'ip4', 'redisdead', 'adm') }}"
  routeur_id: "{{ ansible_hostname }}"
  pool:
    VI_ALL:
      password: "{{ vault.keepalived.password }}"
      id: 60
      ipv6: true
      notify: /var/local/services/keepalived/keepalived.py
      zones:
        - vlan: via
          ipv4: 138.195.159.250/30
          ipv6:
            - {ip: '2a0c:b641:2f3::2/64', scope: 'global'}
        - vlan: aurore
          ipv4: 185.230.79.253/29
          ipv6:
            - {ip: '2a0c:700:28::1/64', scope: 'global'}
        - vlan: srv
          ipv4: "{{ lookup('ldap', 'ip4', 'passerelle', 'srv') }}/26"
          ipv6:
            - {ip: "{{ lookup('ldap', 'ip6', 'passerelle', 'srv') }}/64", scope: 'global'}
            - {ip: 'fe80::1/64', scope: 'link'}
        - vlan: srv_nat
          ipv4: "{{ lookup('ldap', 'ip4', 'passerelle', 'srv-nat') }}/24"
          ipv6:
            - {ip: "{{ lookup('ldap', 'ip6', 'passerelle', 'srv-nat') }}/64", scope: 'global'}
            - {ip: 'fe80::1/64', scope: 'link'}
        - vlan: adh
          ipv4: "{{ lookup('ldap', 'ip4', 'passerelle', 'adh') }}/24"
          ipv6:
            - {ip: "{{ lookup('ldap', 'ip6', 'passerelle', 'adh') }}/48", scope: 'global'}
            - {ip: 'fe80::1/64', scope: 'link'}
        # - vlan: ens
        #   ipv4: 100.84.0.99/16
        #   ipv6: 2a0c:700:54::ff:fe00:9954/48

glob_service_keepalived:
  name: keepalived
  install_dir: /var/local/services/keepalived
  git:
    remote: https://gitlab.adm.crans.org/nounous/keepalived.git
    version: master
  config:
    services:
      VI_ALL:
        - isc-dhcp-server
        - radvd
        - bird
        - router.target