---
interfaces:
  adm: ens18
  srv: ens19

loc_certbot:
  - dns_rfc2136_server: '172.16.10.147'
    dns_rfc2136_name: certbot_challenge.
    dns_rfc2136_secret: "{{ vault.certbot_dns_secret }}"
    mail: root@crans.org
    certname: crans.org
    domains: "irc.crans.org"

loc_nginx:
  service_name: "thelounge"
  servers:
    - server_name:
        - "irc.crans.org"
        - "irc"
      default: true
      ssl: crans.org
      locations:
        - filter: "^~ /web/"
          params:
            - "proxy_pass http://localhost:9000/"
            - "include \"/etc/nginx/snippets/options-proxypass.conf\""
        - filter: "~ ^/$"
          params:
            - "return 302 https://irc.crans.org/web/"
        - filter: "/"
          params:
            - "return 302 \"https://wiki.crans.org/VieCrans/UtiliserIrc#Via_l.27interface_web\""

loc_thelounge:
  public: "true"