---
interfaces:
  adm: eth0
  srv: eth1

postfix:
  primary: true
  secondary: false
  public: true
  dkim: true
  mailman: true
  titanic: false

to_backup:
  - {
  name: "var",
  path: "/var",
  auth_users: "backupcrans",
  secrets_file: "/etc/rsyncd.secrets",
  hosts_allow: ["zephir.adm.crans.org", "10.231.136.6"],
  }
  - {
  name: "slash",
  path: "/",
  auth_users: "backupcrans",
  secrets_file: "/etc/rsyncd.secrets",
  hosts_allow: ["zephir.adm.crans.org", "10.231.136.6"],
  }
  - {
  name: "mailman",
  path: "/var/lib/mailman",
  auth_users: "backupcrans",
  secrets_file: "/etc/rsyncd.secrets",
  hosts_allow: ["zephir.adm.crans.org", "10.231.136.6"],
  }

loc_certbot:
  - dns_rfc2136_server: '172.16.10.147'
    dns_rfc2136_name: certbot_challenge.
    dns_rfc2136_secret: "{{ vault.certbot_dns_secret }}"
    mail: root@crans.org
    certname: crans.org
    domains: "*.crans.org"