---
interfaces:
  cachan_adm: ens18
  cachan_srv: ens19

loc_certbot:
  - dns_rfc2136_server: '185.230.79.9'
    dns_rfc2136_name: certbot_challenge.
    dns_rfc2136_secret: "{{ vault.certbot_dns_secret }}"
    mail: root@crans.org
    certname: crans.org
    domains: "crans.org, *.crans.org, crans.fr, *.crans.fr, crans.eu, *.crans.eu"

loc_nginx:
  servers: []
  ssl:
    - name: crans.org
      cert: /etc/letsencrypt/live/crans.org/fullchain.pem
      cert_key: /etc/letsencrypt/live/crans.org/privkey.pem
      trusted_cert: /etc/letsencrypt/live/crans.org/chain.pem
  real_ip_from:
    - "172.17.0.0/16"
    - "fd00:0:0:3000::/56"

loc_reverseproxy:
  reverseproxy_sites:
    - {from: mirrors.crans.org, to: 172.17.10.30}
    - {from: intranet.crans.org, to: 172.17.10.203}
    - {from: re2o.crans.org, to: 172.17.10.203}

  redirect_sites: []