---
glob_nginx:
  contact: contact@crans.org
  who: "L'équipe technique du Cr@ns"
  service_name: service
  ssl:
    # Add adm.crans.org if necessary
    - name: crans.org
      cert: /etc/letsencrypt/live/crans.org/fullchain.pem
      cert_key: /etc/letsencrypt/live/crans.org/privkey.pem
      trusted_cert: /etc/letsencrypt/live/crans.org/chain.pem
  servers:
    - ssl: false  # Replace by crans.org or adm.crans.org
      default: true
      server_name:
        - "default"
        - "_"
      root: "/var/www/html"
      locations:
        - filter: "/"
          params: []
      additional_params: []
  upstreams: []

  auth_passwd: []
  default_server:
  default_ssl_server:
  default_ssl_domain: crans.org
  real_ip_from:
    - "172.16.0.0/16"
    - "fd00:0:0:10::/64"
  deploy_robots_file: false

glob_prometheus_nginx_exporter:
  listen_addr: "{{ query('ldap', 'ip', ansible_hostname, 'adm') | ipv4 | first }}"