---
loc_home_nounou:
  ip: 172.17.10.9
  mountpoint: /rpool/home

loc_ldap:
  servers:
    - 172.17.10.9
  base: 'dc=crans,dc=org'

glob_ntp_client:
  servers:
    - terenez.cachan-adm.crans.org

debian_mirror: http://172.17.10.202/debian

glob_prometheus_node_exporter:
  listen_addr: "{{ query('ldap', 'ip', ansible_hostname, 'cachan-adm') | ipv4 | first }}"

loc_borg:
  remote:
    - borg@zephir.cachan-adm.crans.org:/backup/borg/{{ ansible_hostname }}
  ssh_options: ""

loc_re2o:
  owner: root
  group: _nounou
  version: crans
  settings_local_owner: www-data
  settings_local_group: _nounou

  django_secret_key: "{{ vault.re2o_django_secret_key }}"
  aes_key: "{{ vault.re2o_aes_key }}"
  admins:
    - ('Root', 'root@crans.org')
  allowed_hosts:
    - 're2o.cachan-adm.crans.org'
    - 'intranet.cachan-adm.crans.org'
  from_email: "root@crans.org"
  ldap:
    master_password: "{{ vault.ldap_master_password }}"
    uri: "ldap://re2o-ldap.cachan-adm.crans.org/"
    dn: "cn=admin,dc=crans,dc=org"
  database:
      password: "{{ vault.re2o_db_password }}"
      uri: "gulp.cachan-adm.crans.org"

loc_re2o_front:
  server_names:
    - "{{ query('ldap', 'ip', 're2o', 'cachan-adm') | ipv4 | first }}"
    - "[{{ query('ldap', 'ip', 're2o', 'cachan-adm') | ipv6 | first }}]"
    - re2o.cachan-adm.crans.org
    - intranet.cachan-adm.crans.org
    - re2o_crans.crans.org
    - intranet-crans.crans.org