---
interfaces:
  adm: ens18
  srv: ens19

loc_nginx:
  service_name: "thelounge"
  servers:
    - server_name:
        - "irc.crans.org"
        - "irc"
      default: true
      ssl: crans.org
      locations:
        - filter: "^~ /web/"
          params:
            - "proxy_pass http://localhost:9000/"
            - "include \"/etc/nginx/snippets/options-proxypass.conf\""
        - filter: "~ ^/$"
          params:
            - "return 302 https://irc.crans.org/web/"
        - filter: "/"
          params:
            - "return 302 \"https://wiki.crans.org/VieCrans/UtiliserIrc#Via_l.27interface_web\""

loc_thelounge:
  public: "true"

loc_inspircd:
  cloak:
    name: crans
    key: "{{ vault.irc_inspircd_cloak_key }}"
  diepass: "{{ vault.irc_inspircd_diepass }}"
  restartpass: "{{ vault.irc_inspircd_restartpass }}"
  opers: "{{ vault.irc_inspircd_opers }}"
  server:
    name: irc.crans.org
    description: Crans IRC server
    network: Crans
  admin:
    name: Pierre-Elliott Bécue
    nick: PEB
    email: root@crans.org
  bind:
     - address: 185.230.79.11
       type: clients
       clair: 6667
       ssl: 6697
     - address: 2a0c:700:2::ff:fe01:2902
       type: clients
       clair: 6667
       ssl: 6697
     - address : 172.16.10.129
       type: clients
       clair: 6667
     - address: 127.0.0.1
       type: servers
       clair: 6668
  connect:
    - name: zamok
      allows:
        ipv4: 185.230.79.1/32
        ipv6: 2a0c:700:2:0:ec4:7aff:fe59:a1ad/128
      threshold: 1
    - name: irc
      allows:
        ipv4: 185.230.79.11/32
        ipv6: 2a0c:700:2::ff:fe01:2902/128
      threshold: 1
    - name: gitlab
      allows:
        ipv4: 185.230.79.14/32
        ipv6: 2a0c:700:2::ff:fe01:502/128
      threshold: 10
      commandrate: 10000
    - name: monitoring
      allows:
        ipv4: 172.16.10.121/32
        ipv6: fd00::10:ff:fe01:2110/128
      threshold: 10
      commandrate: 10000
      modes: yes
  dns: 185.230.79.62
  services:
    name: services.irc.crans.org
    port: 6668
    recvpass: "{{ vault.irc_anope_recvpass }}"
    sendpass: "{{ vault.irc_anope_sendpass }}"



loc_anope:
  recvpass: "{{ vault.irc_anope_recvpass }}"
  sendpass: "{{ vault.irc_anope_sendpass }}"
  options_seed: "{{ vault.irc_anope_options_seed }}"
  services_roots: "{{ vault.irc_anope_services_roots }}"