---
# LDAP binding
ldap_uri: 'ldap://10.128.0.11/'
ldap_base: 'dc=auro,dc=re'
ldap_bind_dn: "cn=nslcd,ou=service-users,{{ ldap_base }}"
ldap_passwd: "{{ vault_ldap_passwd }}"

# Scripts will tell users to go there to manage their account
intranet_url: 'https://re2o.auro.re/'

# Users in that group will be able to `sudo`
sudo_group: 'sudoldap'

# SSH keys for root account to use when LDAP is broken
ssh_pub_keys: "{{ vault_ssh_pub_keys }}"