---
loc_certbot:
  - dns_rfc2136_server: '10.128.0.30'
    dns_rfc2136_name: certbot_adm_challenge.
    dns_rfc2136_secret: "{{ vault_certbot_adm_dns_secret }}"
    mail: tech.aurore@lists.crans.org
    certname: adm.auro.re
    domains: "*.adm.auro.re"
  - dns_rfc2136_server: '10.128.0.30'
    dns_rfc2136_name: certbot_challenge.
    dns_rfc2136_secret: "{{ vault_certbot_dns_secret }}"
    mail: tech.aurore@lists.crans.org
    certname: auro.re
    domains: "*.auro.re"

loc_nginx:
  servers: []
  ssl:
    - name: adm.auro.re
      cert: /etc/letsencrypt/live/adm.auro.re/fullchain.pem
      cert_key: /etc/letsencrypt/live/adm.auro.re/privkey.pem
      trusted_cert: /etc/letsencrypt/live/adm.auro.re/chain.pem
    - name: auro.re
      cert: /etc/letsencrypt/live/auro.re/fullchain.pem
      cert_key: /etc/letsencrypt/live/auro.re/privkey.pem
      trusted_cert: /etc/letsencrypt/live/auro.re/chain.pem

loc_reverseproxy:
  redirect_tcp:
    - name: Gitea
      port: 2222
      destination: "10.128.0.60:2222"

  redirect_sites:
    - from: 45.66.111.61
      to: intranet.auro.re

  reverseproxy_sites:
    - from: re2o.auro.re
      to: 10.128.0.20
    - from: intranet.auro.re
      to: 10.128.0.20

    - from: nextcloud.auro.re
      to: "10.128.0.58:8080"

    - from: gitea.auro.re
      to: "10.128.0.60:3000"
    - from: git.adm.auro.re
      to: "10.128.0.60:3000"
      ssl: adm.auro.re

    - from: drone.auro.re
      to: "10.128.0.64:8000"

    - from: litl.auro.re
      to: 10.128.0.35

    - from: re2o-test.auro.re
      to: 10.128.0.80

    - from: wikijs.auro.re
      to: "10.128.0.66:3000"

    - from: wiki.auro.re
      to: "10.128.0.66:3000"

    - from: netbox.auro.re
      to: 10.128.0.97

    - from: grafana.auro.re
      to: "10.128.0.98:3000"