---
certbot:
  domains:
    - portail.auro.re
  mail: tech.aurore@lists.crans.org
  certname: auro.re

nginx:
  ssl:
    cert: /etc/letsencrypt/live/auro.re/fullchain.pem
    cert_key: /etc/letsencrypt/live/auro.re/privkey.pem
    trusted_cert: /etc/letsencrypt/live/auro.re/chain.pem

  redirect_dnames: {}

  redirect_tcp: {}

  redirect_sites:
    - from: portail.adm.auro.re
      to: portail.auro.re
      norequesturi: true

    - from: 10.128.0.247
      to: portail.auro.re
      norequesturi: true

    - from: 45.66.111.247
      to: portail.auro.re
      norequesturi: true

  reverseproxy_sites:
    - from: portail.auro.re
      to: 10.128.0.20
      custom_args:
        - "allow 45.66.108.251"
        - "allow 45.66.108.252"
        - "allow 45.66.108.253"
        - "allow 45.66.108.254"
        - "allow 45.66.108.255"
        - "deny all"