---
certbot:
  domains:
    - bbb.auro.re
    - drone.auro.re
    - gitea.auro.re
    - intranet.auro.re
    - nextcloud.auro.re
    - re2o.auro.re
    - re2o-server.auro.re
    - re2o-test.auro.re

  dns_rfc2136_name: certbot_challenge.
  dns_rfc2136_secret: "{{ vault_certbot_dns_secret }}"
  mail: tech.aurore@lists.crans.org
  certname: auro.re
  dns_masters_ipv4:
    - "92.222.211.196"

nginx:
  ssl:
    cert: /etc/letsencrypt/live/auro.re/fullchain.pem
    cert_key: /etc/letsencrypt/live/auro.re/privkey.pem
    trusted_cert: /etc/letsencrypt/live/auro.re/chain.pem

  redirect_dnames:
    - aurores.net
    - fede-aurore.net

  redirect_sites: {}

  reverseproxy_sites:
    - from: re2o.auro.re
      to: 10.128.0.10
    - from: intranet.auro.re
      to: 10.128.0.10

    - from: drone.auro.re
      to: "10.128.0.64:8000"

    - from: re2o-test.auro.re
      to: 10.128.0.100