---
certbot:
  domains:
    - auro.re
    - cas.auro.re
    - codimd.auro.re
    - grafana.auro.re
    - pad.auro.re
    - passbolt.auro.re
    - phabricator.auro.re
    - privatebin.auro.re
    - riot.auro.re
    - sharelatex.auro.re
    - wiki.auro.re
    - www.auro.re
  dns_rfc2136_name: certbot_challenge.
  dns_rfc2136_secret: "{{ vault_certbot_dns_secret }}"
  mail: tech.aurore@lists.crans.org
  certname: auro.re
  dns_masters_ipv4:
    - "92.222.211.196"

nginx:
  ssl:
    cert: /etc/letsencrypt/live/auro.re/fullchain.pem
    cert_key: /etc/letsencrypt/live/auro.re/privkey.pem
    trusted_cert: /etc/letsencrypt/live/auro.re/chain.pem

  redirect_dnames:
    - aurores.net
    - fede-aurore.net

  redirect_sites:
    - from: auro.re
      to: www.auro.re

  reverseproxy_sites:
    - from: phabricator.auro.re
      to: 10.128.0.50

    - from: wiki.auro.re
      to: 10.128.0.51

    - from: www.auro.re
      to: 10.128.0.52

    - from: riot.auro.re
      to: "10.128.0.150:8080"
    - from: codimd.auro.re
      to: "10.128.0.150:8081"
    - from: grafana.auro.re
      to: "10.128.0.150:8082"
    - from: privatebin.auro.re
      to: "10.128.0.150:8083"
    - from: pad.auro.re
      to: "10.128.0.150:8084"
    - from: cas.auro.re
      to: "10.128.0.150:8085"