---
certbot:
  domains:
    - auro.re
    - chat.auro.re  # cname to riot.auro.re
    - codimd.auro.re
    - grafana.auro.re
    - hedgedoc.auro.re  # cname to codimd.auro.re
    - pad.auro.re
    - passbolt.auro.re
    - paste.auro.re  # cname to privatebin.auro.re
    - phabricator.auro.re
    - privatebin.auro.re
    - riot.auro.re
    - sharelatex.auro.re
    - status.auro.re
    - wiki.auro.re
    - www.auro.re
    - zero.auro.re  # cname to privatebin.auro.re
  mail: tech.aurore@lists.crans.org
  certname: auro.re

nginx:
  ssl:
    cert: /etc/letsencrypt/live/auro.re/fullchain.pem
    cert_key: /etc/letsencrypt/live/auro.re/privkey.pem
    trusted_cert: /etc/letsencrypt/live/auro.re/chain.pem

  redirect_dnames:
    - aurores.net
    - fede-aurore.net

  redirect_tcp: {}

  redirect_sites:
    - from: www.auro.re
      to: auro.re
    - from: 92.222.211.195
      to: auro.re

  reverseproxy_sites:
    - from: phabricator.auro.re
      to: 10.128.0.50

    - from: wiki.auro.re
      to: 10.128.0.51

    - from: www.auro.re
      to: 10.128.0.52

    - from: passbolt.auro.re
      to: 10.128.0.53

    - from: riot.auro.re
      to: "10.128.0.150:8080"
    - from: element.auro.re
      to: "10.128.0.150:8080"
    - from: chat.auro.re
      to: "10.128.0.150:8080"

    - from: codimd.auro.re
      to: "10.128.0.150:8081"
    - from: hedgedoc.auro.re
      to: "10.128.0.150:8081"

    - from: grafana.auro.re
      to: "10.128.0.150:8082"

    - from: privatebin.auro.re
      to: "10.128.0.150:8083"
    - from: zero.auro.re
      to: "10.128.0.150:8083"
    - from: paste.auro.re
      to: "10.128.0.150:8083"

    - from: pad.auro.re
      to: "10.128.0.150:8084"
    - from: etherpad.auro.re
      to: "10.128.0.150:8084"

    - from: cas.auro.re
      to: "10.128.0.150:8085"
    - from: status.auro.re
      to: "10.128.0.150:8086"