loc_certbot:
  - dns_rfc2136_server: '172.16.42.103'
    dns_rfc2136_name: certbot_challenge.
    dns_rfc2136_secret: "{{ vault.certbot_dns_secret }}"
    mail: ynerant@crans.org
    certname: ynerant.fr
    domains: "ynerant.fr, *.ynerant.fr, ens.kitchen, *.ens.kitchen, ananas.paris, *.ananas.paris, saperlistpopette.fr, *.saperlistpopette.fr"

loc_nginx:
  servers: []
  ssl:
    - name: ynerant.fr
      cert: /etc/letsencrypt/live/ynerant.fr/fullchain.pem
      cert_key: /etc/letsencrypt/live/ynerant.fr/privkey.pem
      trusted_cert: /etc/letsencrypt/live/ynerant.fr/chain.pem


glob_reverseproxy:
  redirect_dnames: []

  reverseproxy_sites:
    - {from: mailu.ynerant.fr, to: 172.16.42.104}
  # - {from: mirror.adm.ynerant.fr, to: "https://ftps.crans.org"}

    - {from: element.ynerant.fr, to: "172.16.42.199:8002"}
    - {from: hydrogen.ynerant.fr, to: "172.16.42.199:8003"}
    - {from: git.ynerant.fr, to: "172.16.42.199:8007"}
    - {from: cloud.ynerant.fr, to: "172.16.42.199:8007"}
      # - {from: notls.adh.crans.org, to: "172.16.42.199:8011"}
    - {from: thelounge.ynerant.fr, to: "172.16.42.199:8012"}
    - {from: bibliogram.ynerant.fr, to: "172.16.42.199:8014"}
    - {from: reddit.ynerant.fr, to: "172.16.42.199:8015"}
    - {from: teddit.ynerant.fr, to: "172.16.42.199:8015"}
    - {from: whoami.ynerant.fr, to: "172.16.42.199:8016"}

    - {from: saperlistpopette.fr, to: "172.16.42.199:8010"}
    - {from: kfet.saperlistpopette.fr, to: "172.16.42.199:8010"}

    - {from: ens.kitchen, to: "https://perso.crans.org/club-kitchens/"}

  redirect_sites: []
  # - {from: machin.ynerant.fr, to: truc.ynerant.fr}

  static_sites:
    - ynerant.fr
    - thelounge.ynerant.fr