---

# Custom header
dirty: "{% if template_path is defined %}{{ lookup('pipe', 'git diff --quiet -- ' + template_path | quote + ' || echo dirty') }}{% else %}{{ lookup('pipe', 'git diff --quiet || echo dirty') }}{% endif %}"
ansible_header: |
    +++++++++++++++++++++++++++++++++++++++++++++++++++

       Ansible managed, don't modify the file locally.
       See https://gitlab.crans.org/nounous/ansible.
       {% if template_path is defined %}{% set _, rpath = template_path.split('roles/', 1) %}Commit: {% if dirty %}({{dirty}}) {% endif %}{{ lookup('pipe', 'git log -n 1 --pretty=format:%H -- ' + template_path | quote) }}
       {% if dirty %}Run by: {{ ansible_env.SUDO_USER }}
       {% else %}Author: {{ lookup('pipe', 'git log -n 1 --pretty=format:%an -- ' + template_path | quote) }}
       {% endif %}Template: roles/{{ rpath }}
       {% else %}
       Run by: {{ ansible_env.SUDO_USER }}
       Latest commit: {% if dirty %}({{dirty}}) {% endif %}{{ lookup('pipe', 'git rev-parse HEAD') }}
       {% endif %}

    +++++++++++++++++++++++++++++++++++++++++++++++++++

# Crans subnets
adm_subnet: 10.231.136.0/24

# # Role rsync-client
# to_backup:
#   - {
#   name: "var",
#   path: "/var",
#   auth_users: "backupcrans",
#   secrets_file: "/etc/rsyncd.secrets",
#   hosts_allow: ["zephir.adm.crans.org", "10.231.136.6"],
#   }
#   - {
#   name: "slash",
#   path: "/",
#   auth_users: "backupcrans",
#   secrets_file: "/etc/rsyncd.secrets",
#   hosts_allow: ["zephir.adm.crans.org", "10.231.136.6"],
#   }
#
# re2o:
#   server: re2o.adm.crans.org
#   service_user: "{{ vault_re2o_service_user }}"
#   service_password: "{{ vault_re2o_service_password }}"
#
#
# # global server definitions
glob_smtp: smtp.adm.crans.org
glob_mirror:
  name: mirror.adm.crans.org
  ip: 172.16.10.30

glob_ldap:
  uri: 'ldap://re2o-ldap.adm.crans.org/'
  users_base: 'cn=Utilisateurs,dc=crans,dc=org'
  servers:
    - 172.16.10.1
    - 172.16.10.11
    - 172.16.10.12
    - 172.16.10.13
  base: 'dc=crans,dc=org'

home_nounous:
  ip: 172.16.10.1