---

acertmgr_mode: webdir

acme_dnskey_file: /etc/acertmgr/nsupdate.key
acme_dnskey_server: neon.binary-kitchen.net

dns_axfr_ips:
- 216.218.133.2
- 2001:470:600::2

dss_domain: dss.binary-kitchen.de
dss_secret: "{{ vault_dss_secret }}"

gogs_domain: git.binary-kitchen.de
gogs_dbname: gogs
gogs_dbuser: gogs
gogs_dbpass: "{{ vault_gogs_dbpass }}"

hackmd_domain: pad.binary-kitchen.de
hackmd_dbname: hackmd
hackmd_dbuser: hackmd
hackmd_dbpass: "{{ vault_hackmd_dbpass }}"
hackmd_secret: "{{ vault_hackmd_secret }}"

ldap_uri: ldaps://ldap.binary.kitchen/
ldap_host: ldap.binary.kitchen
ldap_base: dc=binary-kitchen,dc=de
ldap_binddn: cn=Services,ou=roles,dc=binary-kitchen,dc=de
ldap_bindpw: "{{ vault_ldap_bindpw }}"

librenms_domain: librenms.binary.kitchen
librenms_dbname: librenms
librenms_dbuser: librenms
librenms_dbpass: "{{ vault_librenms_dbpass }}"

mail_domain: binary-kitchen.de
mail_domains:
- ccc-r.de
- ccc-regensburg.de
- makerspace-regensburg.de
mail_server: mail.binary-kitchen.de
mailman_domain: lists.binary-kitchen.de
mail_trusted: 213.166.246.0/28 213.166.246.250/32 [2a02:958:0:f6::]/124
mail_aliases:
- "info@binary-kitchen.de	vorstand@binary-kitchen.de"
- "lebercast@binary-kitchen.de	anti@binary-kitchen.de,dragonchaser@binary-kitchen.de,moepman@binary-kitchen.de,philmacfly@binary-kitchen.de,ralf@binary-kitchen.de"
- "loetworkshop@binary-kitchen.de	marei@binary-kitchen.de,timo.schindler@binary-kitchen.de,venti@binary-kitchen.de"
- "mayday@binary-kitchen.de	anti@binary-kitchen.de"
- "openhab@binary-kitchen.de	noby@binary-kitchen.de"
- "orga@ccc-r.de	orga@ccc-regensburg.de"
- "orga@ccc-regensburg.de	anti@binary-kitchen.de"
- "post@makerspace-regensburg.de	vorstand@binary-kitchen.de"
- "root@binary-kitchen.de	moepman@binary-kitchen.de,kishi@binary-kitchen.de"
- "seife@binary-kitchen.de	anke@binary-kitchen.de"
- "siebdruck@binary-kitchen.de	anke@binary-kitchen.de"
- "vorstand@binary-kitchen.de	anti@binary-kitchen.de,avarrish@binary-kitchen.de,timo.schindler@binary-kitchen.de,zaesa@binary-kitchen.de"
- "voucher1@binary-kitchen.de	exxess@binary-kitchen.de"
- "voucher2@binary-kitchen.de	exxess@binary-kitchen.de"
- "voucher3@binary-kitchen.de	exxess@binary-kitchen.de"
- "voucher4@binary-kitchen.de	exxess@binary-kitchen.de"
- "voucher5@binary-kitchen.de	exxess@binary-kitchen.de"
- "voucher6@binary-kitchen.de	exxess@binary-kitchen.de"
- "voucher7@binary-kitchen.de	exxess@binary-kitchen.de"
- "workshops@binary-kitchen.de	marei@binary-kitchen.de,timo.schindler@binary-kitchen.de,venti@binary-kitchen.de"

nslcd_base_group: ou=groups,dc=binary-kitchen,dc=de
nslcd_base_shadow: ou=people,dc=binary-kitchen,dc=de
nslcd_base_passwd: ou=people,dc=binary-kitchen,dc=de

nextcloud_domain: oc.binary-kitchen.de
nextcloud_dbname: owncloud
nextcloud_dbuser: owncloud
nextcloud_dbpass: "{{ vault_owncloud_dbpass }}"

prosody_admin: moepman@jabber.binary-kitchen.de
prosody_domain: jabber.binary-kitchen.de

racktables_domain: racktables.binary.kitchen
racktables_dbname: racktables
racktables_dbuser: racktables
racktables_dbpass: "{{ vault_racktables_dbpass }}"

radius_secret: "{{ vault_radius_secret }}"

root_keys:
- "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1McRltT0B2bAN1pVDQ+ApJL/rhnvu9gAyGamXwGAgt3V5Q/+VT+KY+0x2T5kgPsuBOio/SDKPY6zoadomU+l3QXtfiE797j7rOjHrIUJor6fMubpVg8jU9E9pytN/vgYSVy286hLmTnHNjTZYlwhMCFA2xAJfyutypY0igAlUh6NNL3PK0LRESd12ttavDX65R2zZpJqBTcKZEXt8y1D+YArxmAa09cS9X4SH8z5h1HWHJ3G60U2nIrdPegADnUXitL5Fup5xok89B4zpILRXz9PmnLXHCTXLu4DamIFPbObnXyjT9gsSMAkOUc6m8TzVgek/7ImL/hQiZU2woQ9p moepman"
- "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJBmZnJLG1WRppbLtOAJw3E4LgLRK0NirfCgpovhhU6h moepman"
- "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIETMJ1JTX+xKC7ML8Or+8wunwy1rjIkp7MfeZLzLIyvP tomoto"
- "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINPlktM2x11cNBMKurf57MLE1XcOm2sGQXguc0tl1vYd rudi@helheim"

slapd_san: ldap.binary.kitchen

snmp_allowed:
- 172.23.2.5
- 172.23.2.6

zammad_domain: zammad.binary-kitchen.de
zammad_dbname: zammad
zammad_dbuser: zammad
zammad_dbpass: "{{ vault_zammad_dbpass }}"