---

acertmgr_mode: webdir

acme_dnskey_file: /etc/acertmgr/nsupdate.key
acme_dnskey_server: neon.binary-kitchen.net

coturn_realm: turn.binary-kitchen.de
coturn_secret: "{{ vault_coturn_secret }}"

dns_axfr_ips:
- 216.218.133.2
- 2001:470:600::2

dhcp_omapi_key: "{{ vault_dhcp_omapi_key }}"

drone_admin: moepman
drone_domain: drone.binary-kitchen.de
drone_dbname: drone
drone_dbuser: drone
drone_dbpass: "{{ vault_drone_dbpass }}"
drone_uipass: "{{ vault_drone_uipass }}"
drone_secret: "{{ vault_drone_secret }}"
drone_gitea_client: "{{ vault_drone_gitea_client }}"
drone_gitea_secret: "{{ vault_drone_gitea_secret }}"

dss_domain: dss.binary-kitchen.de
dss_secret: "{{ vault_dss_secret }}"

gitea_domain: git.binary-kitchen.de
gitea_dbname: gogs
gitea_dbuser: gogs
gitea_dbpass: "{{ vault_gitea_dbpass }}"
gitea_secret: "{{ vault_gitea_secret }}"
gitea_jwt_secret: "{{ vault_gitea_jwt_secret }}"

hackmd_domain: pad.binary-kitchen.de
hackmd_dbname: hackmd
hackmd_dbuser: hackmd
hackmd_dbpass: "{{ vault_hackmd_dbpass }}"
hackmd_secret: "{{ vault_hackmd_secret }}"

icinga_domain: icinga.binary.kitchen
icinga_dbname: icinga
icinga_dbuser: icinga
icinga_dbpass: "{{ vault_icinga_dbpass }}"
icingaweb_dbname: icingaweb
icingaweb_dbuser: icingaweb
icingaweb_dbpass: "{{ vault_icingaweb_dbpass }}"

jitsi_domain: jitsi.binary-kitchen.de
jitsi_admin_email: exxess@binary-kitchen.de

ldap_uri: ldaps://ldap.binary.kitchen
ldap_host: ldap.binary.kitchen
ldap_base: dc=binary-kitchen,dc=de
ldap_binddn: cn=Services,ou=roles,dc=binary-kitchen,dc=de
ldap_bindpw: "{{ vault_ldap_bindpw }}"

librenms_domain: librenms.binary.kitchen
librenms_dbname: librenms
librenms_dbuser: librenms
librenms_dbpass: "{{ vault_librenms_dbpass }}"

mail_domain: binary-kitchen.de
mail_domains:
- ccc-r.de
- ccc-regensburg.de
- makerspace-regensburg.de
mail_postsrsd_secret: "{{ vault_mail_postsrsd_secret }}"
mail_server: mail.binary-kitchen.de
mailman_domain: lists.binary-kitchen.de
mail_trusted:
- 213.166.246.0/28
- 213.166.246.250/32
- 2a02:958:0:f6::/124
mail_aliases:
- "epvpn@binary-kitchen.de	noby@binary-kitchen.de"
- "info@binary-kitchen.de	vorstand@binary-kitchen.de"
- "lebercast@binary-kitchen.de	anti@binary-kitchen.de,dragonchaser@binary-kitchen.de,moepman@binary-kitchen.de,philmacfly@binary-kitchen.de,ralf@binary-kitchen.de"
- "loetworkshop@binary-kitchen.de	timo.schindler@binary-kitchen.de,venti@binary-kitchen.de"
- "mayday@binary-kitchen.de	anti@binary-kitchen.de"
- "openhab@binary-kitchen.de	noby@binary-kitchen.de"
- "orga@ccc-r.de	orga@ccc-regensburg.de"
- "orga@ccc-regensburg.de	anti@binary-kitchen.de"
- "paypal@binary-kitchen.de	timo.schindler@binary-kitchen.de"
- "post@makerspace-regensburg.de	vorstand@binary-kitchen.de"
- "root@binary-kitchen.de	moepman@binary-kitchen.de,kishi@binary-kitchen.de"
- "seife@binary-kitchen.de	anke@binary-kitchen.de"
- "siebdruck@binary-kitchen.de	anke@binary-kitchen.de"
- "vorstand@binary-kitchen.de	anti@binary-kitchen.de,avarrish@binary-kitchen.de,timo.schindler@binary-kitchen.de,zaesa@binary-kitchen.de"
- "voucher1@binary-kitchen.de	exxess@binary-kitchen.de"
- "voucher2@binary-kitchen.de	exxess@binary-kitchen.de"
- "voucher3@binary-kitchen.de	exxess@binary-kitchen.de"
- "voucher4@binary-kitchen.de	exxess@binary-kitchen.de"
- "voucher5@binary-kitchen.de	exxess@binary-kitchen.de"
- "voucher6@binary-kitchen.de	exxess@binary-kitchen.de"
- "voucher7@binary-kitchen.de	exxess@binary-kitchen.de"
- "voucher8@binary-kitchen.de	exxess@binary-kitchen.de"
- "voucher9@binary-kitchen.de	exxess@binary-kitchen.de"
- "voucher10@binary-kitchen.de	exxess@binary-kitchen.de"
- "voucher11@binary-kitchen.de	exxess@binary-kitchen.de"
- "voucher12@binary-kitchen.de	exxess@binary-kitchen.de"
- "wahlleitung@binary-kitchen.de	anke@binary-kitchen.de,toffy@binary-kitchen.de"
- "workshops@binary-kitchen.de	timo.schindler@binary-kitchen.de,venti@binary-kitchen.de"

matrix_domain: matrix.binary-kitchen.de
matrix_dbname: matrix
matrix_dbuser: matrix
matrix_dbpass: "{{ vault_matrix_dbpass }}"

mc_domain: minecraft.binary-kitchen.de

nextcloud_domain: oc.binary-kitchen.de
nextcloud_dbname: owncloud
nextcloud_dbuser: owncloud
nextcloud_dbpass: "{{ vault_owncloud_dbpass }}"

nslcd_base_group: ou=groups,dc=binary-kitchen,dc=de
nslcd_base_shadow: ou=people,dc=binary-kitchen,dc=de
nslcd_base_passwd: ou=people,dc=binary-kitchen,dc=de

plk_domain: plk-regensburg.de
plk_dbuser: plkdbuser
plk_dbname: plkdb
plk_dbpass: "{{ vault_plk_dbpass }}"

prometheus_pve_user: prometheus@pve
prometheus_pve_pass: "{{ vault_prometheus_pve_pass }}"

prosody_admin: moepman@jabber.binary-kitchen.de
prosody_domain: jabber.binary-kitchen.de

pve_targets:
- wurst.binary.kitchen
- salat.binary.kitchen

radius_secret: "{{ vault_radius_secret }}"

root_keys:
- "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJBmZnJLG1WRppbLtOAJw3E4LgLRK0NirfCgpovhhU6h moepman"
- "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINPlktM2x11cNBMKurf57MLE1XcOm2sGQXguc0tl1vYd kishi"

slapd_root_hash: "{SSHA}OB75kTfH6JRyX0dA0fM8/8ldP89qyzb+"
slapd_root_pass: "{{ vault_slapd_root_pass }}"
slapd_san: ldap.binary.kitchen