net-ops/lb-common/overlay/etc/hiera/data/group.yaml

---
sunet_frontend:

  load_balancer:
    haproxy_imagetag: '20230228-stable'
    api_imagetag: 'stable'
    exabgp_imagetag: 'stable'

    peers:
      se-tug-rs-2.sunet.se:
        as: '65434'
        remote_ip: '192.36.171.71'
      se-tug-rs-2.sunet.se_v6:
        as: '65434'
        remote_ip: '2001:6b0:8:7::71'
      se-sthb-rs-1.sunet.se:
        as: '65434'
        remote_ip: '192.36.171.130'
      se-sthb-rs-1.sunet.se_v6:
        as: '65434'
        remote_ip: '2001:6b0:8:1::130'

    websites:
      'edusealapit':
        site_name: 'test-api.eduseal.sunet.se'
        frontends:
          'tug-lb-1.sunet.se':
            ips: ['37.156.192.18', '2001:6b0:60:c0::18']
          'sthb-lb-1.sunet.se':
            ips: ['37.156.192.19', '2001:6b0:60:c0::19']
        backends:
          default:
            'car-test-1.eduseal.sunet.se':
              ips: ['89.45.237.159']
              server_args: 'ssl check verify none'
        allow_ports:
          - 80
          - 443
        letsencrypt_server: 'acme-c.sunet.se'
        haproxy_imagetag: '20230228-stable'
        frontendtools_imagetag: '20230228'

      'edusealapi':
        site_name: 'api.eduseal.sunet.se'
        frontends:
          'tug-lb-1.sunet.se':
            ips: ['37.156.192.104', '2001:6b0:60:c0::104']
          'sthb-lb-1.sunet.se':
            ips: ['37.156.192.105', '2001:6b0:60:c0::105']
        backends:
          default:
            'car-prod-1.eduseal.sunet.se':
              ips: ['89.45.236.85']
              server_args: 'ssl check verify none'
            'car-prod-2.eduseal.sunet.se':
              ips: ['89.45.237.154']
              server_args: 'ssl check verify none'
        allow_ports:
          - 80
          - 443
        letsencrypt_server: 'acme-c.sunet.se'
        haproxy_imagetag: '20230228-stable'
        frontendtools_imagetag: '20230228'

      'geteduroam':
        site_name: 'geteduroam.se'
        frontends:
          'tug-lb-1.sunet.se':
            ips: ['37.156.192.108', '2001:6b0:60:c0::108']
          'sthb-lb-1.sunet.se':
            ips: ['37.156.192.109', '2001:6b0:60:c0::109']
        backends:
          default:
            'internal-sto1-prod-app-1.geteduroam.sunet.se':
              ips: ['89.47.184.239', '2001:6b0:5a:4020::41d']
              server_args: 'ssl check verify none'
            'internal-dco-prod-app-2.geteduroam.sunet.se':
              ips: ['89.47.191.96', '2001:6b0:7d:40::19c']
              server_args: 'ssl check verify none'
            'internal-sto3-prod-app-3.geteduroam.sunet.se':
              ips: ['89.45.236.66', '2001:6b0:40::3f']
              server_args: 'ssl check verify none'
        allow_ports:
          - 80
          - 443
        letsencrypt_server: 'acme-c.sunet.se'
        haproxy_imagetag: '20230228-stable'
        frontendtools_imagetag: '20230228'

      'scdemwqa':
        site_name: 'qa.demw.eidas.swedenconnect.se'
        frontends:
          'tug-lb-1.sunet.se':
            ips: ['37.156.192.42', '2001:6b0:60:c0::42']
          'sthb-lb-1.sunet.se':
            ips: ['37.156.192.43', '2001:6b0:60:c0::43']
        backends:
          default:
            'demw-1.qa.sveidas.se':
              ips: ['89.47.184.66']
              server_args: 'ssl check verify none'
        allow_ports:
          - 443
          - 80
        letsencrypt_server: 'acme-c.sunet.se'
        eidas_proxy_auth: 'cianMiShreldajOoburiryeuGroyld'
        haproxy_imagetag: '20230228-stable'
        frontendtools_imagetag: '20230228'

      'artisanidp':
        site_name: 'artisan-idp-proxy.sunet.se'
        frontends:
          'tug-lb-1.sunet.se':
            ips: ['37.156.192.3', '2001:6b0:60:c0::3']
          'sthb-lb-1.sunet.se':
            ips: ['37.156.192.4', '2001:6b0:60:c0::4']
        backends:
          default:
            'artisan-saas-idp-proxy-1.sunet.se':
              ips: ['89.47.185.109']
              server_args: 'ssl check verify none'
            'artisan-saas-idp-proxy-3.sunet.se':
              ips: ['89.46.21.236']
              server_args: 'ssl check verify none'
        allow_ports:
          - 443
          - 80
        letsencrypt_server: 'acme-c.sunet.se'
        haproxy_imagetag: '20230228-stable'
        frontendtools_imagetag: '20230228'

      'outscan':
        site_name: 'outscan-idp-proxy.sunet.se'
        frontends:
          'tug-lb-1.sunet.se':
            ips: ['37.156.192.68', '2001:6b0:60:c0::68']
          'sthb-lb-1.sunet.se':
            ips: ['37.156.192.69', '2001:6b0:60:c0::69']
        backends:
          default:
            'outscan-idp-proxy-1.sunet.se':
              ips: ['89.45.236.70']
              server_args: 'ssl check verify none'
        allow_ports:
          - 443
          - 80
        letsencrypt_server: 'acme-c.sunet.se'
        haproxy_imagetag: '20230228-stable'
        frontendtools_imagetag: '20230228'

      'forum':
        site_name: 'forum.sunet.se'
        frontends:
          'tug-lb-1.sunet.se':
            ips: ['37.156.192.15', '2001:6b0:60:c0::15']
          'sthb-lb-1.sunet.se':
            ips: ['37.156.192.16', '2001:6b0:60:c0::16']
        backends:
          default:
            'forum-1.sunet.se':
              ips: ['89.45.236.168']
              server_args: 'ssl check verify none'
        allow_ports:
          - 443
          - 80
        letsencrypt_server: 'acme-c.sunet.se'
        haproxy_imagetag: '20230228-stable'
        frontendtools_imagetag: '20230228'

      'humhubidp':
        site_name: 'humhub-idp-proxy.sunet.se'
        frontends:
          'tug-lb-1.sunet.se':
            ips: ['37.156.192.13', '2001:6b0:60:c0::13']
          'sthb-lb-1.sunet.se':
            ips: ['37.156.192.14', '2001:6b0:60:c0::14']
        backends:
          default:
            'humhub-idp-proxy-1.sunet.se':
              ips: ['89.45.236.42']
              server_args: 'ssl check verify none'
            'humhub-idp-proxy-2.sunet.se':
              ips: ['89.47.185.213']
              server_args: 'ssl check verify none'
        allow_ports:
          - 443
          - 80
        letsencrypt_server: 'acme-c.sunet.se'
        haproxy_imagetag: '20230228-stable'
        frontendtools_imagetag: '20230228'

      'sunetidp':
        site_name: 'idp.sunet.se'
        frontends:
          'tug-lb-1.sunet.se':
            ips: ['37.156.192.20', '2001:6b0:60:c0::20']
          'sthb-lb-1.sunet.se':
            ips: ['37.156.192.21', '2001:6b0:60:c0::21']
        backends:
          default:
            'idp-2.sunet.se':
              ips: ['192.36.171.241']
              server_args: 'ssl check verify none cookie idp2'
            'idp-3.sunet.se':
              ips: ['89.45.237.76']
              server_args: 'ssl check verify none cookie idp3'
        allow_ports:
          - 443
          - 80
        letsencrypt_server: 'acme-c.sunet.se'
        haproxy_imagetag: '20230228-stable'
        frontendtools_imagetag: '20230228'

      'zoomidp':
        site_name: 'zoom-saas-idp-proxy.sunet.se'
        frontends:
          'tug-lb-1.sunet.se':
            ips: ['37.156.192.26', '2001:6b0:60:c0::26']
          'sthb-lb-1.sunet.se':
            ips: ['37.156.192.27', '2001:6b0:60:c0::27']
        backends:
          default:
            'zoom-saas-idp-proxy-3.sunet.se':
              ips: ['192.36.171.243']
              server_args: 'ssl check verify none'
            'zoomproxy-sto1-prod-1.sunet.se':
              ips: ['89.47.184.173']
              server_args: 'ssl check verify none'
        allow_ports:
          - 443
          - 80
        letsencrypt_server: 'acme-c.sunet.se'
        haproxy_imagetag: '20230228-stable'
        frontendtools_imagetag: '20230228'

      'driveidp':
        site_name: 'drive-idp-proxy.sunet.se'
        frontends:
          'tug-lb-1.sunet.se':
            ips: ['37.156.192.9', '2001:6b0:60:c0::9']
          'sthb-lb-1.sunet.se':
            ips: ['37.156.192.10', '2001:6b0:60:c0::10']
        backends:
          default:
            'drive-idp-proxy-1.sunet.se':
              ips: ['89.45.237.92']
              server_args: 'ssl check verify none'
            'drive-idp-proxy-2.sunet.se':
              ips: ['89.46.20.165']
              server_args: 'ssl check verify none'
        allow_ports:
          - 443
          - 80
        letsencrypt_server: 'acme-c.sunet.se'
        haproxy_imagetag: '20230228-stable'
        frontendtools_imagetag: '20230228'

      'kubetest':
        site_name: 'kubetest.streams.sunet.se'
        frontends:
          'tug-lb-1.sunet.se':
            ips: ['37.156.192.38', '2001:6b0:60:c0::38']
          'sthb-lb-1.sunet.se':
            ips: ['37.156.192.39', '2001:6b0:60:c0::39']
        backends:
          default:
            'internal-dco-test-k8sc-1.streams.sunet.se':
              ips: ['89.47.191.134']
              haproxy_config: '  server SERVER_v4 REMOTE_IP:PORT'
              server_args: 'check inter 1s rise 30 fall 3'
            'internal-dco-test-k8sc-2.streams.sunet.se':
              ips: ['89.47.191.169']
              haproxy_config: '  server SERVER_v4 REMOTE_IP:PORT'
              server_args: 'check inter 1s rise 30 fall 3'
            'internal-dco-test-k8sc-3.streams.sunet.se':
              ips: ['89.47.190.18']
              haproxy_config: '  server SERVER_v4 REMOTE_IP:PORT'
              server_args: 'check inter 1s rise 30 fall 3'
        allow_ports:
          - 16443
          - 443
          - 80
        haproxy_imagetag: '20230228-stable'
        frontendtools_imagetag: '20230228'

      'sveidas1':
        site_name: 'qa.proxy.eidas.swedenconnect.se'
        frontends:
          'tug-lb-1.sunet.se':
            ips: ['37.156.192.30', '2001:6b0:60:c0::30']
          'sthb-lb-1.sunet.se':
            ips: ['37.156.192.31', '2001:6b0:60:c0::31']
        backends:
          default:
            'eidas-proxy-1.qa.sveidas.se':
              ips: ['89.47.184.111']
              haproxy_config: '  server SERVER_v4 REMOTE_IP:PORT'
              server_args: 'ssl check verify none'
        allow_ports:
          - 443
          - 80
        letsencrypt_server: 'acme-c.sunet.se'
        eidas_proxy_auth: 'cianMiShreldajOoburiryeuGroyld'
        haproxy_imagetag: '20230228-stable'
        frontendtools_imagetag: '20230228'

      'sveidas2':
        site_name: 'qa.connector.eidas.swedenconnect.se'
        frontends:
          'tug-lb-1.sunet.se':
            ips: ['37.156.192.32', '2001:6b0:60:c0::32']
          'sthb-lb-1.sunet.se':
            ips: ['37.156.192.33', '2001:6b0:60:c0::33']
        backends:
          default:
            'eidas-node-1.qa.sveidas.se':
              ips: ['89.47.185.69']
              server_args: 'ssl check verify none'
        allow_ports:
          - 443
          - 80
        letsencrypt_server: 'acme-c.sunet.se'
        eidas_proxy_auth: 'cianMiShreldajOoburiryeuGroyld'
        haproxy_imagetag: '20230228-stable'
        frontendtools_imagetag: '20230228'

      'sweconn1':
        site_name: 'qa.md.swedenconnect.se'
        frontends:
          'tug-lb-1.sunet.se':
            ips: ['37.156.192.34', '2001:6b0:60:c0::34']
          'sthb-lb-1.sunet.se':
            ips: ['37.156.192.35', '2001:6b0:60:c0::35']
        backends:
          default:
            'p1.komreg.net':
              ips: ['89.47.185.233']
              server_args: 'ssl check verify none'
        allow_ports:
          - 443
          - 80
        letsencrypt_server: 'acme-c.sunet.se'
        eidas_proxy_auth: 'cianMiShreldajOoburiryeuGroyld'
        haproxy_imagetag: '20230228-stable'
        frontendtools_imagetag: '20230228'

      'sweconn2':
        site_name: 'qa.md.eidas.swedenconnect.se'
        frontends:
          'tug-lb-1.sunet.se':
            ips: ['37.156.192.36', '2001:6b0:60:c0::36']
          'sthb-lb-1.sunet.se':
            ips: ['37.156.192.37', '2001:6b0:60:c0::37']
        backends:
          default:
            'p2.qa.komreg.net':
              ips: ['89.47.184.153']
              server_args: 'ssl check verify none'
        allow_ports:
          - 443
          - 80
        letsencrypt_server: 'acme-c.sunet.se'
        eidas_proxy_auth: 'cianMiShreldajOoburiryeuGroyld'
        haproxy_imagetag: '20230228-stable'
        frontendtools_imagetag: '20230228'

      'scapi':
        site_name: 'api.swedenconnect.se'
        frontends:
          'tug-lb-1.sunet.se':
            ips: ['37.156.192.11', '2001:6b0:60:c0::11']
          'sthb-lb-1.sunet.se':
            ips: ['37.156.192.12', '2001:6b0:60:c0::12']
        backends:
          default:
            'eidastest-1.qa.sveidas.se':
              ips: ['89.47.185.83']
              server_args: 'ssl check verify none'
        allow_ports:
          - 443
          - 80
        letsencrypt_server: 'acme-c.sunet.se'
        eidas_proxy_auth: 'cianMiShreldajOoburiryeuGroyld'
        haproxy_imagetag: '20230228-stable'
        frontendtools_imagetag: '20230228'

      'sctestqa':
        site_name: 'qa.test.swedenconnect.se'
        frontends:
          'tug-lb-1.sunet.se':
            ips: ['37.156.192.40', '2001:6b0:60:c0::40']
          'sthb-lb-1.sunet.se':
            ips: ['37.156.192.41', '2001:6b0:60:c0::41']
        backends:
          default:
            'test-1.qa.sveidas.se':
              ips: ['89.47.184.60']
              server_args: 'ssl check verify none'
          refidp:
            'refidp-1.qa.sveidas.se':
              ips: ['89.47.184.213']
              server_args: 'ssl check verify none'
        allow_ports:
          - 443
          - 80
        letsencrypt_server: 'acme-c.sunet.se'
        eidas_proxy_auth: 'cianMiShreldajOoburiryeuGroyld'
        haproxy_imagetag: '20230228-stable'
        frontendtools_imagetag: '20230228'

      'idmqa':
        site_name: 'qa.idm.eidas.swedenconnect.se'
        frontends:
          'tug-lb-1.sunet.se':
            ips: ['37.156.192.96', '2001:6b0:60:c0::96']
          'sthb-lb-1.sunet.se':
            ips: ['37.156.192.97', '2001:6b0:60:c0::97']
        backends:
          default:
            'idm-sto1-qa-app-1.komreg.net':
              ips: ['89.47.184.15']
              server_args: 'ssl check verify none'
            'idm-sto3-qa-app-2.komreg.net':
              ips: ['89.45.236.223']
              server_args: 'ssl check verify none'
            'idm-sto1-qa-app-3.komreg.net':
              ips: ['89.47.184.233']
              server_args: 'ssl check verify none'
        allow_ports:
          - 80
          - 443
        letsencrypt_server: 'acme-c.sunet.se'
        eidas_proxy_auth: 'cianMiShreldajOoburiryeuGroyld'
        haproxy_imagetag: '20230228-stable'
        frontendtools_imagetag: '20230228'

      'sunetse':
        site_name: 'sunet.se'
        frontends:
          'tug-lb-1.sunet.se':
            ips: ['37.156.192.50', '2001:6b0:60:c0::50']
          'sthb-lb-1.sunet.se':
            ips: ['37.156.192.51', '2001:6b0:60:c0::51']
        backends:
          default:
            'web-b1.sunet.se':
              ips: ['89.47.185.81']
              server_args: 'ssl check verify none'
            'web-b2.sunet.se':
              ips: ['89.47.185.150']
              server_args: 'ssl check verify none'
            'web-b3.sunet.se':
              ips: ['192.36.171.85']
              server_args: 'ssl check verify none'
            'web-sb1.sunet.se':
              ips: ['192.36.171.160']
              server_args: 'ssl check verify none backup'
        allow_ports:
          - 443
          - 80
        letsencrypt_server: 'acme-c.sunet.se'
        haproxy_imagetag: '20230228-stable'
        frontendtools_imagetag: '20230228'

      'ers':
        site_name: 'ers.sunet.se'
        frontends:
          'tug-lb-1.sunet.se':
            ips: ['37.156.192.92', '2001:6b0:60:c0::92']
          'sthb-lb-1.sunet.se':
            ips: ['37.156.192.93', '2001:6b0:60:c0::93']
        backends:
          default:
            'projecttool-prod-1.sunet.se':
              ips: ['89.47.184.234']
              server_args: 'ssl check verify none'
        allow_ports:
          - 443
          - 80
        letsencrypt_server: 'acme-c.sunet.se'
        haproxy_imagetag: '20230228-stable'
        frontendtools_imagetag: '20230228'

      'fidusmd':
        site_name: 'md.fidus.skolverket.se'
        frontends:
          'tug-lb-1.sunet.se':
            ips: ['37.156.192.46', '2001:6b0:60:c0::46']
          'sthb-lb-1.sunet.se':
            ips: ['37.156.192.47', '2001:6b0:60:c0::47']
        backends:
          default:
            'pub-1.fidus.sunet.se':
              ips: ['130.242.132.147']
              server_args: 'ssl check verify none'
            'pub-2.fidus.sunet.se':
              ips: ['130.242.132.19']
              server_args: 'ssl check verify none'
          test:
            'p-test-1.fidus.sunet.se':
              ips: ['89.45.236.10']
              server_args: 'ssl check verify none'
        allow_ports:
          - 443
          - 80
        letsencrypt_server: 'acme-c.sunet.se'
        haproxy_imagetag: '20230228-stable'
        frontendtools_imagetag: '20230228'

      'fidusds':
        haproxy_volumes:
          - "/opt/frontend/config/common/robots.txt:/opt/frontend/config/common/robots.txt:ro"
        site_name: 'ds.fidus.skolverket.se'
        frontends:
          'tug-lb-1.sunet.se':
            ips: ['37.156.192.48', '2001:6b0:60:c0::48']
          'sthb-lb-1.sunet.se':
            ips: ['37.156.192.49', '2001:6b0:60:c0::49']
        backends:
          default:
            'dsi-3.fidus.sunet.se':
              ips: ['130.242.132.149']
              server_args: 'ssl check verify none'
            'dsi-4.fidus.sunet.se':
              ips: ['130.242.132.21']
              server_args: 'ssl check verify none'
          test:
            'dsi-test-2.fidus.sunet.se':
              ips: ['89.45.236.191']
              server_args: 'ssl check verify none'
        allow_ports:
          - 443
          - 80
        letsencrypt_server: 'acme-c.sunet.se'
        haproxy_imagetag: '20230228-stable'
        frontendtools_imagetag: '20230228'

      'signgnt':
        site_name: 'edusign.geant.org'
        frontends:
          'tug-lb-1.sunet.se':
            ips: ['37.156.192.78', '2001:6b0:60:c0::78']
          'sthb-lb-1.sunet.se':
            ips: ['37.156.192.79', '2001:6b0:60:c0::79']
        backends:
          default:
            'signapp-geant-sthb-1.edusign.sunet.se':
              ips: ['130.242.113.24']
              server_args: 'ssl check verify none'
        allow_ports:
          - 443
          - 80
        letsencrypt_server: 'acme-c.sunet.se'
        haproxy_imagetag: '20230228-stable'
        frontendtools_imagetag: '20230228'

      'sigsvcgnt':
        site_name: 'signservice-geant.edusign.sunet.se'
        frontends:
          'tug-lb-1.sunet.se':
            ips: ['37.156.192.90', '2001:6b0:60:c0::90']
          'sthb-lb-1.sunet.se':
            ips: ['37.156.192.91', '2001:6b0:60:c0::91']
        backends:
          default:
            'signservice-sthb-1.edusign.sunet.se':
              ips: ['130.242.113.22']
              server_args: 'ssl check verify none'
        allow_ports:
          - 443
          - 80 
        letsencrypt_server: 'acme-c.sunet.se'
        haproxy_imagetag: '20230228-stable'
        frontendtools_imagetag: '20230228'

      'apignt':
        site_name: 'apignt.edusign.sunet.se'
        frontends:
          'tug-lb-1.sunet.se':
            ips: ['37.156.192.44', '2001:6b0:60:c0::44']
          'sthb-lb-1.sunet.se':
            ips: ['37.156.192.45', '2001:6b0:60:c0::45']
        backends:
          default:
            'signapi-sthb-1.edusign.sunet.se':
              ips: ['130.242.113.23']
              server_args: 'ssl check verify none'
        allow_ports:
          - 443
          - 80
        letsencrypt_server: 'acme-c.sunet.se'
        haproxy_imagetag: '20230228-stable'
        frontendtools_imagetag: '20230228'

      'edusign':
        site_name: 'edusign.sunet.se'
        frontends:
          'tug-lb-1.sunet.se':
            ips: ['37.156.192.56', '2001:6b0:60:c0::56']
          'sthb-lb-1.sunet.se':
            ips: ['37.156.192.57', '2001:6b0:60:c0::57']
        backends:
          default:
            'signapp-tug-1.edusign.sunet.se':
              ips: ['130.242.113.4']
              server_args: 'ssl check verify none'
        allow_ports:
          - 443
          - 80
        letsencrypt_server: 'acme-c.sunet.se'
        haproxy_imagetag: '20230228-stable'
        frontendtools_imagetag: '20230228'

      'edusignapi':
        site_name: 'api.edusign.sunet.se'
        frontends:
          'tug-lb-1.sunet.se':
            ips: ['37.156.192.24', '2001:6b0:60:c0::24']
          'sthb-lb-1.sunet.se':
            ips: ['37.156.192.25', '2001:6b0:60:c0::25']
        backends:
          default:
            'signapp-sthb-1.edusign.sunet.se':
              ips: ['130.242.113.21']
              server_args: 'ssl check verify none'
        allow_ports:
          - 443
          - 80
        letsencrypt_server: 'acme-c.sunet.se'
        haproxy_imagetag: '20230228-stable'
        frontendtools_imagetag: '20230228'

      'validator':
        site_name: 'validator.edusign.sunet.se'
        frontends:
          'tug-lb-1.sunet.se':
            ips: ['37.156.192.7', '2001:6b0:60:c0::7']
          'sthb-lb-1.sunet.se':
            ips: ['37.156.192.8', '2001:6b0:60:c0::8']
        backends:
          default:
            'validator-sthb-1.edusign.sunet.se':
              ips: ['130.242.113.20']
              server_args: 'ssl check verify none'
        allow_ports:
          - 443
          - 80
        letsencrypt_server: 'acme-c.sunet.se'
        haproxy_imagetag: '20230228-stable'
        frontendtools_imagetag: '20230228'

      'rutprod':
        site_name: 'kubeprod.rut.sunet.se'
        frontends:
          'tug-lb-1.sunet.se':
            ips: ['37.156.192.94', '2001:6b0:60:c0::94']
          'sthb-lb-1.sunet.se':
            ips: ['37.156.192.95', '2001:6b0:60:c0::95']
        backends:
          default:
            'internal-sto4-prod-k8sc-0.rut.sunet.se':
              ips: ['2001:6b0:6c::1dd', '89.46.21.223']
            'internal-sto4-prod-k8sc-1.rut.sunet.se':
              ips: ['2001:6b0:6c::27f', '89.46.21.87']
            'internal-sto4-prod-k8sc-2.rut.sunet.se':
              ips: ['2001:6b0:6c::3b7', '89.46.20.39']
        allow_ports:
          - 80
          - 443
        haproxy_imagetag: '20230228-stable'
        frontendtools_imagetag: '20230228'

      'fidusdsmd1':
        site_name: 'dsmd-kvm.fidus.sunet.se'
        frontends:
          'tug-lb-1.sunet.se':
            ips: ['37.156.192.60', '2001:6b0:60:c0::60']
          'sthb-lb-1.sunet.se':
            ips: ['37.156.192.61', '2001:6b0:60:c0::61']
        backends:
          default:
            'dsmd-3.fidus.sunet.se':
              ips: ['130.242.132.148']
            'dsmd-4.fidus.sunet.se':
              ips: ['130.242.132.20']
        allow_ports:
          - 80
          - 443
        letsencrypt_server: 'acme-c.sunet.se'
        haproxy_imagetag: '20230228-stable'
        frontendtools_imagetag: '20230228'

      'fidusdsmd2':
        site_name: 'dsmd-sto4.fidus.sunet.se'
        frontends:
          'tug-lb-1.sunet.se':
            ips: ['37.156.192.112', '2001:6b0:60:c0::112']
          'sthb-lb-1.sunet.se':
            ips: ['37.156.192.113', '2001:6b0:60:c0::113']
        backends:
          default:
            'dsmd-sto4-prod-mdq-1.fidus.sunet.se':
              ips: ['89.46.20.201', '2001:6b0:6c::49f']
            'dsmd-sto4-prod-mdq-2.fidus.sunet.se':
              ips: ['89.46.21.205', '2001:6b0:6c::321']
        allow_ports:
          - 80
          - 443
        letsencrypt_server: 'acme-c.sunet.se'
        haproxy_imagetag: '20230228-stable'
        frontendtools_imagetag: '20230228'