---
sunet_frontend:

  load_balancer:
    haproxy_imagetag: '20230228-stable'
    api_imagetag: 'stable'
    exabgp_imagetag: 'stable'

    peers:
      se-tug-rs-2.sunet.se:
        as: '65434'
        remote_ip: '192.36.171.71'
      se-tug-rs-2.sunet.se_v6:
        as: '65434'
        remote_ip: '2001:6b0:8:7::71'
      se-sthb-rs-1.sunet.se:
        as: '65434'
        remote_ip: '192.36.171.130'
      se-sthb-rs-1.sunet.se_v6:
        as: '65434'
        remote_ip: '2001:6b0:8:1::130'

    websites:
      'thissstaging':
        site_name: 'md-staging.thiss.io'
        frontends:
          'lb-tug-test-1.sunet.se':
            ips: ['37.156.192.5', '2001:6b0:60:c0::5']
          'lb-sthb-test-1.sunet.se':
            ips: ['37.156.192.6', '2001:6b0:60:c0::6']
        backends:
          default:
            'md-staging-1.thiss.io':
              ips: ['89.47.184.98']
              server_args: 'check verify none'
        allow_ports:
          - 80
          - 443
        letsencrypt_server: 'acme-c.sunet.se'
        haproxy_imagetag: '20230228-stable'
        frontendtools_imagetag: '20230228'

      'authtest':
        haproxy_volumes:
          - "/etc/ssl/certs/infra.crt:/etc/ssl/certs/infra.crt:ro"
          - "/opt/frontend/config/ssl/infra_haproxy.crt:/opt/frontend/config/ssl/infra_haproxy.crt:ro"
        site_name: 'auth-test.sunet.se'
        frontends:
          'lb-tug-test-1.sunet.se':
            ips: ['37.156.192.64', '2001:6b0:60:c0::64']
          'lb-sthb-test-1.sunet.se':
            ips: ['37.156.192.65', '2001:6b0:60:c0::65']
        backends:
          default:
            'auth-test-1.sunet.se':
              ips: ['89.47.185.11']
              server_args: 'ssl  alpn h2  crt /opt/frontend/config/ssl/infra_haproxy.crt  verify required  ca-file /etc/ssl/certs/infra.crt  check check-alpn http/1.1'
        allow_ports:
          - 443
          - 80
        letsencrypt_server: 'acme-c.sunet.se'
        haproxy_imagetag: '20230228-stable'
        frontendtools_imagetag: '20230228'

#      'edusealapit':
#        site_name: 'test-api.eduseal.sunet.se'
#        frontends:
#          'tug-lb-1.sunet.se':
#            ips: ['37.156.192.18', '2001:6b0:60:c0::18']
#          'sthb-lb-1.sunet.se':
#            ips: ['37.156.192.19', '2001:6b0:60:c0::19']
#        backends:
#          default:
#            'car-test-1.eduseal.sunet.se':
#              ips: ['89.45.237.159']
#              server_args: 'ssl check verify none'
#        allow_ports:
#          - 80
#          - 443
#        letsencrypt_server: 'acme-c.sunet.se'
#        haproxy_imagetag: '20230228-stable'
#        frontendtools_imagetag: '20230228'