---
mariadb_clients:
  - 89.47.184.117 # internal-sto1-prod-radius-1.geteduroam.sunet.se
  - 89.47.184.239 # internal-sto1-prod-app-1.geteduroam.sunet.se
  - 89.47.191.170 # internal-dco-prod-radius-2.geteduroam.sunet.se
  - 89.47.191.96  # internal-dco-prod-app-2.geteduroam.sunet.se
  - 89.45.236.40  # internal-sto3-prod-radius-3.geteduroam.sunet.se
  - 89.45.236.66  # internal-sto3-prod-app-3.geteduroam.sunet.se
mariadb_cluster_nodes:
  - 89.45.237.24  # internal-sto3-prod-db-3.geteduroam.sunet.se
  - 89.47.185.115 # internal-sto1-prod-db-1.geteduroam.sunet.se
  - 89.47.190.224 # internal-dco-prod-db-2.geteduroam.sunet.se

certbot_sync_server: internal-sto1-prod-radius-1.geteduroam.sunet.se
certbot_sync_client_ips:
  - 89.47.191.170       # internal-dco-prod-radius-2.geteduroam.sunet.se
  - 2001:6b0:7d:40::3a9 # internal-dco-prod-radius-2.geteduroam.sunet.se
  - 89.45.236.40        # internal-sto3-prod-radius-3.geteduroam.sunet.se
  - 2001:6b0:40::490    # internal-sto3-prod-radius-3.geteduroam.sunet.se

certbot_sync_client_ssh_keys_db:
   'internal-dco-prod-radius-2':
      key  : 'AAAAC3NzaC1lZDI1NTE5AAAAIP+GrJ0x16grcvV/uh08f4PXxpSi9aVxC7HVPe/LgXbe'
      type : 'ssh-ed25519'
      name : 'internal-dco-prod-radius-2'
      options : 'command="/usr/bin/rrsync /etc/letsencrypt/",no-agent-forwarding,no-port-forwarding,no-pty,no-user-rc,no-X11-forwarding'

certbot_sync_client_ssh_keys_mapping:
  'root':
    - 'internal-dco-prod-radius-2'