# Note that the matching is done with re.match()
.+:
  sunet::server:
    disable_all_local_users: true
    disable_ipv6_privacy: true
    encrypted_swap: false
    nftables_init: true
    fail2ban: true
    ssh_allow_from_anywhere: false
    unattended_upgrades: true
'^k8sc[1-9].matrix.test.sunet.se$':
  sunet::microk8s::node:
    channel: 1.28/stable
    traefik: false
    peers:
      - 89.47.191.81 k8sc1
      - 89.47.191.52 k8sc2
      - 89.47.190.141 k8sc3
      - 89.47.190.223 k8sw1
      - 89.47.190.80 k8sw2
      - 89.47.191.178 k8sw3
'^k8sw[1-9].matrix.test.sunet.se$':
  sunet::microk8s::node:
    channel: 1.28/stable
    traefik: false
    peers:
      - 89.47.191.81 k8sc1
      - 89.47.191.52 k8sc2
      - 89.47.190.141 k8sc3
      - 89.47.190.223 k8sw1
      - 89.47.190.80 k8sw2
      - 89.47.191.178 k8sw3