eid-ops/fe-common/overlay/etc/hiera/data/group.yaml

---
sunet_frontend:

  load_balancer:
    api_imagetag: 'staging'
    exabgp_imagetag: 'staging'
    port80_acme_c_backend: 'letsencrypt_acme-c.sunet.se'
    static_backends:
      letsencrypt_acme-c.sunet.se.se:
        - '89.45.232.90'  # note: port 80

    peers:
      loke.sunet.se:
        as: '65434'
        remote_ip: '130.242.124.130'
      loke.sunet.se_v6:
        as: '65434'
        remote_ip: '2001:6b0:7:127::2'
      se-tug-rs-1.sunet.se:
        as: '65434'
        remote_ip: '130.242.125.111'
      se-tug-rs-1.sunet.se_v6:
        as: '65434'
        remote_ip: '2001:6b0:8:4::111'


    websites2:

      'connector':
        site_name: 'connector.eidas.swedenconnect.se'
        frontends:
          'fe-fre-3.komreg.net':
            ips: ['94.176.226.10']
          'fe-tug-3.komreg.net':
            ips: ['94.176.226.11']
        backends:
          default:
            'eidas-connector-1.sveidas.se':
              ips: ['94.176.224.133']
              server_args: 'ssl check verify none'
            'eidas-connector-2.sveidas.se':
              ips: ['94.176.224.5']
              server_args: 'ssl check verify none'
            'eidas-connector-3.sveidas.se':
              ips: ['94.176.224.134']
              server_args: 'ssl check verify none'
            'eidas-connector-4.sveidas.se':
              ips: ['94.176.224.6']
              server_args: 'ssl check verify none'
        allow_ports:
          - 443
        letsencrypt_server: 'acme-c.sunet.se'
        haproxy_imagetag: 'staging'