---
sunet_frontend:

  load_balancer:
    api_imagetag: 'staging'
    exabgp_imagetag: 'staging'
    port80_acme_c_backend: 'letsencrypt_acme-c.dev.eduid.se'
    static_backends:
      letsencrypt_acme-c.dev.eduid.se:
        - '2001:6b0:54:c3::acac:80'  # note: port 80

    peers:
      loke.sunet.se:
        as: '65434'
        remote_ip: '130.242.124.130'
      loke.sunet.se_v6:
        as: '65434'
        remote_ip: '2001:6b0:7:127::2'
      se-tug-rs-1.sunet.se:
        as: '65434'
        remote_ip: '130.242.125.111'
      se-tug-rs-1.sunet.se_v6:
        as: '65434'
        remote_ip: '2001:6b0:8:4::111'


    websites2:

      'www':
        site_name: 'www.dev.eduid.se'
        frontends:
          'fe-fre-1.eduid.se':
            ips: ['130.242.131.61', '2001:6b0:54:fe::61']
          'fe-tug-1.eduid.se':
            ips: ['130.242.131.62', '2001:6b0:54:fe::62']
        backends:
          default:
            'www-fre-1.eduid.se':
              ips: ['130.242.130.200']
              server_args: 'ssl check verify none'
        csp_ext_src: 'https://dev.eduid.se https://www.dev.eduid.se'
        allow_ports:
          - 443
        letsencrypt_server: 'acme-c.dev.eduid.se'
        varnish_enabled: true
        varnish_imagetag: 'staging'
        haproxy_imagetag: 'staging'

      'idp':
        site_name: 'idp.dev.eduid.se'
        frontends:
          'fe-fre-1.eduid.se':
            ips: ['130.242.131.21', '2001:6b0:54:fe::21']
          'fe-tug-1.eduid.se':
            ips: ['130.242.131.22', '2001:6b0:54:fe::22']
        backends:
          default:
            'idp-tug-1.eduid.se':
              ips: ['130.242.131.18']
              server_args: 'ssl check verify none cookie tug-1'
            'idp-fre-1.eduid.se':
              ips: ['130.242.130.214']
              server_args: 'ssl check verify none cookie fre-1'
          'mfa_add':
            'kvm-tug-1.eduid.se':
              ips: ['130.242.130.217']
              server_args: 'check'
        csp_app_src: 'https://idp.dev.eduid.se'
        csp_ext_src: 'https://dev.eduid.se https://www.dev.eduid.se'
        allow_ports:
          - 443
        letsencrypt_server: 'acme-c.dev.eduid.se'
        haproxy_imagetag: 'staging'

      'dashboard':
        site_name: 'dashboard.dev.eduid.se'
        frontends:
          'fe-fre-1.eduid.se':
            ips: ['130.242.131.51', '2001:6b0:54:fe::51']
          'fe-tug-1.eduid.se':
            ips: ['130.242.131.52', '2001:6b0:54:fe::52']
        backends:
          default:
            'dash-tug-1.eduid.se':
              ips: ['130.242.130.197']
              server_args: 'ssl check verify none check cookie tug-1 weight 25'
            'dash-fre-1.eduid.se':
              ips: ['130.242.130.213']
              server_args: 'ssl check verify none check cookie fre-1 weight 25'
            'apps-tug-1.eduid.se':
              ips: ['130.242.130.206']
              server_args: 'ssl check verify none check cookie apps-tug-1 weight 25'
            'apps-fre-1.eduid.se':
              ips: ['130.242.130.207']
              server_args: 'ssl check verify none check cookie apps-fre-1 weight 25'
          old:
            'dash-tug-1.eduid.se':
              ips: ['130.242.130.197']
              server_args: 'ssl check verify none check cookie tug-1'
            'dash-fre-1.eduid.se':
              ips: ['130.242.130.213']
              server_args: 'ssl check verify none check cookie fre-1'
          new:
            'apps-tug-1.eduid.se':
              ips: ['130.242.130.206']
              server_args: 'ssl check verify none check cookie apps-tug-1'
            'apps-fre-1.eduid.se':
              ips: ['130.242.130.207']
              server_args: 'ssl check verify none check cookie apps-fre-1'
        csp_app_src: 'https://dashboard.dev.eduid.se'
        csp_ext_src: 'https://dev.eduid.se https://www.dev.eduid.se'
        allow_ports:
          - 443
        letsencrypt_server: 'acme-c.dev.eduid.se'
        haproxy_imagetag: 'staging'

      'signup':
        site_name: 'signup.dev.eduid.se'
        frontends:
          'fe-fre-1.eduid.se':
            ips: ['130.242.131.41', '2001:6b0:54:fe::41']
          'fe-tug-1.eduid.se':
            ips: ['130.242.131.42', '2001:6b0:54:fe::42']
        backends:
          default:
            'signup-tug-1.eduid.se':
              ips: ['130.242.130.212']
              server_args: 'ssl check verify none cookie tug-1'
        csp_app_src: 'https://signup.dev.eduid.se'
        csp_ext_src: 'https://dev.eduid.se https://www.dev.eduid.se'
        csp_google_src: 'https://www.google.com/recaptcha/'
        csp_gstatic_src: 'https://www.gstatic.com/recaptcha/'
        allow_ports:
          - 443
        letsencrypt_server: 'acme-c.dev.eduid.se'
        haproxy_imagetag: 'staging'

      'support':
        site_name: 'support.dev.eduid.se'
        frontends:
          'fe-fre-1.eduid.se':
            ips: ['130.242.131.31', '2001:6b0:54:fe::31']
          'fe-tug-1.eduid.se':
            ips: ['130.242.131.32', '2001:6b0:54:fe::32']
        backends:
          default:
            'dash-tug-1.eduid.se':
              ips: ['130.242.130.197']
              server_args: 'ssl check verify none cookie tug-1'
              'dash-fre-1.eduid.se':
                ips: ['130.242.130.213']
                server_args: 'ssl check verify none cookie fre-1'
        csp_app_src: 'https://support.dev.eduid.se'
        csp_ext_src: 'https://dev.eduid.se https://www.dev.eduid.se'
        allow_ports:
          - 443
        letsencrypt_server: 'acme-c.dev.eduid.se'
        haproxy_imagetag: 'staging'

      'selegop':
        site_name: 'op1.se-leg.se'
        frontends:
          'fe-fre-1.eduid.se':
            ips: ['130.242.131.36', '2001:6b0:54:fe::36']
          'fe-tug-1.eduid.se':
            ips: ['130.242.131.37', '2001:6b0:54:fe::37']
        backends:
          default:
            'dash-tug-1.eduid.se':
              ips: ['130.242.130.197']
              server_args: 'check verify none cookie tug-1'
            'dash-fre-1.eduid.se':
              ips: ['130.242.130.213']
              server_args: 'check verify none cookie fre-1'
        allow_ports:
          - 443
        letsencrypt_server: 'acme-c.dev.eduid.se'
        haproxy_imagetag: 'staging'

      'monitor':
        site_name: 'monitor.dev.eduid.se'
        frontends:
          'fe-fre-1.eduid.se':
            ips: ['130.242.131.11', '2001:6b0:54:fe::11']
          'fe-tug-1.eduid.se':
            ips: ['130.242.131.12', '2001:6b0:54:fe::12']
        backends:
          default:
            'monitor-fre-1.eduid.se':
              ips: ['130.242.130.218']
              server_args: 'ssl check verify none'
        csp_app_src: 'https://monitor.dev.eduid.se'
        csp_ext_src: 'https://dev.eduid.se https://www.dev.eduid.se'
        allow_ports:
          - 443
        letsencrypt_server: 'acme-c.dev.eduid.se'
        haproxy_imagetag: 'staging'