---
sunet_frontend:

  load_balancer:
    api_imagetag: 'staging'
    exabgp_imagetag: 'stable'
    port80_acme_c_backend: 'letsencrypt_acme-c.sunet.se'
    static_backends:
      letsencrypt_acme-c.sunet.se.se:
        - '89.47.184.10'  # note: port 80

    peers:
      se-tug-rs-2.sunet.se:
        as: '65434'
        remote_ip: '192.36.171.71'
      se-tug-rs-2.sunet.se_v6:
        as: '65434'
        remote_ip: '2001:6b0:8:7::71'
      se-sthb-rs-1.sunet.se:
        as: '65434'
        remote_ip: '192.36.171.130'
      se-sthb-rs-1.sunet.se_v6:
        as: '65434'
        remote_ip: '2001:6b0:8:1::130'
      se-sto4-rs-1.sunet.se:
        as: '64578'
        remote_ip: 89.46.20.185
      se-sto4-rs-1.sunet.se_v6:
        as: '64578'
        remote_ip: 2001:6b0:6c::3aa
      se-sto3-rs-1.sunet.se:
        as: '64578'
        remote_ip: 89.45.236.202
      se-sto3-rs-1.sunet.se_v6:
        as: '64578'
        remote_ip: 2001:6b0:40::336

    websites2:

      'connectortst':
        site_name: 'test.connector.eidas.swedenconnect.se'
        frontends:
          'fe-fre-1.test.komreg.net':
            ips: ['94.176.226.128', '2001:6b0:65:2::128']
          'fe-tug-1.test.komreg.net':
            ips: ['94.176.226.129', '2001:6b0:65:2::129']
        backends:
          default:
            'connector-test-sto3-1.komreg.net':
              ips: ['89.45.236.201']
              server_args: 'ssl verify required ca-file /etc/ssl/certs/infra.crt cookie ect1'
            'connector-test-sto3-2.komreg.net':
              ips: ['89.45.237.40']
              server_args: 'ssl verify required ca-file /etc/ssl/certs/infra.crt cookie ect1'
            'connector-test-sto3-3.komreg.net':
              ips: ['89.45.237.212']
              server_args: 'ssl verify required ca-file /etc/ssl/certs/infra.crt cookie ect1'
            #'eidas-connector-1.test.sveidas.se':
            #  ips: ['89.45.236.47']
            #'eidas-connector-2.test.sveidas.se':
            #  ips: ['89.45.237.117']
            #  server_args: 'ssl check verify none cookie ect2'
        allow_ports:
          - 443
        letsencrypt_server: 'acme-c.sunet.se'
        haproxy_image: docker.sunet.se/eidas-haproxy
        haproxy_imagetag: 'test'
        frontendtools_image: docker.sunet.se/eidas-frontend-tools
        frontendtools_imagetag: 'staging'
        haproxy_volumes:
          - "/etc/ssl/certs/infra.crt:/etc/ssl/certs/infra.crt:ro"

      'testtest':
        site_name: 'test.test.swedenconnect.se'
        frontends:
          'fe-fre-1.test.komreg.net':
            ips: ['94.176.226.130', '2001:6b0:65:2::130']
          'fe-tug-1.test.komreg.net':
            ips: ['94.176.226.131', '2001:6b0:65:2::131']
        backends:
          default:
            'testmyeid-test-sto3-1.komreg.net':
              ips: ['89.45.237.211','2001:6b0:40::33d']
              server_args: 'ssl check verify none'
          refidp:
            'refidp-1.test.sveidas.se':
              ips: ['89.45.236.193']
              server_args: 'ssl check verify none'
        allow_ports:
          - 443
        letsencrypt_server: 'acme-c.sunet.se'
        haproxy_image: docker.sunet.se/eidas-haproxy
        haproxy_imagetag: 'test'
        frontendtools_image: docker.sunet.se/eidas-frontend-tools
        frontendtools_imagetag: 'staging'

      'proxytest':
        site_name: 'test.proxy.eidas.swedenconnect.se'
        frontends:
          'fe-fre-1.test.komreg.net':
            ips: ['94.176.226.132', '2001:6b0:65:2::132']
          'fe-tug-1.test.komreg.net':
            ips: ['94.176.226.133', '2001:6b0:65:2::133']
        backends:
          default:
            'proxy-test-sto3-1.komreg.net':
              ips: ['89.45.236.56', '2001:6b0:40::36a']
              server_args: 'ssl check verify none cookie p1'
            'proxy-test-sto3-2.komreg.net':
              ips: ['89.45.237.141', '2001:6b0:40::20c']
              server_args: 'ssl check verify none cookie p2'
        allow_ports:
          - 443
        letsencrypt_server: 'acme-c.sunet.se'
        haproxy_image: docker.sunet.se/eidas-haproxy
        haproxy_imagetag: 'test'
        frontendtools_image: docker.sunet.se/eidas-frontend-tools
        frontendtools_imagetag: 'staging'

      'mdeidastest':
        site_name: 'test.md.eidas.swedenconnect.se'
        frontends:
          'fe-fre-1.test.komreg.net':
            ips: ['94.176.226.134', '2001:6b0:65:2::134']
          'fe-tug-1.test.komreg.net':
            ips: ['94.176.226.135', '2001:6b0:65:2::135']
        backends:
          default:
            'eupub-test-1.komreg.net':
              ips: ['89.45.236.252']
              server_args: 'ssl check verify none'
            'eupub-test-2.komreg.net':
              ips: ['89.45.237.8']
              server_args: 'ssl check verify none'
        allow_ports:
          - 443
        letsencrypt_server: 'acme-c.sunet.se'
        haproxy_image: docker.sunet.se/eidas-haproxy
        haproxy_imagetag: 'test'
        frontendtools_image: docker.sunet.se/eidas-frontend-tools
        frontendtools_imagetag: 'staging'

      'mdtest':
        site_name: 'test.md.swedenconnect.se'
        frontends:
          'fe-fre-1.test.komreg.net':
            ips: ['94.176.226.136', '2001:6b0:65:2::136']
          'fe-tug-1.test.komreg.net':
            ips: ['94.176.226.137', '2001:6b0:65:2::137']
        backends:
          default:
            'natpub-test-1.komreg.net':
              ips: ['89.45.237.190']
              server_args: 'ssl check verify none'
            'natpub-test-2.komreg.net':
              ips: ['89.45.237.23']
              server_args: 'ssl check verify none'
        allow_ports:
          - 443
        letsencrypt_server: 'acme-c.sunet.se'
        haproxy_image: docker.sunet.se/eidas-haproxy
        haproxy_imagetag: 'test'
        frontendtools_image: docker.sunet.se/eidas-frontend-tools
        frontendtools_imagetag: 'staging'

      'validatortst':
        site_name: 'test.validator.swedenconnect.se'
        frontends:
          'fe-fre-1.test.komreg.net':
            ips: ['94.176.226.138', '2001:6b0:65:2::138']
          'fe-tug-1.test.komreg.net':
            ips: ['94.176.226.139', '2001:6b0:65:2::139']
        backends:
          default:
            'validator-test-1.komreg.net':
              ips: ['89.45.237.45']
              server_args: 'ssl check verify none'
        allow_ports:
          - 443
        letsencrypt_server: 'acme-c.sunet.se'
        haproxy_image: docker.sunet.se/eidas-haproxy
        haproxy_imagetag: 'test'
        frontendtools_image: docker.sunet.se/eidas-frontend-tools
        frontendtools_imagetag: 'staging'

      'idmtest':
        site_name: 'test.idm.eidas.swedenconnect.se'
        frontends:
          'fe-fre-1.test.komreg.net':
            ips: ['94.176.226.140', '2001:6b0:65:2::140']
          'fe-tug-1.test.komreg.net':
            ips: ['94.176.226.141', '2001:6b0:65:2::141']
        backends:
          default:
            'idm-sto1-test-app-1.komreg.net':
              ips: ['89.47.185.124']
              server_args: 'ssl check verify none'
            'idm-sto3-test-app-3.komreg.net':
              ips: ['89.45.237.180']
              server_args: 'ssl check verify none'
        allow_ports:
          - 443
        letsencrypt_server: 'acme-c.sunet.se'
        haproxy_image: docker.sunet.se/eidas-haproxy
        haproxy_imagetag: 'test'
        frontendtools_image: docker.sunet.se/eidas-frontend-tools
        frontendtools_imagetag: 'staging'

      'demwtest':
        site_name: 'test.demw.eidas.swedenconnect.se'
        frontends:
          'fe-fre-1.test.komreg.net':
            ips: ['94.176.226.142', '2001:6b0:65:2::142']
          'fe-tug-1.test.komreg.net':
            ips: ['94.176.226.143', '2001:6b0:65:2::143']
        backends:
          default:
            'demw-1.test.sveidas.se':
              ips: ['89.45.236.166']
              server_args: 'ssl check verify none'
        allow_ports:
          - 443
        letsencrypt_server: 'acme-c.sunet.se'
        haproxy_image: docker.sunet.se/eidas-haproxy
        haproxy_imagetag: 'test'
        frontendtools_image: docker.sunet.se/eidas-frontend-tools
        frontendtools_imagetag: 'staging'