eid-ops/fe-common/overlay/etc/hiera/data/group.yaml

186 lines
6.1 KiB
YAML

---
sunet_frontend:
load_balancer:
api_imagetag: 'stable'
exabgp_imagetag: 'stable'
port80_acme_c_backend: 'letsencrypt_acme-c.sunet.se'
static_backends:
letsencrypt_acme-c.sunet.se.se:
- '89.45.232.90' # note: port 80
peers:
loke.sunet.se:
as: '65434'
remote_ip: '130.242.124.130'
loke.sunet.se_v6:
as: '65434'
remote_ip: '2001:6b0:7:127::2'
se-tug-rs-1.sunet.se:
as: '65434'
remote_ip: '130.242.125.111'
se-tug-rs-1.sunet.se_v6:
as: '65434'
remote_ip: '2001:6b0:8:4::111'
websites2:
'connector':
site_name: 'connector.eidas.swedenconnect.se'
frontends:
'fe-fre-3.komreg.net':
ips: ['94.176.226.10', '2001:6b0:65:1::10']
'fe-tug-3.komreg.net':
ips: ['94.176.226.11', '2001:6b0:65:1::11']
backends:
default:
'eidas-connector-1.sveidas.se':
ips: ['94.176.224.133']
server_args: 'ssl check verify none cookie ec1'
'eidas-connector-2.sveidas.se':
ips: ['94.176.224.5']
server_args: 'ssl check verify none cookie ec2'
'eidas-connector-3.sveidas.se':
ips: ['94.176.224.134']
server_args: 'ssl check verify none cookie ec3'
'eidas-connector-4.sveidas.se':
ips: ['94.176.224.6']
server_args: 'ssl check verify none cookie ec4'
allow_ports:
- 443
letsencrypt_server: 'acme-c.sunet.se'
haproxy_imagetag: 'stable'
frontendtools_imagetag: 'stable'
'mdeidas':
site_name: 'md.eidas.swedenconnect.se'
frontends:
'fe-fre-3.komreg.net':
ips: ['94.176.226.12', '2001:6b0:65:1::12']
'fe-tug-3.komreg.net':
ips: ['94.176.226.13', '2001:6b0:65:1::13']
backends:
default:
'eupub-1.komreg.net':
ips: ['94.176.224.200']
server_args: 'ssl check verify none'
'eupub-2.komreg.net':
ips: ['94.176.224.72']
server_args: 'ssl check verify none'
allow_ports:
- 443
letsencrypt_server: 'acme-c.sunet.se'
haproxy_imagetag: 'stable'
frontendtools_imagetag: 'stable'
'test':
site_name: 'test.swedenconnect.se'
frontends:
'fe-fre-3.komreg.net':
ips: ['94.176.226.16', '2001:6b0:65:1::16']
'fe-tug-3.komreg.net':
ips: ['94.176.226.17', '2001:6b0:65:1::17']
backends:
default:
'eidas-test-1.sveidas.se':
ips: ['94.176.224.139']
server_args: 'ssl check verify none cookie t1'
'eidas-test-2.sveidas.se':
ips: ['94.176.224.11']
server_args: 'ssl check verify none cookie t2'
allow_ports:
- 443
letsencrypt_server: 'acme-c.sunet.se'
haproxy_imagetag: 'stable'
frontendtools_imagetag: 'stable'
'proxy':
site_name: 'proxy.eidas.swedenconnect.se'
frontends:
'fe-fre-3.komreg.net':
ips: ['94.176.226.18', '2001:6b0:65:1::18']
'fe-tug-3.komreg.net':
ips: ['94.176.226.19', '2001:6b0:65:1::19']
backends:
default:
'eidas-proxy-1.sveidas.se':
ips: ['94.176.224.140']
server_args: 'ssl check verify none cookie p1'
'eidas-proxy-2.sveidas.se':
ips: ['94.176.224.12']
server_args: 'ssl check verify none cookie p2'
'eidas-proxy-3.sveidas.se':
ips: ['94.176.224.141']
server_args: 'ssl check verify none cookie p3'
'eidas-proxy-4.sveidas.se':
ips: ['94.176.224.13']
server_args: 'ssl check verify none cookie p4'
allow_ports:
- 443
letsencrypt_server: 'acme-c.sunet.se'
haproxy_imagetag: 'stable'
frontendtools_imagetag: 'stable'
'md':
site_name: 'md.swedenconnect.se'
frontends:
'fe-fre-3.komreg.net':
ips: ['94.176.226.14', '2001:6b0:65:1::14']
'fe-tug-3.komreg.net':
ips: ['94.176.226.15', '2001:6b0:65:1::15']
backends:
default:
'natpub-1.komreg.net':
ips: ['94.176.224.199']
server_args: 'ssl check verify none'
'natpub-2.komreg.net':
ips: ['94.176.224.71']
server_args: 'ssl check verify none'
allow_ports:
- 443
letsencrypt_server: 'acme-c.sunet.se'
haproxy_imagetag: 'stable'
frontendtools_imagetag: 'stable'
'demweidas':
site_name: 'demw.eidas.swedenconnect.se'
frontends:
'fe-fre-3.komreg.net':
ips: ['94.176.226.20', '2001:6b0:65:1::20']
'fe-tug-3.komreg.net':
ips: ['94.176.226.21', '2001:6b0:65:1::21']
backends:
default:
'demw-1.sveidas.se':
ips: ['94.176.224.252']
server_args: 'ssl check inter 10s verify none'
'demw-2.sveidas.se':
ips: ['94.176.224.125']
server_args: 'ssl check inter 10s verify none'
allow_ports:
- 443
letsencrypt_server: 'acme-c.sunet.se'
haproxy_imagetag: 'stable'
frontendtools_imagetag: 'stable'
'validator':
site_name: 'validator.swedenconnect.se'
frontends:
'fe-fre-3.komreg.net':
ips: ['94.176.226.22', '2001:6b0:65:1::22']
'fe-tug-3.komreg.net':
ips: ['94.176.226.23', '2001:6b0:65:1::23']
backends:
default:
'validator-1.komreg.net':
ips: ['94.176.224.234']
server_args: 'ssl check verify none cookie v1'
'validator-2.komreg.net':
ips: ['94.176.224.106']
server_args: 'ssl check verify none cookie v2'
allow_ports:
- 443
letsencrypt_server: 'acme-c.sunet.se'
haproxy_imagetag: 'stable'
frontendtools_imagetag: 'stable'