---

ansible_user: root
ansible_python_interpreter: auto_silent
notify_email: bestuur@bitlair.nl
acme_bootstrap_certs: no
trusted_ranges:
  - { v: ipv4, cidr: "127.0.0.1/8", comment: "localhost" }
  - { v: ipv4, cidr: "10.0.0.0/8", comment: "rfc1918" }
  - { v: ipv4, cidr: "172.16.0.0/12", comment: "rfc1918" }
  - { v: ipv4, cidr: "192.168.0.0/16", comment: "rfc1918" }
  - { v: ipv4, cidr: "45.88.49.140", comment: "vihamij" }
  - { v: ipv4, cidr: "204.2.64.0/20", comment: "eventinfra" }
  - { v: ipv4, cidr: "100.64.0.0/10", comment: "bitlair" }
  - { v: ipv4, cidr: "185.205.52.194/32", comment: "bitlair" }
  - { v: ipv4, cidr: "31.187.251.213/32", comment: "foobar" }
#  - { v: ipv6, cidr: "::/0", comment: "ipv6 localhost" }
#  - { v: ipv6, cidr: "fe80::/10", comment: "ipv6 link-local" }
#  - { v: ipv6, cidr: "2a02:166b:92::/48", comment: "bitlair" } # /48's kunnen niet in de ipset
  - { v: ipv6, cidr: "2001:678:814:68::/64", comment: "bitlair wifi" }
  - { v: ipv6, cidr: "2a05:2d01:0:4042::/64", comment: "bitlair servers" }
  - { v: ipv6, cidr: "2a0e:5700:4:2::/64", comment: "foobar" }

root_access:
  - ak
  - foobar
  - polyfloyd
  - wilco

mqtt_internal_host: mqtt.bitlair.nl
mqtt_public_host: bitlair.nl

debian_repourl: "http://deb.debian.org/debian/"
debian_securityurl: "http://security.debian.org/debian-security"