- hosts: muck
  remote_user: root
  become: yes
  roles:
    - sane_debian_system
    - unix_users
    - comfortable
    - haproxy
    - qvisqve
    - muck
  vars:
    hostname: muck

    debian_codename: stretch
    debian_mirror: deb.debian.org
    debian_mirror_src: deb.debian.org

    sources_lists:
      - repo: "deb http://ci-prod-controller.vm.liw.fi/debian stretch-ci main ickhost"
        signing_key: "{{ ci_prod_apt_signing_key }}"

    letsencrypt_email: liw@liw.fi
    letsencrypt_domain: "{{ muck_domain }}"

    haproxy_domain: "{{ muck_domain }}"
    haproxy_rules:
      - name: qvisqve1
        path: /token
        backends: ["127.0.0.1:{{ qvisqve_port }}"]

      - name: qvisqve2
        path: /clients
        backends: ["127.0.0.1:{{ qvisqve_port }}"]

      - name: muck1
        path: /status
        backends: ["127.0.0.1:{{ muck_port }}"]

      - name: muck2
        path: /res
        backends: ["127.0.0.1:{{ muck_port }}"]

      - name: muck3
        path: /search
        backends: ["127.0.0.1:{{ muck_port }}"]

    muck_port: 12765

    qvisqve_port: 10000
    qvisqve_domain: "{{ muck_domain }}"
    qvisqve_token_private_key: "{{ lookup('pipe', 'pass show ick2/token_key') }}"
    qvisqve_token_public_key: "{{ lookup('pipe', 'pass show ick2/token_key.pub') }}"