{% if salt['grains.get']('include_secrets', True) %}

include:

  - secrets.role.proxy

{% endif %}

keepalived:

  global_defs:

    router_id: OPENSUSE_NUE

  vrrp_instance:

    VRRP_OPENSUSE_PRIVATE:

      advert_int: 1

      authentication:

        auth_type: PASS

        # auth_pass included from pillar/secrets/role/proxy.sls

      interface: private

      notify: /usr/bin/keepalived_notify_monitoring.sh

      promote_secondaries: ''

      smtp_alert: ''

      virtual_ipaddress:

        - 192.168.254.4/24 dev private

        - 192.168.47.4/24 dev private

        - 172.16.42.103/24 dev login

        # mirrordb.opensuse.org

        - 195.135.221.138/25 dev external

        - 2620:113:80c0:8::15/64 dev external

        # proxy-nue.opensuse.org

        - 195.135.221.140/25 dev external

        - 2620:113:80c0:8::16/64 dev external

        # static.opensuse.org

        - 195.135.221.143/25 dev external

        - 2620:113:80c0:8::18/64 dev external

      virtual_router_id: 51