include:

  - role.common.nginx

  {% if salt['grains.get']('include_secrets', True) %}

  - secrets.role.web_elections

  {% endif %}

nginx:

  servers:

    managed:

      elections.opensuse.org.conf:

        config:

          - upstream helios:

            - server: unix:/srv/www/vhosts/helios-server/tmp/sockets/helios.sock fail_timeout=0

          - server:

            - listen: '[::]:80'

            - location /:

              - include: /etc/nginx/uwsgi_params

              - uwsgi_pass: helios

            - server_name: elections.opensuse.org

            - try_files: $uri/index.html $uri.html $uri @helios

            - access_log: /var/log/nginx/elections.access.log combined

            - error_log: /var/log/nginx/elections.error.log

        enabled: True

# postgres:users:helios:password included from pillar/secrets/role/web_elections.sls

profile:

  helios:

    allowed_hosts:

      - elections.opensuse.org

      - localhost

    database_host: postgresql.infra.opensuse.org

    database_name: helios

    database_user: helios

    database_sslmode: True

    default_from_email: election-officials@opensuse.org

    default_from_name: openSUSE Election Officials

    election_creators:

      # admins

      - cboltz

      # election officials

      - AJV

      - Ishwon

      - medwin

    help_email_address: election-officials@opensuse.org

    # secret_key included from pillar/secrets/role/web_elections.sls

    url_host: https://elections.opensuse.org

zypper:

  repositories:

    openSUSE:infrastructure:elections.opensuse.org:

      baseurl: http://download.infra.opensuse.org/repositories/openSUSE:/infrastructure:/elections.opensuse.org/$releasever/

      priority: 100

      refresh: True