include:

  {% if salt['grains.get']('include_secrets', True) %}

  - secrets.role.web_tsp

  {% endif %}

  - role.common.nginx

profile:

  web_tsp:

    database_host: 192.168.47.4

    database_user: web_tsp

nginx:

  ng:

    servers:

      managed:

        tsp.opensuse.org.conf:

          config:

            - upstream tsp:

              - server: unix:///var/cache/tsp/puma.socket

            - server:

                - listen:

                    - 80

                    - default_server

                - server_name: tsp.opensuse.org

                - root: /srv/www/travel-support-program/public

                - keepalive_timeout: 5

                - try_files $uri/index.html $uri @tsp

                - location @tsp:

                    - proxy_set_header: X-Forwarded-For $proxy_add_x_forwarded_for

                    - proxy_set_header: Host $http_host

                    - proxy_pass http://tsp

                - error_page: 500 502 503 504 /50x.html

                - location = /50x.html:

                    - root: /srv/www/htdocs

                - access_log: /var/log/nginx/tsp.access.log combined

                - error_log: /var/log/nginx/tsp.error.log

          enabled: True

sudoers:

  included_files:

    /etc/sudoers.d/group_tsp-admins:

      groups:

        tsp-admins:

          - 'ALL=(ALL) ALL'

zypper:

  repositories:

    openSUSE:infrastructure:tsp:

      baseurl: http://download.infra.opensuse.org/repositories/openSUSE:/infrastructure:/tsp/openSUSE_Leap_$releasever/

      priority: 100

      refresh: True