{% set host = salt['grains.get']('host') %}

include:
  - secrets.role.proxy

keepalived:
  global_defs:
    notification_email_from: keepalived+{{ host }}@opensuse.org
    notification_email:
      - admin-auto@opensuse.org
    router_id: OPENSUSE_NUE
    smtp_connect_timeout: 30
    smtp_server: relay.infra.opensuse.org
  vrrp_instance:
    VRRP_OPENSUSE_PRIVATE:
      advert_int: 1
      authentication:
        auth_type: PASS
        # auth_pass included from pillar/secrets/role/proxy.sls
      interface: private
      notify: /usr/bin/keepalived_notify_monitoring.sh
      promote_secondaries: ''
      smtp_alert: ''
      virtual_ipaddress:
        - 192.168.254.4/24 dev private
        - 192.168.47.4/24 dev private
        - 172.16.42.103/24 dev login
        # mirrordb.opensuse.org
        - 195.135.221.138/25 dev external
        - 2001:67c:2178:8::15/64 dev external
        # proxy-nue.opensuse.org
        - 195.135.221.140/25 dev external
        - 2001:67c:2178:8::16/64 dev external
        # static.opensuse.org
        - 195.135.221.143/25 dev external
        - 2001:67c:2178:8::18/64 dev external
      virtual_router_id: 51
zypper:
  packages:
    monitoring-plugins-keepalived: {}