{% if salt['grains.get']('include_secrets', True) %}
include:
- secrets.role.proxy
{% endif %}
keepalived:
global_defs:
router_id: OPENSUSE_NUE
vrrp_sync_group:
VRRP_OPENSUSE_PRIVATE_GROUP:
group:
- VRRP_OPENSUSE_PRIVATE_IPV4
- VRRP_OPENSUSE_PRIVATE_IPV6
vrrp_instance:
VRRP_OPENSUSE_PRIVATE_IPV4:
advert_int: 1
authentication:
auth_type: PASS
# auth_pass included from pillar/secrets/role/proxy.sls
interface: private
notify: /usr/bin/keepalived_notify_monitoring.sh
promote_secondaries: ''
smtp_alert: ''
virtual_ipaddress:
- 192.168.47.4/24 dev private
- 172.16.42.103/24 dev login
# proxy-nue.opensuse.org
- 195.135.221.140/25 dev external
# static.opensuse.org
- 195.135.221.143/25 dev external
virtual_router_id: 51
VRRP_OPENSUSE_PRIVATE_IPV6:
advert_int: 1
authentication:
auth_type: PASS
# auth_pass included from pillar/secrets/role/proxy.sls
interface: private
notify: /usr/bin/keepalived_notify_monitoring.sh
promote_secondaries: ''
smtp_alert: ''
virtual_ipaddress:
# proxy-nue.opensuse.org
- 2001:67c:2178:8::16/64 dev external
# static.opensuse.org
- 2001:67c:2178:8::18/64 dev external
virtual_router_id: 51
profile:
postfix:
maincf:
relayhost: ''