include:
  - role.common.nginx
  {% if salt['grains.get']('include_secrets', True) %}
  - secrets.role.web_elections
  {% endif %}

nginx:
  servers:
    managed:
      elections.opensuse.org.conf:
        config:
          - upstream helios:
            - server: unix:/srv/www/vhosts/helios-server/tmp/sockets/helios.sock fail_timeout=0
          - server:
            - listen: '[::]:80'
            - location /:
              - include: /etc/nginx/uwsgi_params
              - uwsgi_pass: helios
            - server_name: elections.opensuse.org
            - try_files: $uri/index.html $uri.html $uri @helios
            - access_log: /var/log/nginx/elections.access.log combined
            - error_log: /var/log/nginx/elections.error.log
        enabled: True

# postgres:users:helios:password included from pillar/secrets/role/web_elections.sls

profile:
  helios:
    allowed_hosts:
      - elections.opensuse.org
      - localhost
    database_host: postgresql.infra.opensuse.org
    database_name: helios
    database_user: helios
    database_sslmode: True
    default_from_email: election-officials@opensuse.org
    default_from_name: openSUSE Election Officials
    election_creators:
      # admins
      - cboltz
      # election officials
      - AJV
      - Ishwon
      - medwin
    help_email_address: election-officials@opensuse.org
    # secret_key included from pillar/secrets/role/web_elections.sls
    url_host: https://elections.opensuse.org

zypper:
  repositories:
    openSUSE:infrastructure:elections.opensuse.org:
      baseurl: http://download.infra.opensuse.org/repositories/openSUSE:/infrastructure:/elections.opensuse.org/$releasever/
      priority: 100
      refresh: True