{% if salt['grains.get']('include_secrets', True) %}
include:
  - secrets.role.proxy
{% endif %}

keepalived:
  global_defs:
    router_id: OPENSUSE_NUE
  vrrp_sync_group:
    VRRP_OPENSUSE_PRIVATE_GROUP:
      group:
        - VRRP_OPENSUSE_PRIVATE_IPV4
        - VRRP_OPENSUSE_PRIVATE_IPV6
  vrrp_instance:
    VRRP_OPENSUSE_PRIVATE_IPV4:
      advert_int: 1
      authentication:
        auth_type: PASS
        # auth_pass included from pillar/secrets/role/proxy.sls
      interface: private
      notify: /usr/bin/keepalived_notify_monitoring.sh
      promote_secondaries: ''
      smtp_alert: ''
      virtual_ipaddress:
        - 192.168.47.4/24 dev private
        # proxy-nue.opensuse.org
        - 195.135.221.140/25 dev external
        # static.opensuse.org
        - 195.135.221.143/25 dev external
      virtual_router_id: 51
    VRRP_OPENSUSE_PRIVATE_IPV6:
      advert_int: 1
      authentication:
        auth_type: PASS
        # auth_pass included from pillar/secrets/role/proxy.sls
      interface: private
      notify: /usr/bin/keepalived_notify_monitoring.sh
      promote_secondaries: ''
      smtp_alert: ''
      virtual_ipaddress:
        # proxy-nue.opensuse.org
        - 2001:67c:2178:8::16/64 dev external
        # static.opensuse.org
        - 2001:67c:2178:8::18/64 dev external
      virtual_router_id: 51

profile:
  postfix:
    maincf:
      relayhost: ''