---
datanommer_db_hostname: db-datanommer01
deployment_type: stg
dns_search1: "stg.rdu3.fedoraproject.org"
dns_search2: "rdu3.fedoraproject.org"
dns_search3: "fedoraproject.org"
env: staging
env_prefix: stg.
env_short: stg
env_suffix: .stg
external: false
freezes: false
host_group: staging
ipa_admin_password: "{{ ipa_stg_admin_password }}"
ipa_realm: STG.FEDORAPROJECT.ORG
ipa_basedn: dc=stg,dc=fedoraproject,dc=org
# IPA details
ipa_server: ipa01.stg.rdu3.fedoraproject.org
ipa_server_nodes:
  - ipa01.stg.rdu3.fedoraproject.org
  - ipa02.stg.rdu3.fedoraproject.org
  - ipa03.stg.rdu3.fedoraproject.org
keycloak_db_hostname: "db-fas01.stg.rdu3.fedoraproject.org"
keycloak_version: "26.3.5"
mirrors_centos_org_cert_file: mirrors.stg.centos.org.cert
# This is the mirrors.stg.centos.org certs
mirrors_centos_org_cert_name: mirrors.stg.centos.org
mirrors_centos_org_key_file: mirrors.stg.centos.org.key
network_connections:
  - autoconnect: yes
    ip:
      address:
        - "{{ eth0_ipv4_ip }}/{{ eth0_ipv4_nm }}"
      dhcp4: no
      dns:
        - "{{ dns1 }}"
        - "{{ dns2 }}"
      dns_search:
        - "{{ dns_search1 }}"
        - "{{ dns_search2 }}"
        - "{{ dns_search3 }}"
      gateway4: "{{ eth0_ipv4_gw }}"
    mac: "{{ ansible_default_ipv4.macaddress }}"
    name: eth0
    type: ethernet
    mtu: 1500
# Do we want to use nftables instead of iptables
nftables: true
ocp_wildcard_cert_file: wildcard-2025.apps.ocp.stg.fedoraproject.org.cert
# This is the openshift wildcard cert for ocp stg
ocp_wildcard_cert_name: wildcard-2025.apps.ocp.stg.fedoraproject.org
ocp_wildcard_int_file: wildcard-2025.apps.ocp.stg.fedoraproject.org.intermediate.cert
ocp_wildcard_key_file: wildcard-2025.apps.ocp.stg.fedoraproject.org.key
# RIP, FAS
primary_auth_source: ipa
SSLCertificateChainFile: wildcard-2026.stg.fedoraproject.org.intermediate.cert
wildcard_cert_file: wildcard-2026.stg.fedoraproject.org.cert
# This is the wildcard certname for our stg proxies.
wildcard_cert_name: wildcard-2026.stg.fedoraproject.org
wildcard_int_file: wildcard-2026.stg.fedoraproject.org.intermediate.cert
wildcard_key_file: wildcard-2026.stg.fedoraproject.org.key

# Zabbix connection vars - overrides on production values
zabbix_server: zabbix.stg.fedoraproject.org
zabbix_auth_key: "{{ zabbix_stg_apikey }}" # in ansible-private repo
zabbix_tls_psk: "{{ zabbix_tls_stg_psk }}" # in ansible-private repo
# This is used to populate the inventory fields, only specific keys are allowed, see
# https://www.zabbix.com/documentation/current/en/manual/api/reference/host/object#host-inventory
zabbix_inventory:
  # Env is not a valid key, so use this field for environment
  deployment_status: staging