diff options
Diffstat (limited to 'hiera/donkey.yaml')
-rw-r--r-- | hiera/donkey.yaml | 91 |
1 files changed, 53 insertions, 38 deletions
diff --git a/hiera/donkey.yaml b/hiera/donkey.yaml index ec19b63..a6d36eb 100644 --- a/hiera/donkey.yaml +++ b/hiera/donkey.yaml @@ -3,6 +3,8 @@ api: ca_cert_uri: "https://unstable.bitmask.net/ca.crt" domain: api.unstable.bitmask.net port: 4430 + uri: "https://api.unstable.bitmask.net:4430/1" + version: 1 contacts: - sysdev@leap.se definition_files: @@ -190,6 +192,10 @@ hosts: ip_address: "199.119.112.205" port: 22 alpaca: + aliases: + - api.mail.bitmask.net + - mail.bitmask.net + - nicknym.mail.bitmask.net domain_full: alpaca.mail.bitmask.net domain_internal: alpaca.mail.bitmask.i host_pub_key: "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtpKckyjDgSw555znY6Ww2ZHzYZvNkf/dm6Xml4SVM4hFTUVIhgAuFXoUcMjwOcAzbnqPdZN/zGCzTGGBnPrw9YvwaP2oso1b/tysEGYvemvxJlLxo7wQKLbTj8u89LahGFZhoUBFxIX6u0f4gBFURGKHgotyjRJq5tM19CjgnO7L3lhjXl/04Zd5mmQPoHuGNi8wjxZVHLi+cbmG1qXFIXhqb1nDjq2dJh+NJGRZ4IrkkNYYB/V1RlQvHfJ6eof7pyVUWLwyOBe11DkyOooKl/pOkH4jVVCKP2Asbdu7nlqq6il88pQpL0CsikikWvMgWJ9TqafI2kBJ6QX484foH" @@ -213,12 +219,6 @@ hosts: host_pub_key: "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCd44smDJpmCINOnmZdyJO4x/kfziCi/UZiPMplCZN3RLEj8/eqhTo/imXNYXvx8AlwMIUsvVs4D79ukFPqICn7CF5xPuOuz+Og+Dk1rpD68Jomws13N194nOisDHlXwxmQCdFd2w+0FENd+tUmrx7AM1eQmg6D2WRw+Hmb17C7fdJwlCXz8bfTWnEWDvpwgVchpszy3WwX9Ul01j7IH3yKEM4c9GwWjJ8LgJfI1jR1jKnD6xZxuqbQ7aRoer2b6PIrIfsTB/JpuI9FtbjMuGCBusFf2+5lP/bsXeLGWU5smgGyjGNwa9ceUrhklNyXBQMz3wlBwXe4Q8u1LmM5Yi0Z" ip_address: "176.53.69.22" port: 4422 - cowbird: - domain_full: cowbird.cdev.bitmask.net - domain_internal: cowbird.cdev.bitmask.i - host_pub_key: "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCraaEPNaV43AZ2N0zlxwnGzaqsSU+sBtz3PlId1NZqYv27UYIXw1WKPPhLbdfcVQxM0pVSsTZ8hsfztGrRn9yW1JNzp59GjRxenOzCVen08YLlY9eKEI3UNB8nMh4HuVWxQGOiaqovCN3e0KcwImD7J35eOW14NCQ8zvzVHwIL/VhO+wpQ6ofJ0pFP78w/EZ/arbHIM4teWyRGJzcBe++kFqWoaj8Yxbdgo2ZW4iyqCwpaxLk7KHM2op/FSwrEs/cnlwyCq+xjP3QLjDT2TRgwEQycTGABhcqrJJ1SVo4sKE0DvjhVHsAy5OI296k7OE5pbGXn2ZUc2TsPUttdUajt" - ip_address: "199.119.112.152" - port: 22 demodex: domain_full: demodex.dev.bitmask.net domain_internal: demodex.dev.bitmask.i @@ -232,6 +232,10 @@ hosts: ip_address: "199.119.112.150" port: 22 donkey: + aliases: + - api.unstable.bitmask.net + - nicknym.unstable.bitmask.net + - unstable.bitmask.net domain_full: donkey.unstable.bitmask.net domain_internal: donkey.unstable.bitmask.i host_pub_key: "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDeGJUfpwMo9Iw6cSY4Z5SRuJ9/DjxEUU37qF35MfhLnSzaQO8I/SATo93X5wL+wP4M9XxJoOhiB3PQh27QfAKiDr6ZT5xAqYCThG/vLx9v7bP9ROayZxaSisMxI0hVOXAzFt5CXX0W0Bh9XlM8rhmdobnAIhqm2vt1g6seYRCPGLX7O6qgddveFQ7TzL6eFco55nlhHXhM+s3rXTY5FCOCB5zETW80zpKencwdt2H8+CDhYru/rRKbv1BDvvM28+noOrMS1MLjKeCLvHKNFymNdOSqdmBwyiNE6afpuVXDq+Q+CG/0qvbyDEJX31CnGtHYkz3LBqOBh+OOi6YfqTl" @@ -244,6 +248,10 @@ hosts: ip_address: "37.218.240.50" port: 22 elephant: + aliases: + - api.dev.bitmask.net + - dev.bitmask.net + - nicknym.dev.bitmask.net domain_full: elephant.dev.bitmask.net domain_internal: elephant.dev.bitmask.i host_pub_key: "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDbVBsw4Hnwoh1h+/J5NP6Uj6s1ViumP6zeeAtrr/ma/NrvR3x1bXmy/O396zbuFER6a8EyhGwY6WI+vKTjKWMGlOaNyNO7s9CB/keFBx4GGTcx55oHFb/WU0BzFUBoLjfEgelx/03+NIrZyW2XaPYDPdmNOfxMtetBziLugTXsXONIZBD4/QCt+LvbYdjWtziCH/EsdFuetDZ+WZrrUjCHyg2Lm8Xd48U/QrfPUb0oP8QZfoToN5l2Mxx7CnxX1s606zc/kkeaiF6+ATUPJ/6CTTdXZUN3Mg9dFMMyyZLB4TpSX7ldnwE2Wkvc/ngQjS/L8YBoMxsywPw7Q2+rFlV" @@ -255,11 +263,11 @@ hosts: host_pub_key: "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDR/YWDsdYumj5mYunnLgQSuoNMKcItqQT/cmPkFCRp5WERouxdu/GW/0F78K+FyRTp3xwEzJ3BCF/5lbgDH9pRBLiezH+d2Lj2STz82EL0TtOTRtAhF+sK6X2/HFJ6PiIkmAlGGFiw09VR8aGdIhY9FaJATClUWEqjtdFd9BplLWasrmuEVN4kHe2dcO6SxHAfdsmhqd7YdpvfkhenBI1ZPAPYWk72fFFdV35gYBf1H1DewBcobuUCUbd+5EvTJnOfYum9noZBcQScvjuXX/pn4yHefNxh7qBlD92V1hJhK7CHiU4nw2Z4bM2oMLr6Jw81PhQf732DACPrNT+GcEEx" ip_address: "1.209.122.123" port: 22 - goldeneye: - domain_full: goldeneye.cdev.bitmask.net - domain_internal: goldeneye.cdev.bitmask.i - host_pub_key: "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD0UeOcj5frFsFK6CxTojMr9M/Fg3/3yBmsMtEP/wGiEZ1uTmbuYSzYUicashNPrQ3NnXEmLfmQbumKT1BL2p+EtN942poQSKA3sQWNemTErJcPr3vNN5vXXcXNoTDd8WmUOOnWMw5CkMv9kkgEN2jYfQNR1olofUn7eB5e9Iu24d4IaTupLzT+e3Jh+nkH5Uqw/JMmMkoy6nvYt9OmSQ+fvZZnuMatGSgOSpLgjajIvR115ga8QYEiQ76ugO+K+afvrSe5k8/puH+Xh0B5x1OlwxaGfIfYpi9IITdzMVvr/kEop7FG4184FehdlWS5DcUPZT5dicZLVlntelU+hlLb" - ip_address: "199.119.112.153" + gecko: + domain_full: gecko.cdev.bitmask.net + domain_internal: gecko.cdev.bitmask.i + host_pub_key: "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQeFFXLYpG4uHjeNrZXR0aKMGL+w7j51fS4UEC/GDvU3o7NrPV3zsn1M/O7k8LZ4rRRfPAL5RScTosAZIC4GTWpZfZPeg75+4uRv4jQuzuBV7e7dhnKHJkCXmNHbpn0BmieEw7KthX8wjV1Z9YJ951fVUJcvH/Z8gf9KREMpQa6JwtybyqJh0sPNROSEm/dG25W6KmHQAEyFyiHUR5vb/5Knt0cVLpVH6c8Wwb4O6OhtNoggMkoZLhXBwiDMwqc8f4qefX1P4WWXJSWKK8Ui51346j4hrMvB50V6VE5xPp8VkA45a+wrWlBRyXC+utkwPB08ZouL1F4Z2Ak7QQ+GD3" + ip_address: "1.209.122.112" port: 22 hippo: domain_full: hippo.bitmask.net @@ -279,18 +287,22 @@ hosts: host_pub_key: "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBG02MrdDFaqZO11JbYSAAC5q/W/FCch3AQXo+dRcpErvHLmv9kWkrV1ESqfZ+s6qEfk8Aqv0vsym7YigMiGXlBo=" ip_address: "198.252.153.83" port: 4422 + mudskipper: + aliases: + - api.cdev.bitmask.net + - cdev.bitmask.net + - nicknym.cdev.bitmask.net + domain_full: mudskipper.cdev.bitmask.net + domain_internal: mudskipper.cdev.bitmask.i + host_pub_key: "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXYzyrBvN1kkOgHkfc7cH3dgJC6nxnulO+6QsaX3kQuFHb6m4rKfEOPYZyzmZlrKXboAUuUDVH55Q8/Drao7QT1XtnIEC6R73tlcMmJuSTfl2IQMEaIA9voE59+Q8cWmMu5O9nzzMssZTjrMZtpfatiJ1aFntumAyjKQ0vFK4s1owBg07Yt0LDchAwBXYpELX/4pZYE2vpHrQsgH9zV/DPOZTFtXAr9SR94NXIPa6P06LEAjtYCqY2sEu2BB+OHysJNHuFJF74/l859YM5gkdd0cbn1LX0/6ch4dtqqDvydKZNlura7tb+GLV+oTz59BQ89mOPPoRfcUX6DXpl6ERz" + ip_address: "1.209.122.111" + port: 22 otter: domain_full: otter.demo.bitmask.net domain_internal: otter.demo.bitmask.i host_pub_key: "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCab6r51XEW9LjZVDZs3q/aIpn+oKo468ovivZIQPMmYMs6NUJ2z7Oc9YROAM3lfxcHHShNBIpxg/pSKnQ743hHavV3y+mEPbo4W3hbByuR6GJRaKxHP42NMfNxJUHpaix8jCrMkNypFGMss9C403quy62yGfN7hWIH/pWFR9z+GvWaLpl0J1T+sadeqYGrjiWPwmo88ZAo/RRsXEORyPMz/X7+pa+DvYrg9FqOnNNK0EvHI5asxRQMojpbt6DRpOkkDPkFZp/gpGRQCAbnaKtalkfC/HhbHepGiqQwMRphcpTmnJvOfIGy+YnUoV3RwoRzb5HAT6FkJ9c4gsTs+6Rp" ip_address: "46.165.242.166" port: 4422 - ovenbird: - domain_full: ovenbird.cdev.bitmask.net - domain_internal: ovenbird.cdev.bitmask.i - host_pub_key: "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtsIDPQkrOkbKZIhQEckY2uQKDXXN8/rQElMCwEbNuf25rz8ec5hSaMTOidjj0aAUSe33owu7fc5xvjbm2UY8zgpp3KMUlxwB27RPuegXrheA7HfZooXGwmlrBPgzUxHEDd3bp0KyNOOzabELQAxLEeACJSnKEKrwRXg4I4yDJpxZIHC79629804ScfaAI6aamqDnl5nMrr3eozjaWfrXGd/qyOYg+q7iw9HTK9rFR0tVuy4TFc/4doCqgJ4Dqx9jY1uewjA0xMAKb+8VqvmgC9GUHXye2Q4AXGFfrzjxsGpN8KkjwhiOCG/x2nxbhXJuq92w5t9+AyJzWSP6H1UOz" - ip_address: "199.119.112.151" - port: 22 snail: domain_full: snail.dev.bitmask.net domain_internal: snail.dev.bitmask.i @@ -304,6 +316,10 @@ hosts: ip_address: "199.119.112.208" port: 22 wallaby: + aliases: + - api.demo.bitmask.net + - demo.bitmask.net + - nicknym.demo.bitmask.net domain_full: wallaby.demo.bitmask.net domain_internal: wallaby.demo.bitmask.i host_pub_key: "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBP/bJJ5OoSveoTEXAl26Gz0tqJkwzdA2fezMFeyoDDF6BCWntfzFZahoxHWg5alUfNMCJeYYOPYu/k05QzXThkQ=" @@ -403,15 +419,6 @@ nagios: - couchdb - soledad ssh_port: 4422 - cowbird: - domain_full_suffix: cdev.bitmask.net - domain_internal: cowbird.cdev.bitmask.i - domain_internal_suffix: cdev.bitmask.i - environment: clientdev - ip_address: "199.119.112.152" - services: - - mx - ssh_port: 22 demodex: domain_full_suffix: dev.bitmask.net domain_internal: demodex.dev.bitmask.i @@ -468,12 +475,12 @@ nagios: services: - backup ssh_port: 22 - goldeneye: + gecko: domain_full_suffix: cdev.bitmask.net - domain_internal: goldeneye.cdev.bitmask.i + domain_internal: gecko.cdev.bitmask.i domain_internal_suffix: cdev.bitmask.i environment: clientdev - ip_address: "199.119.112.153" + ip_address: "1.209.122.112" services: - couchdb - soledad @@ -507,6 +514,16 @@ nagios: services: - openvpn ssh_port: 4422 + mudskipper: + domain_full_suffix: cdev.bitmask.net + domain_internal: mudskipper.cdev.bitmask.i + domain_internal_suffix: cdev.bitmask.i + environment: clientdev + ip_address: "1.209.122.111" + services: + - mx + - webapp + ssh_port: 22 otter: domain_full_suffix: demo.bitmask.net domain_internal: otter.demo.bitmask.i @@ -518,15 +535,6 @@ nagios: - openvpn - tor ssh_port: 4422 - ovenbird: - domain_full_suffix: cdev.bitmask.net - domain_internal: ovenbird.cdev.bitmask.i - domain_internal_suffix: cdev.bitmask.i - environment: clientdev - ip_address: "199.119.112.151" - services: - - webapp - ssh_port: 22 snail: domain_full_suffix: dev.bitmask.net domain_internal: snail.dev.bitmask.i @@ -681,6 +689,13 @@ webapp: allow_limited_certs: false allow_registration: true allow_unlimited_certs: true + api_tokens: + allowed_ips: + - "199.119.112.205" + - "199.119.112.206" + - "199.119.112.207" + - "199.119.112.208" + monitor: pAfrMH9kd7FfdKq5m2k9FxYhghhpZ5Qr api_version: 1 billing: braintree: |