---
whawty_auth_instances:
  test:
    version: 0.2-rc9
    port: 3080
    store:
      default: 1
      params:
      - id: 1
        argon2id:
          time: 1
          memory: 65536
          threads: 4
          length: 32
    hostnames:
    - passwd.example.com
    tls:
      certificate_provider: selfsigned
      cert:
        organization_name: "chaos-at-home"
        organizational_unit_name: "ansible"
        key_usage:
        - digitalSignature
        - keyAgreement
        key_usage_critical: yes
        extended_key_usage:
        - serverAuth
        extended_key_usage_critical: yes
        create_subject_key_identifier: yes
        not_after: +52w
        renew_margin: +42d
    sync:
      port: 3022
      authorized_keys: "{{ users.equinox.ssh }}"