---
install:
  cloud:
    credentials:
      token: "{{ vault_hcloud_api_token }}"
    server_name: "{{ host_name }}"


apt_repo_provider: hetzner

spreadspace_apt_repo_components:
  - prometheus


ntp_variant: systemd-timesyncd


bind_option_empty_zones_enable: no
bind_option_allow_transfer: []
bind_option_allow_recursion:
  - localhost
bind_option_notify: 'no'

bind_stats_channels:
  - addr: 127.0.0.1
    port: 8053
    allow:
    - 127.0.0.1

bind_empty_onion_zone: yes
bind_slave_zones:
  pan:
    masters:
    - 89.106.215.17
    - 2a02:3e0:407::17
    zones:
    ## formerly known as self
    - chaos-at-home.org
    - chaox.org
    - spreadspace.org
    - spreadspace.com
    - spreadspace.net
    - spreadspace.systems
    - elev8.at
    - java-sucks.com
    - xn--gh-via.org
    - schaaas.at
    ## formerly known as others
    - gimpf.org
    - movetogether.at

  realraum:
    masters:
    - 89.106.211.33
    - 2a02:3e0:4000:1::1
    zones:
    - realraum.at
    - r3.at
    - hack-challenge.at

  funkfeuer:
    masters:
    - 193.33.150.114
    zones:
    - ffgraz.net
    - graz.funkfeuer.at
    - 10.in-addr.arpa
    - 150.33.193.in-addr.arpa
    - 151.33.193.in-addr.arpa


prometheus_scrape_endpoint: "116.203.212.131:9999"

prometheus_exporters_extra:
  - bind

prometheus_job_multitarget_blackbox__probe:
  ch-mon:
  - instance: "ssh-{{ inventory_hostname }}"
    target: "116.203.212.131:{{ ansible_port | default(22) }}"
    module: ssh_banner
  - instance: "https-mimas.chaos-at-home.org"
    target: "https://mimas.chaos-at-home.org"
    module: http_tls_2xx