all:
  hosts:
    armin.local.example.com:
  vars:
    #ldap_host: 'ladp01.local.example.com'
    #ldap_port: '389' # use 636 for SSL use 389 for STARTTLS and please don't use plain text
    #bind_dn: 'uid=semaphore,cn=users,cn=accounts,dc=local,dc=example,dc=com'
    #base_dn: 'dc=local,dc=example,dc=com'
    #bind_password: 'RANDOM_STRING_HERE'
    #user_search: '(\u0026(uid=%s)(memberOf=cn=ipausers,cn=groups,cn=accounts,dc=local,dc=example,dc=com))'
    #ldap_first_name: 'givenName'
    #member_of: 'memberOf'
    #ldap_last_name: 'sn'
    #ldap_user: 'uid'
    #ldap_email: 'mail'
    #admin_group: 'cn=server-admins,cn=groups,cn=accounts,dc=local,dc=example,dc=com'
    #viewer_group: 'cn=server-admins,cn=groups,cn=accounts,dc=local,dc=example,dc=com'
    #editor_group: 'cn=server-admins,cn=groups,cn=accounts,dc=local,dc=example,dc=com'
    syslog: true
    remote_syslog: true
    #crowdsec_api_key: 'GET_YOUR_OWN'
    google:
      auth: false
      client_id: "client_id"
      client_secret: "client_secret"
      allowed_domains: "example.com example.net" # space seperated list
    loki:
      url: 'https://logs.local.example.com'
      user: telegraf
      password: 'GENERATE_ONE'
      retention_period: 90d
      domain: logs.local.example.com
      #cert_path: /opt/certs/loki.crt
      #key_path: /opt/certs/loki.key
    victoria:
      url: 'https://metrics.local.example.com'
      user: telegraf
      password: 'GENERATE_ONE'
      retention_period: 90d
      domain: metrics.local.example.com
      #cert_path: /opt/certs/victoria.crt
      #key_path: /opt/certs/victoria.key
      #insecure: false
    grafana:
      domain: grafana.local.example.com
      #cert_path: /opt/certs/grafana.crt
      #key_path: /opt/certs/grafana.key
    uptimekuma:
      domain: uptime-kuma.local.example.com
      #cert_path: /opt/certs/uptime-kuma.crt
      #key_path: /opt/certs/uptime-kuma.key
    email:
      enabled: true
      host: 'mail.example.com'
      alert_from_address: 'alerts@example.com'
      user: 'alerts@example.com'
      password: 'GENERATE_ONE'
      alert_from_name: 'Shiftmon Alerts'
      port: '587'
    users:
      telegraf: 'GENERATE_ONE'
    tls:
      email: 'user@example.com'
    #dns: # see Traefik's DNS challenge docs for the provider name and key values pairs for auth_vaules https://doc.traefik.io/traefik/https/acme/#providers
      #provider: cloudflare
      #auth_values:
        #CF_DNS_API_TOKEN: 'GET_YOUR_OWN'
    #acme_url: 'https://ldap01.local.example.com/acme/directory'