---
# file: group_vars/cord.yml

# site configuration
site_name: mysite
site_humanname: MySite

deployment_type: MyDeployment

xos_users:
  - email: padmin@vicci.org
    password: letmein
    first: PAdmin
    last: VicciOrg
    admin: true

# VM networks/bridges on head
virt_nets:
  - name: mgmtbr
    ipv4_prefix: 192.168.122
    head_vms: true

# site domain suffix
site_suffix: cord.lab

# SSL server certificate generation
server_certs:
  - cn: "keystone.{{ site_suffix }}"
    subj: "/C=US/ST=California/L=Menlo Park/O=ON.Lab/OU=Test Deployment/CN=keystone.{{ site_suffix }}"
    altnames:
      - "DNS:keystone.{{ site_suffix }}"
      - "DNS:{{ site_suffix }}"
  - cn: "xos-core.{{ site_suffix }}"
    subj: "/C=US/ST=California/L=Menlo Park/O=ON.Lab/OU=Test Deployment/CN=xos-core.{{ site_suffix }}"
    altnames:
      - "DNS:xos-core.{{ site_suffix }}"

# resolv.conf settings
dns_search:
  - "{{ site_suffix }}"

# NSD/Unbound settings
nsd_zones:
  - name: "{{ site_suffix }}"
    ipv4_first_octets: 192.168.122
    name_reverse_unbound: "168.192.in-addr.arpa"
    soa: ns1
    ns:
      - { name: ns1 }
    nodelist: head_vm_list
    aliases:
      - { name: "ns1" , dest: "head" }
      - { name: "ns" , dest: "head" }
      - { name: "apt-cache" , dest: "head" }

name_on_public_interface: head

# If true, unbound listens on the head node's `ansible_default_ipv4` interface
unbound_listen_on_default: True

# turn this on, or override it when running the playbook with --extra-vars="on_cloudlab=True"
on_cloudlab: False

# VTN network configuration
management_network_cidr: 172.27.0.0/24
management_network_ip: 172.27.0.1/24
data_plane_ip: 10.168.0.253/24

# CORD ONOS app version
cord_app_version: 1.2-SNAPSHOT