# -*- mode: yaml; -*-
---
ansible_ssh_host: vultr.liwt.net
ansible_ssh_port: 8864
ansible_python_interpreter: /usr/local/bin/python2.7

network:
  hostname: vultr
  domain: liwt.net
  interface: vtnet0
  ipv4:
    address: 45.77.201.74
    netmask: 255.255.254.0
    gateway: 45.77.200.1
  ipv6:
    address: 2001:19f0:5:3166::c0f:fee
    prefixlen: 64

domains:
  - name: liwt.net
    # sub-domains for which to request certificates
    sub:
      - mail
      - www
      - git
  - name: aaronly.me
    sub:
      - www
  - name: 233233.xyz
    sub:
      - www
      - g
      - zw
  - name: 1314233.xyz
    sub:
      - www

dns:
  ttl: 1h
  refresh: 10800
  retry: 1800
  expire: 4w
  minimum: 1d

nameservers:
  - name: afraid
    xfr_ip: 174.37.196.55
    ns:
      - ns2.afraid.org
  - name: 1984hosting
    xfr_ip: 93.95.224.6
    ns:
      - ns0.1984.is
      - ns1.1984.is
      - ns2.1984.is

mail:
  domains:
    - liwt.net
    - aaronly.me
  # Virtual mail user for local delivery (e.g., by Dovecot))
  user:
    name: vmail
    id: 5000
    home: /home/vmail
  dkim:
    selector: default
    bits: 2048
    port: 8901
  dmarc:
    p: none  # policy for the domain
    sp: none  # policy for subdomains of this domain
    aspf: r  # alignment mode for SPF (r: relaxed; s: strict)
    pct: 100  # percent of messages subjected to filtering
    # reporting URI of aggregate reports
    # Free DMARC weekly digests by https://dmarc.postmarkapp.com/
    rua:
      liwt.net: ???
      aaronly.me: re+f6lpmirefcg@dmarc.postmarkapp.com
  # To avoid trashing by GMail
  google-site-verification:
    liwt.net: n-dVRtkDeJ8k4BuSphkV-GVso0zJJWO-Z6GYoz6ayOQ
    aaronly.me: rSh99lenrfS-HnzvEahEDYTj9UvoKeX4NdWmDzD-pxo

shadowsocks:
  port: 8989
  password: "???"
  method: "chacha20-ietf-poly1305"

vpn:
  interface: tun0
  network4: 10.6.20.0
  port: 8080

# vim: set ft=yaml sw=2: #