diff options
Diffstat (limited to 'group_vars/all.yml')
| -rw-r--r-- | group_vars/all.yml | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/group_vars/all.yml b/group_vars/all.yml index ca01f7d..385413e 100644 --- a/group_vars/all.yml +++ b/group_vars/all.yml @@ -1,34 +1,37 @@ --- non_free_packages: elefant: - firmware-bnx2 + levante: + # for tg3 + - firmware-misc-nonfree # Virtual (non-routable) IPv4 subnet for IPsec. It is always nullrouted # in the absence of xfrm lookup (i.e., when there is no matching IPsec # Security Association) to avoid data leaks. ipsec_subnet: 172.16.0.0/24 ipsec: # Virtual (non-routable) addresses for IPsec. They all need to be # distinct and belong to the above subnet 'ipsec_subnet'. antilop: 172.16.0.1 - benjamin: 172.16.0.2 + levante: 172.16.0.2 civett: 172.16.0.3 elefant: 172.16.0.4 giraff: 172.16.0.5 mistral: 172.16.0.6 calima: 172.16.0.7 postfix_instance: # The keys are the group names associated with a Postfix role, and the # values are the name and group (optional) of the instance dedicated # to that role. # For internal services, we also specify its (non-routable) IP address # and port. # XXX it's unfortunate that we can only specify a single address, and # therefore have to limit the number of outgoing SMTP proxy and # IMAP server to one. Since hosts(5) files cannot map and IP # address to multiple hostnames, a workaround would be to use # round-robin DNS, but we can't rely on DNS as long as our zone is # unsigned. IMAP: { name: mda |