---
dns_server:
  verbosity: 1
  main_zone:
    name: troubles.io
    soa: demetra.troubles.io
    email: postmaster.troubles.ga
    records:
      - {name: "", type: MX, value: "10 charon"}
      - {name: charon, type: A, value: "162.248.163.56"}
      - {name: virgil, type: A, value: "162.248.163.209"}
      - {name: degenerazione, type: A, value: "176.9.70.210"}
      - {name: cave, type: A, value: "15.161.166.194"}
      - {name: flix, type: A, value: "192.168.1.21"}
      - {name: nextcloud, type: CNAME, value: degenerazione}
      - {name: cloud, type: CNAME, value: degenerazione}
      - {name: rss, type: CNAME, value: degenerazione}
      - {name: quassel, type: CNAME, value: virgil}
      - {name: insta, type: CNAME, value: cave}
      - {name: drone, type: CNAME, value: cave}
      - {name: "*.cockpit", type: CNAME, value: cave}
      - {name: cam, type: CNAME, value: cave}
      - {name: bt, type: CNAME, value: cave}
      - {name: sync, type: CNAME, value: cave}
      - {name: feeds, type: CNAME, value: cave}
      - {name: blog, type: CNAME, value: troubles.noblogs.org.}
      - {name: chat, type: A, value: "176.9.70.210"}
      - {name: matrix.chat, type: A, value: "176.9.70.210"}
      - {name: "*.chat", type: CNAME, value: matrix.chat}
      - {name: "_matrix._tcp", type: SRV, value: "10 0 8448 matrix.chat"}
      - {name: "_matrix-identity._tcp", type: SRV, value: "10 0 443 matrix.chat"}
  zones:
    - name: troubles.ga
      soa: demetra.troubles.ga
      email: postmaster.troubles.ga
      records:
        - {name: "", type: MX, value: "10 charon"}
        - {name: demetra, type: A, value: "15.161.228.33"}
        - {name: proserpina, type: A, value: "139.64.247.185"}
        - {name: persephone, type: A, value: "139.64.247.184"}
        - {name: demetra, type: AAAA, value: "2a05:d01a:b6b:e933:4b76:3ec1:3e24:ab81"}
        - {name: proserpina, type: AAAA, value: "2607:8880::147:b9"}
        - {name: persephone, type: AAAA, value: "2607:8880::147:b8"}
        - {name: charon, type: A, value: "162.248.163.56"}
        - {name: virgil, type: A, value: "162.248.163.209"}
        - {name: degenerazione, type: A, value: "176.9.70.210"}
        - {name: cave, type: A, value: "15.161.166.194"}
        - {name: flix, type: A, value: "192.168.1.21"}
        - {name: nextcloud, type: CNAME, value: degenerazione}
        - {name: cloud, type: CNAME, value: degenerazione}
        - {name: rss, type: CNAME, value: degenerazione}
        - {name: cam, type: CNAME, value: cave}
        - {name: blog, type: CNAME, value: troubles.noblogs.org.}
        - name: mail._domainkey
          type: TXT
          value: |
            ( "v=DKIM1; "
            "k=rsa; "
            "p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXvEQgdPwPXJVIsHqDb0568cPfGck2gzfnOtf"
            "Y2a4Fg2ELFyJzEcgbKAPWZqilTdGrK3Z12cY21ASnn5uljDUhQIMprmckPT1rMvwko1oqCBU5qWHOztlW2/"
            "k4Cr/1UWjvgY/C1zfZb31mX+LpdCiOdSucmdsVn8D6cMan/VQt4N/xOfFwE2weJIHEsw2c1nHbPck8H/Ay+"
            "w/0qhuEoOb1syqEe6a2JcdPbs2KmGGqjJyOQxlFeLWh+ka9aVYarRXguqqX/SOT7ujoLyvomJ0TLbqCXfXo"
            "2jfSeTgzBLIDfNHByVMxKj+Hq8fJq+lUHe66WrrsU9Zj4hyVX4uE9+rQIDAQAB" )
        - {name: "@", type: TXT, value: "v=spf1 a mx ip4:162.248.163.56 ~all"}
        - name: _dmarc
          type: TXT
          value: '( "v=DMARC1; p=none; rua=mailto:admin@troubles.ga" )'

  servers:
    - name: demetra
      hostname: demetra.troubles.io
      local_resolver: true
      nsd_addr: 127.0.0.1
      nsd_port: 5353
      star: true
      public_ip: "15.161.228.33"
      public_ip6: "2a05:d01a:b6b:e933:4b76:3ec1:3e24:ab81"
      vpn:
        address: 10.13.12.1
        net_size: 24
        private_key: !vault |
          $ANSIBLE_VAULT;1.2;AES256;sea
          33363065653930353363633538656637353264343764306136373361666133396462326339613361
          3563363061666561653661366539383037373435313565660a303066353535396264366531643662
          39646439393636653861393634633239356236613831623961386532616337303634306563633461
          6561646562383932610a313462623830393165393764356437663635316238393564323430356136
          32623338303164383230393962323939383238323337366137376563303366333062386361316465
          3833306261646139363739653865656532613330333933613561

        public_key: !vault |
          $ANSIBLE_VAULT;1.2;AES256;sea
          34323137306430663737643831303262626239623833616435643035656632303539326462373735
          3635313331633666656439633035666133623030663837620a323338653931356362653436666231
          65366466643461303637303530306133323462386366616635313062316161653639623866343734
          3239663930313064640a393962616438353933653339366364653730643139303035353137306239
          33613632636165336664316339613537336439376664346534666335663863373330313930333934
          6439323064653263336666656637613934396363316234613436

    - name: proserpina
      hostname: proserpina.troubles.io
      local_resolver: true
      nsd_addr: 127.0.0.1
      nsd_port: 5353
      satellite: true
      public_ip: "139.64.247.185"
      public_ip6: "2607:8880::147:b9"
      vpn:
        address: 10.13.12.2
        net_size: 24
        private_key: !vault |
          $ANSIBLE_VAULT;1.2;AES256;sea
          35623232383937613530336338646663336234383834383466643535303335613739613362396232
          3137353339653539393736353532333238306537616137640a653366356434626466653236326332
          35316361363735346362363534623434633531373861336664646562613532393830613033653666
          3762653730363638640a386665613431633735636363326663333534313538373235333130333336
          38303962666136643362633638356265366366363365383761663634303234633037333066666261
          3866396237656339343236613565346566376533303931383461

        public_key: !vault |
          $ANSIBLE_VAULT;1.2;AES256;sea
          36653735306637386431626461633433376438306564663230323066626532623239626638616633
          6236656366656131616465623935346330636236323538350a356130306433636665396436646234
          32626463323665376465393061313234326534343935356431323530353232323764373736376530
          3330393765393564300a363662356139356230313834653165373637373833333832626436613164
          62613937626561313562373339656438383738333034623637353339373161306335616132666438
          3139643030336464633330373333303635366538623062616561

    - name: persephone
      hostname: persephone.troubles.io
      local_resolver: true
      nsd_addr: 127.0.0.1
      nsd_port: 5353
      satellite: true
      public_ip: "139.64.247.184"
      public_ip6: "2607:8880::147:b8"
      vpn:
        address: 10.13.12.3
        net_size: 24
        private_key: !vault |
          $ANSIBLE_VAULT;1.2;AES256;sea
          61333039343563626630633938396434666466343361346365363561336664333066656637393730
          3432656233366666313765376161323932333335633364390a323535333865373161663163646234
          62306562376265323039383961333562623563363939333238366166316234363963386561356563
          3532343261626639350a626162393335366464346265623438623736646562326262356331366334
          33396631363266633932323663393532303730633632366333376564643136636365386436376439
          3366616332306333633164653533333738356438373664663561

        public_key: !vault |
          $ANSIBLE_VAULT;1.2;AES256;sea
          38326437616339373537626538343839393636356630623064646561393863663537333630346166
          3732663262333464666562386432613834343732633737390a613531353235323933366139356631
          65333236333235383235656536663965616535353164316430666466373665353535656137343162
          3036356331356230640a613262666636333039653530626233386434363531646431626236393339
          39303638613761376163656135313131666166396665366535633532613235666162366163376262
          6339323033366436343866636365616165343037623434363131