groups['gce'] = { 'bundles': { 'gce-workaround', }, 'member_patterns': { r"gce\..*", }, 'metadata': { 'hosts': { 'entries': { '169.254.169.254': { 'metadata.google.internal', }, }, }, 'location': 'gce', 'nameservers': { '8.8.8.8', '8.8.4.4', }, 'postfix': { # It's fine to do this without authentificating to the relayhost. # These Systems are not supposed to send mail anywhere else # than our own domains. 'relayhost': '[mx0.kunbox.net]:2525', }, }, } groups['htz'] = { 'member_patterns': { r"htz\..*", }, 'subgroups': { 'htz-cloud', }, 'metadata': { 'location': 'htz', }, } groups['htz-cloud'] = { 'member_patterns': { r"htz\-cloud\..*", }, 'metadata': { 'apt': { 'packages': { 'cryptsetup-bin': { 'installed': False, }, 'cryptsetup-run': { 'installed': False, }, 'cryptsetup-initramfs': { 'installed': False, }, }, }, }, } groups['home'] = { 'member_patterns': { r"home\..*", }, 'bundles': { 'lldp', }, 'metadata': { 'location': 'home', 'icinga_options': { 'vars.notification.sms': False, }, 'postfix': { # It's fine to do this without authentificating to the relayhost. # These Systems are not supposed to send mail anywhere else # than our own domains. 'relayhost': '[mx0.kunbox.net]:2525', }, }, } groups['ovh'] = { 'member_patterns': { r"ovh\..*", }, 'metadata': { 'location': 'ovh', 'postfix': { 'relayhost': '[mx0.kunbox.net]:2525', }, 'users': { 'debian': { 'delete': True, }, }, }, }