---
# additional altnames
profiles::pki::vault::alt_names:
  - ldap.main.unkin.net
  - ldap.service.consul
  - ldap.query.consul
  - "ldap.service.%{facts.country}-%{facts.region}.consul"

openldap::server::manage_epel: false
profiles::openldap::params::data_path: '/data/ldap/main.unkin.net'
profiles::openldap::params::database: 'dc=main,dc=unkin,dc=net'
profiles::openldap::params::rootdn: "cn=admin,%{hiera('profiles::openldap::params::database')}"
profiles::openldap::params::ldap_server:
  - rid: 1
    provider: ldap://ausyd1nxvm1044.main.unkin.net
    searchbase: "%{hiera('profiles::openldap::params::database')}"
  - rid: 2
    provider: ldap://ausyd1nxvm1045.main.unkin.net
    searchbase: "%{hiera('profiles::openldap::params::database')}"
  - rid: 3
    provider: ldap://ausyd1nxvm1046.main.unkin.net
    searchbase: "%{hiera('profiles::openldap::params::database')}"