---
hiera_include:
  - profiles::selinux::setenforce
  - frrouting
  - exporters::frr_exporter

profiles::packages::include:
  cobbler: {}
  cobbler3.2-web: {}
  httpd: {}
  syslinux: {}
  dnf-plugins-core: {}
  debmirror: {}
  pykickstart: {}
  fence-agents: {}
  selinux-policy-devel: {}
  ipxe-bootimgs: {}
  unkin-undionly-kpxe: {}

profiles::pki::vault::alt_names:
  - cobbler.main.unkin.net

# networking
anycast_ip: 198.18.19.19
systemd::manage_networkd: true
systemd::manage_all_network_files: true
networking::interfaces:
  eth0:
    type: physical
    forwarding: true
    dhcp: true
  anycast0:
    type: dummy
    ipaddress: "%{hiera('anycast_ip')}"
    netmask: 255.255.255.255
    mtu: 1500

# frrouting
exporters::frr_exporter::enable: true
frrouting::ospfd_router_id: "%{facts.networking.ip}"
frrouting::ospfd_redistribute:
  - connected
frrouting::ospfd_interfaces:
  eth0:
    area: 0.0.0.0
  anycast0:
    area: 0.0.0.0
frrouting::daemons:
  ospfd: true

# consul
profiles::consul::client::node_rules:
  - resource: service
    segment: frr_exporter
    disposition: write

# additional repos
profiles::yum::global::repos:
  frr-extras:
    ensure: present
  frr-stable:
    ensure: present

# cobbler settings
profiles::cobbler::params::service_cname: 'cobbler.main.unkin.net'
profiles::cobbler::params::next_server: "%{hiera('anycast_ip')}"
profiles::cobbler::params::server: "%{hiera('anycast_ip')}"
profiles::selinux::setenforce::mode: permissive