---
# Services hosted on `application` that the DMZ reverseproxy should
# forward public traffic to. The DMZ traefik picks this up via
# hostvars[backend].traefik_dmz_exposed_services and renders a router +
# service for each entry into /config/services.yml.
traefik_dmz_exposed_services:
  - name: authentik
    domain: auth.mbaz.souveredu.ch
    backend_host: auth.int.mbaz.souveredu.ch
    port: 443
    protocol: https
  - name: nextcloud
    domain: cloud.mbaz.souveredu.ch
    backend_host: cloud.int.mbaz.souveredu.ch
    port: 443
    protocol: https
  - name: collabora
    domain: office.mbaz.souveredu.ch
    backend_host: office.int.mbaz.souveredu.ch
    port: 443
    protocol: https
  - name: drawio
    domain: draw.mbaz.souveredu.ch
    backend_host: draw.int.mbaz.souveredu.ch
    port: 443
    protocol: https
  - name: send
    domain: send.mbaz.souveredu.ch
    backend_host: send.int.mbaz.souveredu.ch
    port: 443
    protocol: https
  - name: opnform
    domain: forms.mbaz.souveredu.ch
    backend_host: forms.int.mbaz.souveredu.ch
    port: 443
    protocol: https
  - name: homarr
    domain: home.mbaz.souveredu.ch
    backend_host: home.int.mbaz.souveredu.ch
    port: 443
    protocol: https
  - name: bookstack
    domain: wiki.mbaz.souveredu.ch
    backend_host: wiki.int.mbaz.souveredu.ch
    port: 443
    protocol: https