---
ansible_python_interpreter: /usr/bin/python3
cs_env_debug: "{{ lookup('ansible.builtin.env', 'DEBUG', default=false) | ansible.builtin.bool }}"
cs_no_log: "{{ not cs_env_debug }}"
ds_force_rotate_leaf_certs: true
__ds_container_extra_dns: 10.8.33.1

################################ ROOT CA ################################
__vault_root_ca_keys: "{{ lookup('vault_lookup', cs_project_code + '/certificate-authority/root-ca') }}"
__root_ca_key_pem: "{{ __vault_root_ca_keys.root_ca_key_pem
    | ansible.builtin.mandatory(msg='root_ca_key_pem is missing from the root CA Vault secret.') }}"
__root_ca_key_password: "{{ __vault_root_ca_keys.root_ca_key_password
    | ansible.builtin.mandatory(msg='root_ca_key_password is missing from the root CA Vault secret.') }}"
__root_ca_cert_pem: "{{ __vault_root_ca_keys.root_ca_cert_pem
    | ansible.builtin.mandatory(msg='root_ca_cert_pem is missing from the root CA Vault secret.') }}"
__root_ca_domain: "{{ __vault_root_ca_keys.domain
    | ansible.builtin.mandatory(msg='domain is missing from the root CA Vault secret.') }}"

################################ SMTP ################################
__vault_smtp_keys: "{{ lookup('vault_lookup', 'managed-services/smtp') }}"
__smtp_user: "{{ __vault_smtp_keys.smtpusername }}"
__smtp_password: "{{ __vault_smtp_keys.smtppassword }}"
__smtp_from_address: "{{ __vault_smtp_keys.fromaddress }}"
__smtp_host: "{{ __vault_smtp_keys.smtphost }}"
__smtp_port: "{{ __vault_smtp_keys.smtpport | ansible.builtin.int }}"