- name: Set up those ProxyPassReverse statements.  Somebody get me a cup of coffee..
  hosts: proxies_stg:proxies
  user: root
  gather_facts: True

  vars_files:
   - /srv/web/infra/ansible/vars/global.yml
   - "/srv/private/ansible/vars.yml"
   - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

  handlers:
  - import_tasks: "{{ handlers_path }}/restart_services.yml"

  vars:
  - varnish_url: http://localhost:6081

  pre_tasks:

  - name: Remove some crusty files from bygone eras
    file: dest=/etc/httpd/conf.d/{{item}} state=absent
    with_items:
    - meetbot.fedoraproject.org/reversepassproxy.conf
    - meetbot.fedoraproject.org/meetbot.conf
    notify:
    - reload proxyhttpd
    tags:
    - httpd
    - httpd/reverseproxy


  roles:

  - role: httpd/reverseproxy
    website: copr.fedoraproject.org
    destname: coprapi
    when: env != "staging"
    tags: copr

  - role: httpd/reverseproxy
    website: copr.fedoraproject.org
    destname: copr
    proxyurl: http://localhost:10070
    keephost: true
    when: env == "staging"
    tags: copr

  - role: httpd/reverseproxy
    website: nagios.fedoraproject.org
    destname: nagios
    remotepath: /
    proxyurl: http://noc01.{{ datacenter }}.fedoraproject.org

  - role: httpd/reverseproxy
    website: zabbix.fedoraproject.org
    destname: zabbix
    remotepath: /
    proxyurl: http://localhost:10068
    keephost: true
    header_scheme: true
    when: env == "production"
    tags: zabbix

  - role: httpd/reverseproxy
    website: zabbix.stg.fedoraproject.org
    destname: zabbix
    remotepath: /
    proxyurl: http://localhost:10068
    keephost: true
    header_scheme: true
    when: env == "staging"
    tags: zabbix

  - role: httpd/reverseproxy
    website: lists.fedoraproject.org
    destname: mailman3
    localpath: /
    remotepath: /
    header_scheme: true
    keephost: true
    proxyurl: "{{ varnish_url }}"
    tags: lists.fedoraproject.org

  - role: httpd/reverseproxy
    website: lists.fedorahosted.org
    destname: mailman3
    localpath: /
    remotepath: /
    header_scheme: true
    keephost: true
    proxyurl: "{{ varnish_url }}"

  - role: httpd/reverseproxy
    website: lists.pagure.io
    destname: mailman3
    localpath: /
    remotepath: /
    header_scheme: true
    keephost: true
    proxyurl: "{{ varnish_url }}"

  # The place for the raw originals
  - role: httpd/reverseproxy
    website: meetbot-raw.fedoraproject.org
    destname: meetbot
    remotepath: /meetbot/
    # Talk directly to the app server, not haproxy
    proxyurl: http://value02
    when: env != "staging"

  # The place for the fancy mote view
  - role: httpd/reverseproxy
    website: meetbot.fedoraproject.org
    destname: mote
    balancer_name: app-os
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    targettype: openshift
    ocp4: true
    keephost: true
    tags: mote

  # The place for the raw originals
  - role: httpd/reverseproxy
    website: meetbot-raw.fedoraproject.org
    destname: meetbot
    remotepath: /meetbot/
    # Talk directly to the app server, not haproxy
    proxyurl: http://value02
    when: env == "staging"

  - role: httpd/reverseproxy
    website: apps.fedoraproject.org
    destname: github2fedmsg
    localpath: /github2fedmsg
    remotepath: /github2fedmsg
    header_scheme: true
    proxyurl: http://localhost:10037

  - role: httpd/reverseproxy
    website: apps.fedoraproject.org
    destname: fedora-notifications
    localpath: /notifications-old
    remotepath: /notifications-old
    header_scheme: true
    proxyurl: http://localhost:10036
    tags:
    - fmn

  - role: httpd/reverseproxy
    website: "notifications{{ env_suffix }}.fedoraproject.org"
    destname: fmn
    balancer_name: apps-ocp
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    targettype: openshift
    keephost: true
    ocp4: true
    tags:
    - fmn

  - role: httpd/reverseproxy
    website: ask.fedoraproject.org
    destname: askbot
    proxyurl: "{{ varnish_url }}"

  - role: httpd/reverseproxy
    website: "accounts{{ env_suffix }}.fedoraproject.org"
    destname: noggin
    balancer_name: apps-ocp
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    targettype: openshift
    keephost: true
    ocp4: true
    tags:
    - noggin

  - role: httpd/reverseproxy
    website: "fasjson{{ env_suffix }}.fedoraproject.org"
    destname: fasjson
    balancer_name: apps-ocp
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    targettype: openshift
    keephost: true
    ocp4: true
    tags:
    - fasjson

  - role: httpd/reverseproxy
    website: "id{{ env_suffix }}.fedoraproject.org"
    destname: id
    proxyurl: http://localhost:10020
    keephost: true
    header_scheme: true
    tags:
    - id.fedoraproject.org

  - role: httpd/reverseproxy
    website: "sso{{ env_suffix }}.fedoraproject.org"
    destname: id
    proxyurl: http://localhost:10020
    keephost: true
    tags:
    - sso.fedoraproject.org

  - role: httpd/reverseproxy
    website: "username.id{{ env_suffix }}.fedoraproject.org"
    destname: usernameid
    proxyurl: http://localhost:10020
    keephost: true
    tags:
    - id.fedoraproject.org

  - role: httpd/reverseproxy
    website: "id{{ env_suffix }}.fedoraproject.org"
    destname: 00-kdcproxy
    remotepath: /KdcProxy
    localpath: /KdcProxy
    proxyurl: http://localhost:10053
    tags:
    - id.fedoraproject.org

  - role: httpd/reverseproxy
    website: "id{{ env_suffix }}.fedoraproject.org"
    destname: 00-ipa
    remotepath: /ipa
    localpath: /ipa
    proxyurl: http://localhost:10061
    tags:
    - id.fedoraproject.org

  - role: httpd/reverseproxy
    website: apps.fedoraproject.org
    destname: datagrepper
    remotepath: /datagrepper
    localpath: /datagrepper
    balancer_name: apps-ocp
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    targettype: openshift
    ocp4: true
    keephost: true
    tags:
    - datagrepper

  - role: httpd/reverseproxy
    website: "badges.fedoraproject.org"
    destname: badges
    balancer_name: apps-ocp
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    targettype: openshift
    keephost: true
    ocp4: true
    tags:
    - badges

  - role: httpd/reverseproxy
    website: kerneltest.fedoraproject.org
    destname: kerneltest
    balancer_name: apps-ocp
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    targettype: openshift
    ocp4: true
    keephost: true
    header_scheme: true
    tags: kerneltest

  - role: httpd/reverseproxy
    website: qa.fedoraproject.org
    destname: blockerbugs
    balancer_name: apps-ocp
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    targettype: openshift
    keephost: true
    ocp4: true
    remotepath: /blockerbugs
    localpath: /blockerbugs
    tags: blockerbugs
    when: env == "staging"

  - role: httpd/reverseproxy
    website: qa.fedoraproject.org
    destname: qa-landingpage
    balancer_name: apps-ocp
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    targettype: openshift
    keephost: true
    ocp4: true
    tags: qa-landingpage

  - role: httpd/reverseproxy
    website: qa.fedoraproject.org
    destname: blockerbugs
    balancer_name: apps-ocp
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    targettype: openshift
    keephost: true
    ocp4: true
    remotepath: /blockerbugs
    localpath: /blockerbugs
    tags: blockerbugs
    when: env != "staging"


  - role: httpd/reverseproxy
    website: fedoraproject.org
    destname: fp-wiki
    wpath: /w
    wikipath: /wiki
    proxyurl: "{{ varnish_url }}"

  - role: httpd/reverseproxy
    website: bodhi.fedoraproject.org
    destname: bodhi
    balancer_name: apps-ocp
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    targettype: openshift
    keephost: true
    ocp4: true
    tags: bodhi
    when: env == "staging"
  - role: httpd/reverseproxy
    website: bodhi.fedoraproject.org
    destname: bodhi
    balancer_name: apps-ocp
    targettype: openshift
    balancer_members: "{{ocp_nodes}}"
    ocp4: true
    keephost: true
    tags: bodhi
    when: env != "staging"

#
# fedora core os routes
# These point to openshift
#
  - role: httpd/reverseproxy
    website: "updates.coreos{{ env_suffix }}.fedoraproject.org"
    destname: cincinnati
    balancer_name: apps-ocp
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    ocp4: true
    targettype: openshift
    keephost: true
    tags:
    - updates.coreos.fedoraproject.org
    when: env != "staging"

  - role: httpd/reverseproxy
    website: "status.updates.coreos{{ env_suffix }}.fedoraproject.org"
    destname: cincinnati
    balancer_name: apps-ocp
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    ocp4: true
    targettype: openshift
    keephost: true
    tags:
    - updates.coreos.fedoraproject.org
    when: env != "staging"

  - role: httpd/reverseproxy
    website: "raw-updates.coreos{{ env_suffix }}.fedoraproject.org"
    destname: cincinnati
    balancer_name: apps-ocp
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    ocp4: true
    targettype: openshift
    keephost: true
    tags:
    - updates.coreos.fedoraproject.org
    when: env != "staging"

  - role: httpd/reverseproxy
    website: "status.raw-updates.coreos{{ env_suffix }}.fedoraproject.org"
    destname: cincinnati
    balancer_name: apps-ocp
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    ocp4: true
    targettype: openshift
    keephost: true
    tags:
    - updates.coreos.fedoraproject.org
    when: env != "staging"

  - role: httpd/reverseproxy
    website: "updates.coreos{{ env_suffix }}.fedoraproject.org"
    destname: cincinnati
    balancer_name: apps-ocp
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    ocp4: true
    targettype: openshift
    keephost: true
    tags:
    - updates.coreos.fedoraproject.org
    when: env == "staging"

  - role: httpd/reverseproxy
    website: "status.updates.coreos{{ env_suffix }}.fedoraproject.org"
    destname: cincinnati
    balancer_name: apps-ocp
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    ocp4: true
    targettype: openshift
    keephost: true
    tags:
    - updates.coreos.fedoraproject.org
    when: env == "staging"

  - role: httpd/reverseproxy
    website: "raw-updates.coreos{{ env_suffix }}.fedoraproject.org"
    destname: cincinnati
    balancer_name: apps-ocp
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    ocp4: true
    targettype: openshift
    keephost: true
    tags:
    - updates.coreos.fedoraproject.org
    when: env == "staging"

  - role: httpd/reverseproxy
    website: "status.raw-updates.coreos{{ env_suffix }}.fedoraproject.org"
    destname: cincinnati
    balancer_name: apps-ocp
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    ocp4: true
    targettype: openshift
    keephost: true
    tags:
    - updates.coreos.fedoraproject.org
    when: env == "staging"


#
# end coreos
#

  - role: httpd/reverseproxy
    website: transtats.fedoraproject.org
    destname: transtats
    balancer_name: app-os
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    targettype: openshift
    ocp4: true
    keephost: true
    tags: transtats

  - role: httpd/reverseproxy
    website: "mirrormanager{{ env_suffix }}.fedoraproject.org"
    destname: mirrormanager
    balancer_name: apps-ocp
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    targettype: openshift
    keephost: true
    ocp4: true
    tags:
    - mirrormanager

  - role: httpd/reverseproxy
    website: admin.fedoraproject.org
    destname: mirrormanager-old
    remotepath: /mirrormanager
    localpath: /mirrormanager
    proxyurl: "{{ varnish_url }}"
    tags:
    - mirrormanager

  - role: httpd/reverseproxy
    website: mirrors.fedoraproject.org
    destname: mirrormanager-mirrorlist
    proxyurl: http://localhost:10002

  - role: httpd/reverseproxy
    website: mirrors.centos.org
    destname: mirrormanager-mirrorlist
    proxyurl: http://localhost:10002
    tags: mirrors.centos.org
    when: env != "staging"

  - role: httpd/reverseproxy
    website: mirrors.stg.centos.org
    destname: mirrormanager-mirrorlist
    proxyurl: http://localhost:10002
    tags: mirrors.stg.centos.org
    when: env == "staging"

  - role: httpd/reverseproxy
    website: download.fedoraproject.org
    destname: mirrormanager-redirector
    proxyurl: http://localhost:10002

  - role: httpd/reverseproxy
    website: koschei.fedoraproject.org
    destname: koschei
    balancer_name: app-os
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    targettype: openshift
    ocp4: true
    keephost: true
    tags: koschei

  - role: httpd/reverseproxy
    website: openqa.fedoraproject.org
    destname: openqa
    balancer_name: openqa
    balancer_members: ['openqa01:80']
    http_not_https_yes_this_is_insecure_and_i_feel_bad: true
    when: env == "production"
    tags: openqa

  - role: httpd/reverseproxy
    website: openqa.fedoraproject.org
    destname: openqa
    balancer_name: openqa-stg
    balancer_members: ['openqa-lab01.iad2.fedoraproject.org:80']
    http_not_https_yes_this_is_insecure_and_i_feel_bad: true
    when: env == "staging"

  - role: httpd/reverseproxy
    website: admin.fedoraproject.org
    destname: yk-val
    remotepath: /yk-val/verify
    localpath: /yk-val/verify
    proxyurl: http://localhost:10004

  - role: httpd/reverseproxy
    website: admin.fedoraproject.org
    destname: pager
    remotepath: /pager
    localpath: /pager
    # Talk directly to the app server, not haproxy
    proxyurl: http://sundries01

  - role: httpd/reverseproxy
    website: admin.fedoraproject.org
    destname: awstats
    remotepath: /awstats
    localpath: /awstats
    # Talk directly to the app server, not haproxy
    proxyurl: http://log01

  - role: httpd/reverseproxy
    website: admin.fedoraproject.org
    destname: maps
    remotepath: /maps
    localpath: /maps
    # Talk directly to the app server, not haproxy
    proxyurl: http://log01

  - role: httpd/reverseproxy
    website: fedoraproject.org
    destname: freemedia
    remotepath: /freemedia
    localpath: /freemedia
    proxyurl: http://localhost:10011

  - role: httpd/reverseproxy
    website: admin.fedoraproject.org
    destname: collectd
    localpath: /collectd
    remotepath: /collectd
    # Talk directly to the app server, not haproxy
    proxyurl: http://log01
    tags: data-analysis

  - role: httpd/reverseproxy
    website: data-analysis.fedoraproject.org
    destname: data-analysis
    remotepath: /
    localpath: /
    proxyurl: http://log01
    tags: data-analysis

  ### staging entries for resultsdb and resultsdb_frontend
  - role: httpd/reverseproxy
    website: resultsdb.stg.fedoraproject.org
    destname: zz-resultsdb-resultsdb
    localpath: /
    remotepath: /
    balancer_name: resultsdb-stg
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    targettype: openshift
    ocp4: true
    keephost: true
    when: env == "staging"
    tags: resultsdb

  ### production entries for resultsdb and resultsdb_frontend
  - role: httpd/reverseproxy
    website: resultsdb.fedoraproject.org
    destname: zz-resultsdb-resultsdb
    localpath: /
    remotepath: /
    balancer_name: resultsdb
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    targettype: openshift
    ocp4: true
    keephost: true
    when: env != "staging"
    tags: resultsdb

  # This one gets its own role (instead of httpd/reverseproxy) so that it can
  # copy in some silly static resources (globe.png, index.html)
  - role: geoip-city-wsgi/proxy
    website: geoip.fedoraproject.org
    proxyurl: http://localhost:10029

  - role: httpd/reverseproxy
    website: src.fedoraproject.org
    destname: git
    proxyurl: http://localhost:10057
    header_scheme: true
    keephost: true

  - role: httpd/reverseproxy
    website: registry.fedoraproject.org
    destname: registry-fedora
    # proxyurl in this one is totally ignored, because Docker.
    # (turns out it uses PATCH requests that Varnish cannot deal with)
    proxyurl: "{{ varnish_url }}"
    tags:
    - registry

  - role: httpd/reverseproxy
    website: candidate-registry.fedoraproject.org
    destname: candidate-registry
    proxyurl: http://localhost:10054

  - role: httpd/reverseproxy
    website: retrace.fedoraproject.org
    destname: retrace
    proxyurl: http://localhost:10049
    when: env == "staging"

  - role: httpd/reverseproxy
    website: faf.fedoraproject.org
    destname: faf
    proxyurl: http://localhost:10050
    when: env == "staging"

  - role: httpd/reverseproxy
    website: apps.fedoraproject.org
    destname: pps
    remotepath: /pps
    localpath: /pps
    proxyurl: http://localhost:10051
    when: env == "staging"

  - role: httpd/reverseproxy
    website: koji.fedoraproject.org
    destname: koji
    keephost: true
    balancer_name: koji
    balancer_members:
    - "koji01.{{ datacenter }}.fedoraproject.org"
    - "koji02.{{ datacenter }}.fedoraproject.org"
    http_not_https_yes_this_is_insecure_and_i_feel_bad: true
    when: env == "production"

  - role: httpd/reverseproxy
    website: koji.fedoraproject.org
    destname: koji
    keephost: true
    balancer_name: koji
    balancer_members:
    - "koji01.stg.{{ datacenter }}.fedoraproject.org"
    http_not_https_yes_this_is_insecure_and_i_feel_bad: true
    when: env == "staging"

  - role: httpd/reverseproxy
    website: kojipkgs.fedoraproject.org
    destname: kojipkgs
    proxyurl: http://localhost:10062
    keephost: true

  - role: httpd/reverseproxy
    website: "ocp{{ env_suffix }}.fedoraproject.org"
    destname: ocp
    balancer_name: ocp
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    targettype: openshift
    ocp4: true
    keephost: true
    tags:
    - ocp.stg.fedoraproject.org
    when: env == "staging"

  - role: httpd/reverseproxy
    website: "apps.ocp{{ env_suffix }}.fedoraproject.org"
    destname: apps.ocp
    balancer_name: apps-ocp
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    targettype: openshift
    ocp4: true
    keephost: true
    tags:
    - apps.ocp.stg.fedoraproject.org
    when: env == "staging"

  - role: httpd/reverseproxy
    website: "ocp{{ env_suffix }}.fedoraproject.org"
    destname: ocp
    balancer_name: ocp
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    targettype: openshift
    ocp4: true
    keephost: true
    tags:
    - ocp.fedoraproject.org
    when: env == "production"

  - role: httpd/reverseproxy
    website: "apps.ocp{{ env_suffix }}.fedoraproject.org"
    destname: apps.ocp
    balancer_name: apps-ocp
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    targettype: openshift
    ocp4: true
    keephost: true
    tags:
    - apps.ocp.fedoraproject.org
    when: env == "production"

  - role: httpd/reverseproxy
    website: "provision{{ env_suffix }}.fedoraproject.org"
    destname: zezere
    balancer_name: app-os
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    targettype: openshift
    ocp4: true
    keephost: true
    tags:
    - zezere

  - role: httpd/reverseproxy
    website: greenwave.fedoraproject.org
    destname: greenwave
    balancer_name: app-os
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    targettype: openshift
    ocp4: true
    keephost: true
    tags: greenwave

  - role: httpd/reverseproxy
    website: waiverdb.fedoraproject.org
    destname: waiverdb
    balancer_name: app-os
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    targettype: openshift
    ocp4: true
    keephost: true
    tags: waiverdb

  - role: httpd/reverseproxy
    website: elections.fedoraproject.org
    destname: elections
    balancer_name: app-os
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    targettype: openshift
    ocp4: true
    keephost: true
    tags: elections
    header_scheme: true

  - role: httpd/reverseproxy
    website: calendar.fedoraproject.org
    destname: calendar
    balancer_name: app-os
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    targettype: openshift
    ocp4: true
    keephost: true
    header_scheme: true
    tags: calendar

  - role: httpd/reverseproxy
    website: mdapi.fedoraproject.org
    destname: mdapi
    balancer_name: app-os
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    targettype: openshift
    ocp4: true
    keephost: true
    tags: mdapi

  - role: httpd/reverseproxy
    website: release-monitoring.org
    destname: release-monitoring
    balancer_name: apps-ocp
    balancer_members: "{{ocp_nodes}}"
    targettype: openshift
    ocp4: true
    keephost: true
    tags: release-montoring.org
    when: env == "production"

  - role: httpd/reverseproxy
    website: stg.release-monitoring.org
    destname: stg.release-monitoring
    balancer_name: apps-ocp
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    targettype: openshift
    ocp4: true
    keephost: true
    tags: release-montoring.org
    when: env == "staging"

  - role: httpd/reverseproxy
    website: whatcanidoforfedora.org
    destname: whatcanidoforfedora
    balancer_name: app-ocp
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    targettype: openshift
    ocp4: true
    keephost: true
    tags: whatcanidoforfedora.org

  - role: httpd/reverseproxy
    website: testdays.fedoraproject.org
    destname: testdays
    balancer_name: app-os
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    targettype: openshift
    ocp4: true
    keephost: true
    tags: testdays

  - role: httpd/reverseproxy
    website: packager-dashboard.fedoraproject.org
    destname: packager-dashboard
    balancer_name: app-os
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    targettype: openshift
    ocp4: true
    keephost: true
    tags: packager-dashboard

  - role: httpd/reverseproxy
    website: "languages{{ env_suffix }}.fedoraproject.org"
    destname: languages
    balancer_name: app-os
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    targettype: openshift
    ocp4: true
    keephost: true
    tags:
    - languages

  - role: httpd/reverseproxy
    website: debuginfod.fedoraproject.org
    destname: debuginfod
    # manage non-trivial reverse-proxy specs in template
    proxyurl: http://debuginfod01:8002
    proxyopts: "connectiontimeout=600 timeout=600 keepalive=on nocanon"
    tags:
    - debuginfod

  - role: httpd/reverseproxy
    website: packages.fedoraproject.org
    destname: fedora-packages-static
    balancer_name: app-os
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    targettype: openshift
    ocp4: true
    keephost: true
    tags:
    - fedora-packages-static

  - role: httpd/reverseproxy
    website: "discourse2fedmsg{{ env_suffix }}.fedoraproject.org"
    destname: discourse2fedmsg
    balancer_name: app-os
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    targettype: openshift
    ocp4: true
    keephost: true
    tags: discourse2fedmsg

  - role: httpd/reverseproxy
    website: ipsilon-project.org
    destname: ipsilon-website
    balancer_name: apps-ocp
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    targettype: openshift
    ocp4: true
    keephost: true
    tags: ipsilon-website

  - role: httpd/reverseproxy
    website: awx.fedoraproject.org
    destname: awx
    balancer_name: app-ocp
    balancer_members: "{{ ocp_nodes }}"
    targettype: openshift
    ocp4: true
    keephost: true
    tags:
    - awx
    when: env == "production"

  - role: httpd/reverseproxy
    website: "openscanhub{{ env_suffix }}.fedoraproject.org"
    destname: openscanhub
    balancer_name: apps-ocp
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    targettype: openshift
    keephost: true
    ocp4: true
    tags: openscanhub

  - role: httpd/reverseproxy
    website: "kanban.qa{{ env_suffix }}.fedoraproject.org"
    destname: kanban
    balancer_name: apps-ocp
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    targettype: openshift
    keephost: true
    ocp4: true
    tags:
    - kanban

  - role: httpd/reverseproxy
    website: "fedoraplanet.org"
    destname: fedoraplanet
    balancer_name: apps-ocp
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    targettype: openshift
    keephost: true
    ocp4: true
    tags:
    - fedoraplanet

  - role: httpd/reverseproxy
    website: "webhook{{ env_suffix }}.fedoraproject.org"
    destname: webhook2fedmsg
    balancer_name: apps-ocp
    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
    targettype: openshift
    keephost: true
    ocp4: true
    tags:
    - webhook2fedmsg