---
- hosts: webservers
  roles:
    - role: mastodon
      local_domain: m.comfycamp.space
      alternate_domains: mcomfyzeyibt2unmkttoxa2li2dzpsljcp3sasrioqsks4ayrl5kk2ad.onion
      vapid_public_key: BKSOPo1yo71g9_u9P2bxvIMI5GekLdmz0ozoBxvVE0ERSlYYTwd2_mOOpJZoZLr312M81hQCfLfvT8zVQRUEuqU=
      vapid_private_key: "{{ mastodon.vapid_private_key }}"
      db_pass: "{{ postgresql_users.mastodon }}"
      otp_secret: "{{ mastodon.otp_secret }}"
      secret_key_base: "{{ mastodon.secret_key_base }}"
      smtp_server: comfycamp.space
      smtp_login: mastodon@comfycamp.space
      smtp_from_address: mastodon@comfycamp.space
      smtp_password: "{{ mail_users['mastodon@comfycamp.space'] }}"
      active_record_encryption_deterministic_key: "{{ mastodon.active_record_encryption_deterministic_key }}"
      active_record_encryption_key_derivation_salt: "{{ mastodon.active_record_encryption_key_derivation_salt  }}"
      active_record_encryption_primary_key: "{{ mastodon.active_record_encryption_primary_key }}"
      ldap_enabled: true
      ldap_host: comfycamp.space
      ldap_base: DC=ldap,DC=goauthentik,DC=io
      ldap_bind_dn: cn=ldapservice,ou=users,dc=ldap,dc=goauthentik,dc=io
      ldap_password: "{{ ldap_password }}"