<commit_before>sublime-text:
    channel: dev

rsyslog:
    configs:
        12-nginx: |
            :msg, startswith, "nginx" -/var/log/nginx2.log
            & stop
            :msg, regex, "^ *\[ *[0-9]*\.[0-9]*\] nginx" -/var/log/nginx-reg.log
            & stop


os:
    temp_directories_in_memory: False


nvm:
    target_directory: /home/vagrant/.local/nvm
    user: vagrant


spotify:
    user: vagrant


git:
    install_from_source: True
    version: 2.12.0 sha256=1821766479062d052cc1897d0ded95212e81e5c7f1039786bc4aec2225a32027


openssh_client:
    known_hosts:
        "example.com":
            - ssh-rsa AAAAB3Nz<..>UoxVdTB
        "[customport.example.com]:3271":
            - ssh-ed25519 AAAAC<..>8WM1
            - ssh-rsa AAAAB3Nz<..>eLeW3TZ


openssh_server:
    allow_groups: []
    host_ed25519_key: |
        -----BEGIN OPENSSH PRIVATE KEY-----
        b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW
        QyNTUxOQAAACAUCzHIKGXG4GnpF2tCcXwSq013gROeoL3YKYC1FpDBgQAAAJgEhRIKBIUS
        CgAAAAtzc2gtZWQyNTUxOQAAACAUCzHIKGXG4GnpF2tCcXwSq013gROeoL3YKYC1FpDBgQ
        AAAEBRqtBkjjNnmauCvO/WYWV6lALsraCmageYM+0CB9LCjxQLMcgoZcbgaekXa0JxfBKr
        TXeBE56gvdgpgLUWkMGBAAAAFXRhcmplaUAzMTMudGh1c295LmNvbQ==
        -----END OPENSSH PRIVATE KEY-----


cachish:
    items:
        /sandshrew/database-url:
            module: Heroku
            parameters:
                some param 1: foo
                bar: foobar
    auth:
        footoken: /sandshrew/*

timezone: UTC

cron:
    mailto: <EMAIL>

powerdns:
    dnsupdate: True
    db_password: <PASSWORD>
    allow_dnsupdate_from:
        - 0.0.0.0/0
    allow_axfr_ips:
        - 192.168.127.12
        - 172.16.58.3
    repo: auth-40


poff:
    secret_key: randomsecretkey
    db_password: <PASSWORD>


tls-terminator:
    error_pages:
        {% raw %}
        429: |
            <!doctype html>
            <title>That's enough</title>
            <p>Too much traffic from you to {{ site }}, give the poor server a rest.</p>
        {% endraw %}
        504:
            content_type: application/json
            content: |
                {
                    "error": {
                        "status": 502,
                        "message": "Timed out"
                    }
                }

    example.com:
        backends:
            /:
                upstreams:
                    - http://127.0.0.1:5000 weight=3
                    - http://127.0.0.1:5001
                upstream_keepalive: 16
                upstream_least_conn: True
                add_headers:
                    X-Frame-Options: sameorigin
            /other: http://127.0.0.1:5002
        extra_locations:
            /.well-known/assetlinks.json: |
                add_header content-type application/json;
                return 200 '[{ "namespace": "android_app",
                   "package_name": "org.digitalassetlinks.example",
                   "sha256_cert_fingerprints":
                     ["14:6D:E9:83:C5:73:06:50:D8:EE:B9:95:2F:34:FC:64:16:"
                      "A0:83:42:E6:1D:BE:A8:8A:04:96:B2:3F:CF:44:E5"]}]';
        rate_limit:
            zones:
                default:
                    size: 3m
                    rate: 5r/m
                sensitive:
                    size: 1m
                    rate: 2r/m
            backends:
                /:
                    zone: default
                    burst: 3
                /login:
                    zone: sensitive
                    burst: 2


hardening:
    module_blacklist:
        - i2c_core
        - cdrom


dotfiles:
    thing: |
        hello
        is there anybody out there?

users:
    vagrant:
        install:
            - pyenv
    tempuser:
        optional_groups:
            - phpworker
        dotfiles:
            .bashrc:
                contents_pillar: dotfiles:thing
                mode: 754


nginx:
    allow_sources_v4:
        - 127.0.0.1
        - 127.0.0.3
    allow_sources_v6:
        - fe80::abcd
    proxy_read_timeout: 30
    package: nginx-full
    modules:
        - /usr/lib/nginx/modules/ngx_http_auth_pam_module.so
    default_key: |
        -----BEGIN RSA PRIVATE KEY-----
        MIIEpQIBAAKCAQEA6ss5SR5Ut0bBdrEol//1pjPWTS1o7Q5q3nmPnZwQ1ZGz387u
        bJTfyVPwc/RPvMtSlRwBJGk/q/kdmbm8CxD7fPCspMVOp9zP/jdQvBIKRb224B0m
        lta7EcJeCeWj6f/RO3rEP8QZLh5GL8FYRkrpBalD1qjWqRmerz6oHQb23oqmAwvZ
        NHEcfpkixg9g1+PFGVNHcuPhbrI9Ot6LW+SXd8DdGqEE4XQYDBJ2E7sPFsHiir32
        8xH7DFSuzw/9gkYpBF8E+B4Su+r6lPqSVeGGJ4I9M87kt+TA/uey1WLXcfwsyjwU
        RyhJ5SYkKW1x6Ctqd9kztWfeQzm0BhbIoNKGjwIDAQABAoIBAQCl9DJvXgLe8CH6
        NMnOddo5OVZ1gm0xcQlUanN6IT881RlgTbD0Cl4KvUutibd6Z/Pc9MhR5hpdAV1M
        tJ0W7U/0RWChrdwkhcx1kL99zvp3xNonmjMWVnwu10UElc2/rVNESUfBEmgB0uAl
        DPHJ7VS67aLHbNsc9sDUeOL2cV+4dsi97JhN302nk/gMf6nKYXEoHhSxwuryIW52
        H43DDwD9xd+8dYpAlbiQunoQe63BYRN2qkalbfkqnmxKdivpE32ZJzhBM/KOiS88
        TJojH0X1qF9Q9Hhw0E565+9Pay7gH30LvOMlOu+KxtfcGupDwVliGiUe6E18N9gA
        cZBB0mIhAoGBAPb/2buXJOtVEvSy4hjNO0j2gPCUUYbXldsAjGPyTGsOuk2Ho6Cy
        7DM/vBwsXXJi2KaDzndMqg3B6Tjl2JFg/lzCekAbwZJ9yNTKAyJmqMy/Mkyquvi/<commit_msg>Remove package override in default pillar test values<commit_after>sublime-text:
    channel: dev

rsyslog:
    configs:
        12-nginx: |
            :msg, startswith, "nginx" -/var/log/nginx2.log
            & stop
            :msg, regex, "^ *\[ *[0-9]*\.[0-9]*\] nginx" -/var/log/nginx-reg.log
            & stop


os:
    temp_directories_in_memory: False


nvm:
    target_directory: /home/vagrant/.local/nvm
    user: vagrant


spotify:
    user: vagrant


git:
    install_from_source: True
    version: 2.12.0 sha256=1821766479062d052cc1897d0ded95212e81e5c7f1039786bc4aec2225a32027


openssh_client:
    known_hosts:
        "example.com":
            - ssh-rsa AAAAB3Nz<..>UoxVdTB
        "[customport.example.com]:3271":
            - ssh-ed25519 AAAAC<..>8WM1
            - ssh-rsa AAAAB3Nz<..>eLeW3TZ


openssh_server:
    allow_groups: []
    host_ed25519_key: |
        -----BEGIN OPENSSH PRIVATE KEY-----
        b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW
        QyNTUxOQAAACAUCzHIKGXG4GnpF2tCcXwSq013gROeoL3YKYC1FpDBgQAAAJgEhRIKBIUS
        CgAAAAtzc2gtZWQyNTUxOQAAACAUCzHIKGXG4GnpF2tCcXwSq013gROeoL3YKYC1FpDBgQ
        AAAEBRqtBkjjNnmauCvO/WYWV6lALsraCmageYM+0CB9LCjxQLMcgoZcbgaekXa0JxfBKr
        TXeBE56gvdgpgLUWkMGBAAAAFXRhcmplaUAzMTMudGh1c295LmNvbQ==
        -----END OPENSSH PRIVATE KEY-----


cachish:
    items:
        /sandshrew/database-url:
            module: Heroku
            parameters:
                some param 1: foo
                bar: foobar
    auth:
        footoken: /sandshrew/*

timezone: UTC

cron:
    mailto: <EMAIL>

powerdns:
    dnsupdate: True
    db_password: <PASSWORD>
    allow_dnsupdate_from:
        - 0.0.0.0/0
    allow_axfr_ips:
        - 192.168.127.12
        - 172.16.58.3
    repo: auth-40


poff:
    secret_key: randomsecretkey
    db_password: <PASSWORD>


tls-terminator:
    error_pages:
        {% raw %}
        429: |
            <!doctype html>
            <title>That's enough</title>
            <p>Too much traffic from you to {{ site }}, give the poor server a rest.</p>
        {% endraw %}
        504:
            content_type: application/json
            content: |
                {
                    "error": {
                        "status": 502,
                        "message": "Timed out"
                    }
                }

    example.com:
        backends:
            /:
                upstreams:
                    - http://127.0.0.1:5000 weight=3
                    - http://127.0.0.1:5001
                upstream_keepalive: 16
                upstream_least_conn: True
                add_headers:
                    X-Frame-Options: sameorigin
            /other: http://127.0.0.1:5002
        extra_locations:
            /.well-known/assetlinks.json: |
                add_header content-type application/json;
                return 200 '[{ "namespace": "android_app",
                   "package_name": "org.digitalassetlinks.example",
                   "sha256_cert_fingerprints":
                     ["14:6D:E9:83:C5:73:06:50:D8:EE:B9:95:2F:34:FC:64:16:"
                      "A0:83:42:E6:1D:BE:A8:8A:04:96:B2:3F:CF:44:E5"]}]';
        rate_limit:
            zones:
                default:
                    size: 3m
                    rate: 5r/m
                sensitive:
                    size: 1m
                    rate: 2r/m
            backends:
                /:
                    zone: default
                    burst: 3
                /login:
                    zone: sensitive
                    burst: 2


hardening:
    module_blacklist:
        - i2c_core
        - cdrom


dotfiles:
    thing: |
        hello
        is there anybody out there?

users:
    vagrant:
        install:
            - pyenv
    tempuser:
        optional_groups:
            - phpworker
        dotfiles:
            .bashrc:
                contents_pillar: dotfiles:thing
                mode: 754


nginx:
    allow_sources_v4:
        - 127.0.0.1
        - 127.0.0.3
    allow_sources_v6:
        - fe80::abcd
    proxy_read_timeout: 30
    default_key: |
        -----BEGIN RSA PRIVATE KEY-----
        <KEY>
        <KEY>
        <KEY>
{'fraction_non_alphanumeric': 0.09192705556148022, 'fraction_numerical': 0.06899861362909246, 'mean_word_length': 1.5636960087479497, 'pattern_counts': {'":': 16, '<': 28, '<?xml version=': 0, '>': 28, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 16, 'substrings_counts': 2, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '865316', 'n_tokens_mistral': 4070, 'n_tokens_neox': 3550, 'n_words': 462}