---

dependency: {}

driver:
  name: vagrant
  safe_files:
    # Preserve the ClamAV database files from previous runs on the
    # clamav-database helper machine. Meant to avoid hitting hard
    # limits for database downloads and getting completely blocked.
    - "*/clamav-database/*"
  provider:
    name: virtualbox

lint:
  name: yamllint
  options:
    config-file: ../../.yamllint.yml

platforms:

  - name: clamav-database
    box: debian/contrib-buster64
    memory: 512
    cpus: 1
    interfaces:
      - auto_config: true
        ip: 192.168.56.11
        network_name: private_network
        type: static
    config_options:
      synced_folder: true

  - name: ldap-server
    box: debian/contrib-buster64
    memory: 256
    cpus: 1
    interfaces:
      - auto_config: true
        ip: 192.168.56.12
        network_name: private_network
        type: static

  - name: client1-buster
    groups:
      - client
      - client-relay-allowed
      - buster
      - smtp-server-requiring-tls
    box: debian/contrib-buster64
    memory: 256
    cpus: 1
    interfaces:
      - auto_config: true
        ip: 192.168.56.21
        network_name: private_network
        type: static

  - name: client2-buster
    groups:
      - client
      - client-relay-forbidden
      - buster
      - smtp-server-refusing-tls
    box: debian/contrib-buster64
    memory: 256
    cpus: 1
    interfaces:
      - auto_config: true
        ip: 192.168.56.22
        network_name: private_network
        type: static

  - name: parameters-mandatory-buster64
    groups:
      - parameters-mandatory
      - buster
    box: debian/contrib-buster64
    memory: 2048
    cpus: 1
    interfaces:
      - auto_config: true
        ip: 192.168.56.31
        network_name: private_network
        type: static

  - name: parameters-optional-buster64
    groups:
      - parameters-optional
      - buster
    box: debian/contrib-buster64
    memory: 2048
    cpus: 1
    interfaces:
      - auto_config: true
        ip: 192.168.56.32
        network_name: private_network
        type: static

provisioner:
  name: ansible
  playbooks:
    cleanup: cleanup.yml
  config_options:
    defaults:
      force_valid_group_names: "ignore"
      interpreter_python: "/usr/bin/python3"
    ssh_connection:
      pipelining: "True"
  lint:
    name: ansible-lint

scenario:
  name: default

verifier:
  name: testinfra
  lint:
    name: flake8