# If the bastion ipv4 or v6 addresses aren't available (because this
# job runs in an environment without them) just fall back to the
# defaults for the real bridge.
{% if bastion_ipv4 %}
bastion_ipv4: {{ bastion_ipv4 }}
{% endif %}
{% if bastion_ipv6 %}
bastion_ipv6: {{ bastion_ipv6 }}
{% endif %}
bastion_public_key: {{ bastion_public_key }}
iptables_test_public_tcp_ports: {{ iptables_test_public_tcp_ports }}
iptables_egress_rules:
  - -o lo -j ACCEPT
  - -p tcp -m tcp --dport 25 --tcp-flags FIN,SYN,RST,ACK SYN -j REJECT --reject-with tcp-reset
# This is the file we log our backups to. This means the file is being
# changed while backups run which can lead to a warning and non zero exit
# code from borg. Just ignore it as we don't need to backup the file.
borg_backup_excludes_extra:
  - /var/log/borg-backup-borg-backup01.region.provider.opendev.org.log