# {{ ansible_managed }}
#
hostname   = {{ __di_legacy_tcpserver_hostname }}
dir.fifo   = {{ di_legacy_tcpserver_fifo_directory }}
database   = {{ di_legacy_tcpserver_mysql_database }}:{{ di_legacy_tcpserver_mysql_username }}:{{ di_legacy_tcpserver_mysql_password }}@{{ di_legacy_tcpserver_mysql_host }}:{{ di_legacy_tcpserver_mysql_port }}

#daemon     = yes
user       = {{ __di_legacy_tcpserver_user }}
encryption = no

{% if not __di_legacy_tcpserver_logging %}
# disable log files
retry.log  = 0
{% endif %}

# access control lists
# Load balancers at rootnet.nl
acl = "zkl allow 87.233.176.101"
acl = "zkl allow 87.233.176.102"
# Vodafone NL
acl = "zkl allow 109.32.0.0/13"
acl = "zkl allow 31.136.0.0/14"
acl = "zkl allow 195.7.147.189"
acl = "zkl allow 195.7.147.180"
# T-Mobile NL
acl = "zkl allow 188.88.0.0-188.89.255.255"
acl = "zkl allow 94.157.0.0-94.157.191.255"
acl = "zkl allow 91.141.128.0-91.141.191.255"
acl = "zkl allow 84.241.192.0-84.241.199.255"
acl = "zkl allow 89.205.128.0-89.205.159.255"
acl = "zkl allow 89.205.192.0-89.205.207.255"
acl = "zkl allow 89.205.208.0-89.205.211.255"
acl = "zkl allow 89.205.224.0-89.205.255.255"
acl = "zkl allow 95.98.0.0-95.98.255.255"
acl = "zkl allow 178.224.0.0-178.227.255.255"
# T-Mobile UK
acl = "zkl allow 31.96.0.0 - 31.127.255.255"
acl = "zkl allow 149.254.48.0-149.254.51.255"
acl = "zkl allow 149.254.56.0-149.254.63.255"
acl = "zkl allow 149.254.180.0-149.254.183.255"
acl = "zkl allow 149.254.186.0-149.254.187.255"
acl = "zkl allow 149.254.234.0-149.254.235.255"
acl = "zkl allow 178.96.0.0-178.111.255.255"
# Deutsche Telekom AG (T-Mobile DE)
acl = "zkl allow 212.183.128.0-212.183.144.255"
# MTinfo (allow for selected hosts at rootnet.nl)
acl = "mtinfo allow localhost"
acl = "mtinfo allow 87.233.176.100"
acl = "mtinfo allow 87.233.176.101"
acl = "mtinfo allow 87.233.176.102"
acl = "mtinfo allow 87.233.176.103"
acl = "mtinfo allow 87.233.176.106"
# MTinfo Secure (allow for selected hosts at rootnet.nl)
acl = "secure allow 87.233.176.100"
acl = "secure allow 87.233.176.101"
acl = "secure allow 87.233.176.102"
acl = "secure allow 87.233.176.104"
acl = "secure allow 87.233.176.107"
# Debug interface (also soon to be obsolete MTinfo interface; allow from rootnet.nl)
acl = "debug allow localhost"
acl = "debug allow 87.233.176.100"
acl = "debug allow 87.233.176.101"
acl = "debug allow 87.233.176.102"
acl = "debug allow 87.233.176.103"
acl = "debug allow 87.233.176.104"
acl = "debug allow 87.233.176.106"
acl = "debug allow 87.233.176.107"