classes:
- system.nginx.server.single
- system.nginx.server.proxy.openstack_api
- system.nginx.server.proxy.openstack_vnc
- system.nginx.server.proxy.openstack_web
- system.nginx.server.proxy.openstack.glance_registry
- system.nginx.server.proxy.ssl
- system.salt.minion.cert.proxy
- cluster.virtual-mcp-pike-dvr-ssl-barbican
parameters:
  _param:
    cluster_public_host:  ${_param:openstack_proxy_address}
    nginx_proxy_ssl:
      enabled: true
      authority: ${_param:salt_minion_ca_authority}
    salt_minion_ca_host: cfg01.${linux:system:domain}
    nginx_proxy_openstack_api_address: ${_param:cluster_local_address}
    nginx_proxy_openstack_placement_host: 127.0.0.1
    nginx_proxy_openstack_placement_protocol: ${_param:cluster_public_protocol}
  nginx:
    server:
      site:
        nginx_ssl_redirect_openstack_web:
          redirect:
            protocol: https
            host: $host