---

govuk::apps::contacts::vhost: contacts-admin
govuk::apps::contacts::vhost_protected: true

govuk::apps::event_store::mongodb_servers:
  - 'mongo-1.backend'
  - 'mongo-2.backend'
  - 'mongo-3.backend'

govuk::apps::frontend::vhost_protected: true

govuk_elasticsearch::local_proxy::servers:
  - 'elasticsearch-1.backend'
  - 'elasticsearch-2.backend'
  - 'elasticsearch-3.backend'

lv:
  data:
    pv: '/dev/sdb1'
    vg: 'vhost'

mount:
  /data/vhost:
    disk: '/dev/mapper/vhost-data'
    govuk_lvm: 'data'
    mountoptions: 'defaults'

---

govuk::apps::contacts::vhost: contacts-admin

govuk::apps::event_store::mongodb_servers:
  - 'mongo-1.backend'
  - 'mongo-2.backend'
  - 'mongo-3.backend'

govuk::apps::frontend::vhost_protected: true

govuk_elasticsearch::local_proxy::servers:
  - 'elasticsearch-1.backend'
  - 'elasticsearch-2.backend'
  - 'elasticsearch-3.backend'

lv:
  data:
    pv: '/dev/sdb1'
    vg: 'vhost'

mount:
  /data/vhost:
    disk: '/dev/mapper/vhost-data'
    govuk_lvm: 'data'
    mountoptions: 'defaults'

Remove basic auth from Contacts Admin
Remove basic auth from Contacts Admin

We default to not enabling basic auth, but contacts admin was left protected
because of a concern that it might have unauthenticated routes for previewing
draft content, see: e73d8249815ad8069c52dd1b9dc5f34959503de2. This isn't the
case, so we can remove basic auth.

Contacts Admin is special in one way, and that is that the admin app is
deployed to frontend and backend, with configuration differences and is used to
serve the public index page:
https://www.gov.uk/government/organisations/hm-revenue-customs/contact
