# Global parameters
[global]
        dns forwarder = {{ samba_ad_dc_dns_forwarders | join(' ') }}
{% if samba_ad_dc_bind_interfaces_only and (samba_ad_dc_interfaces | reject('equalto', 'lo') | list | length) > 0 %}

        # Confine service binding AND samba_dnsupdate registration to loopback +
        # the LAN IP. Prevents the DC from registering Docker/CNI interface IPs
        # (172.17.x, 10.42.x) into the AD DNS zone. See roles/samba_ad_dc/defaults.
        interfaces = {{ samba_ad_dc_interfaces | join(' ') }}
        bind interfaces only = yes
{% endif %}

        netbios name = {{ (samba_ad_dc_netbios_name | default(inventory_hostname_short)) | upper }}
        realm = {{ samba_ad_dc_realm }}
        server string = {{ samba_ad_dc_server_string }}
        server role = {{ samba_ad_dc_server_role }}
        server services = {{ samba_ad_dc_server_services }}
        workgroup = {{ samba_ad_dc_workgroup }}
        idmap_ldb:use rfc2307 = {{ "yes" if samba_ad_dc_rfc2307 else "no" }}
        template homedir = {{ samba_ad_dc_template_homedir }}
        template shell   = {{ samba_ad_dc_template_shell }}

[sysvol]
        path = {{ samba_ad_dc_sysvol_path }}
        read only = No

[netlogon]
        path = {{ samba_ad_dc_netlogon_path }}
        read only = No