---
nbops_environment: production
nbops_admin_user: admin
nbops_admin_groups:
  - sudo
nbops_hostname: "{{ inventory_hostname }}"
nbops_fqdn: "{{ inventory_hostname }}"
nbops_timezone: Etc/UTC
nbops_locale: en_GB.UTF-8
nbops_ssh_port: 22
nbops_dns_servers:
  - 1.1.1.1
  - 9.9.9.9

nbops_standard_directories:
  - /srv/docker
  - /srv/config
  - /srv/backups
  - /srv/data
  - /srv/media
  - /etc/pki/internal
  - /etc/pki/internal/private
  - /etc/pki/internal/certs
  - /usr/local/share/ca-certificates/internal

nbops_base_packages:
  - acl
  - apt-transport-https
  - bash-completion
  - ca-certificates
  - chrony
  - curl
  - git
  - gnupg
  - htop
  - jq
  - locales
  - lsb-release
  - needrestart
  - qemu-guest-agent
  - rsync
  - sudo
  - ufw
  - unattended-upgrades
  - vim

nbops_sysctl:
  net.ipv4.ip_forward: "1"
  net.ipv6.conf.all.forwarding: "1"
  fs.inotify.max_user_watches: "1048576"
  fs.inotify.max_user_instances: "1024"

docker_users:
  - "{{ nbops_admin_user }}"

ufw_allowed_tcp_ports:
  - "{{ nbops_ssh_port }}"
ufw_allowed_udp_ports: []

monitoring_agent: none
monitoring_packages: []

mtls_ca_certificates: []
mtls_host_certificates: []
mtls_private_keys: []

nbops_proxy_network: proxy
nbops_service_routing_mode: host
nbops_service_domain_suffix: example.invalid
nbops_traefik_entrypoint: websecure
nbops_traefik_tls: true
nbops_traefik_file_bind_address: "0.0.0.0"
nbops_traefik_file_routes: []