all:
  vars:
    api_endpoint: "{{ hostvars[groups['server'][0]]['ansible_host'] | default(groups['server'][0]) }}"

    cert_manager_state: present
    cert_manager_version: v1.18.2

    letsencrypt_clusterissuers:
      staging:
        server: https://acme-staging-v02.api.letsencrypt.org/directory
        email: "{{ vault_letsencrypt_issuer_email }}"
      prod:
        server: https://acme-v02.api.letsencrypt.org/directory
        email: "{{ vault_letsencrypt_issuer_email }}"

    gitea_chart_version: 12.3.0
    gitea_state: present
    gitea_host: gitea.nehrke.info
    gitea_certificate_issuer: letsencrypt-prod
    gitea_image_pull_policy: Always
    gitea_image_registry_secret: "{{ vault_gitea_pull_registry_secret | b64encode }}"
    gitea_admin_user: "{{ vault_gitea_admin_user }}"
    gitea_admin_password: "{{ vault_gitea_admin_password }}"
    gitea_admin_email: "{{ vault_gitea_admin_email }}"

    concourse_state: present
    concourse_chart_version: 19.0.2
    concourse_certificate_issuer: letsencrypt-prod
    concourse_host: ci.nehrke.info
    concourse_local_users: "{{ vault_concourse_local_users }}"
    concourse_worker_replicas: 2

k3s_cluster:
  vars:
    ansible_user: root
    # note the space between the IPs!
    dns_servers: 8.8.8.8 8.8.4.4

agent:
  vars:
    ansible_ssh_common_args: -o StrictHostKeyChecking=accept-new -o ProxyCommand="ssh -p {{ hostvars[groups['server'][0]]['ansible_port'] }} -W %h:%p -q root@{{ api_endpoint }}"
    k3s_version: v1.31.6+k3s1

server:
  vars:
    ansible_ssh_common_args: '-o StrictHostKeyChecking=accept-new'
    k3s_version: v1.31.6+k3s1