---
network_interface: "eth0"
network_ipv4_address: "10.0.0.254"
network_ipv4_gateway: "10.0.0.1"
network_prefer_ipv4: false
# Discover network_ipv6_gateway with: ip -6 route show default | grep ra (run on any device before disabling router RA)
# network_ipv6_gateway: "fe80::0000:1111:2222:3333"

pihole_hostname: "dns.home.arpa"
wg_portal_hostname: "vpn.home.arpa"
grafana_hostname: "monitor.home.arpa"
prometheus_hostname: "metrics.home.arpa"

# TOTP generator: `openssl rand -base64 32 | head -c "20" | base32`
pihole_totp_secret: "CHANGEME"
pihole_password: "{{ ('changeme' | hash('sha256') | hash('sha256'))[:64] }}"
pihole_interface: "{{ network_interface }}"
pihole_dhcp_enabled: true
pihole_dhcp_start: "10.0.0.100"
pihole_dhcp_end: "10.0.0.199"
pihole_dhcp_router: "{{ network_ipv4_address }}"
pihole_dhcp_hosts:
  - "ff:ff:ff:ff:ff:fe, 10.0.0.252,TV"
  - "ff:ff:ff:ff:ff:ff, 10.0.0.253,Printer"
pihole_dns_hosts:
  - "{{ network_ipv4_address }} {{ pihole_hostname }}"
  - "{{ network_ipv4_address }} {{ wg_portal_hostname }}"
  - "{{ network_ipv4_address }} {{ grafana_hostname }}"
  - "{{ network_ipv4_address }} {{ prometheus_hostname }}"
  - "{{ hostvars['git.home.arpa'].network_ipv4_address }} {{ hostvars['git.home.arpa'].cgit_hostname }}"

wireguard_autostart_connection: "vpn2"
wireguard_connections:
  # All wireguard config files are prefixed (internally) with wg-
  # The following connection/interface will be named wg-vpn2
  vpn2: |
    [Interface]
    PrivateKey = your_private_key_here
    Address = 10.2.0.2/32
    DNS = 10.2.0.1

    [Peer]
    PublicKey = server_public_key
    AllowedIPs = 0.0.0.0/0
    Endpoint = vpn.com:51820

gateway_enabled: true
gateway_router_interface: "{{ network_interface }}"
gateway_local_ipv4_subnet: "10.0.0.0/24"
gateway_local_ipv6_subnet: "fd00:0000:0000:0000::/64"

prometheus_host: "localhost"
prometheus_port: 9090
prometheus_retention: "15d"
prometheus_scrape_interval: "15s"
prometheus_node_exporter_port: 9100
prometheus_extra_scrape_configs:
  - name: "garage"
    targets: ["localhost:{{ garage_admin_port }}"]
    metrics_path: "/metrics"
grafana_port: 3000
grafana_admin_user: "admin"
grafana_admin_password: "changeme"
grafana_database_type: "sqlite3"
grafana_dashboards:
  - name: "node-exporter-full"
    url: "https://grafana.com/api/dashboards/1860/revisions/45/download"
    datasource_mappings:
      - key: "000000001"
        value: "prometheus"
  - name: "prometheus-overview"
    url: "https://grafana.com/api/dashboards/3662/revisions/2/download"
    datasource_mappings:
      - key: "${DS_THEMIS}"
        value: "prometheus"
  - name: "node-exporter-prometheus"
    url: "https://grafana.com/api/dashboards/11074/revisions/9/download"
    datasource_mappings:
      - key: "${DS__VICTORIAMETRICS}"
        value: "prometheus"
  - name: "garage"
    # yamllint disable-line rule:line-length
    url: "https://git.deuxfleurs.fr/Deuxfleurs/garage/raw/branch/main/script/telemetry/grafana-garage-dashboard-prometheus.json"
    datasource_mappings:
      - key: "${DS_prometheus}"
        value: "prometheus"

backup_device: "PARTLABEL=backup"
garage_rpc_secret: "changeme"
garage_access_key_id: "GK_changeme"
garage_secret_access_key: "changeme"
garage_bucket: "restic"
garage_data_dir: "/backup/garage/data"
garage_meta_dir: "/backup/garage/meta"