---
# Global vars
timezone: "Asia/Seoul"
ansible_ssh_private_key_file: "/etc/secrets/{{ hostvars['console']['node']['uid'] }}/id_console"

# CA
root_cert_filename: "ilnmors_root_ca.crt"
intermediate_cert_filename: "ilnmors_intermediate_ca.crt"
intermediate_key_filename: "ilnmors_intermediate_ca.key"

# Domains
domain:
  public: "ilnmors.com"
  internal: "ilnmors.internal"
  dc: "dc=ilnmors,dc=internal"
  org: "ilnmors"

# DNS configuration including bind and blocky should be set manually.
# named.conf.j2 is also set manually.
# Check the hosts.j2 when cname records are fixed

services:
  # common
  wireguard:
    domain:
      public: "vpn"
    ports:
      udp: "11290"
  crowdsec:
    domain:
      internal: "crowdsec"
    ports:
      https: "8080"
    dependency:
      cert: true
  kopia:
    domain:
      internal: "kopia"
    ports:
      https: "51515"
    dependency:
      cert: true
  caddy:
    ports:
      http: "2080"
      https: "2443"
  # fw
  bind:
    domain:
      internal: "bind"
    ports:
      dns: "53"
  blocky:
    domain:
      internal: "blocky"
    ports:
      https: "443"
      dns: "53"
      dot: "853"
    dependency:
      cert: true
  # infra
  postgresql:
    domain:
      internal: "postgresql"
    ports:
      tcp: "5432" # postgresql db connection port
    subuid: "100998"
    dependency:
      cert: true
  ldap:
    domain:
      internal: "ldap"
    ports:
      http: "17170"
      ldaps: "6360"
    subuid: "100999"
    dependency:
      cert: true
      web: "infra-internal"
      db: "postgresql"
  maddy:
    domain:
      internal: "maddy"
    ports:
      smtp: "2587"
      imaps: "2993"
    dependency:
      cert: true
      db: "postgresql"
  ca:
    domain:
      internal: "ca"
    ports:
      https: "9000"
    subuid: "100999"
  x509-exporter:
    ports:
      http: "9793"
    subuid: "165533"
  prometheus:
    domain:
      internal: "prometheus"
    ports:
      https: "9090"
    subuid: "165533"
    dependency:
      cert: true
      web: "infra-internal"
  loki:
    domain:
      internal: "loki"
    ports:
      https: "3100"
    subuid: "110000"
    dependency:
      cert: true
  grafana:
    domain:
      internal: "grafana"
    ports:
      http: "3000" # infra
    subuid: "100471"
    dependency:
      web: "infra-internal"
      db: "postgresql"
  # auth
  authelia:
    domain:
      public: "authelia"
    ports:
      http: "9091"
    dependency:
      web: "auth-public"
      db: "postgresql"
  redis:
    subuid: "100998"
  # app
  homepage:
    domain:
      public: "@"
      internal: "homepage.app"
    ports:
      http: "3000" # app
    dependency:
      web: "app-public"
  snappymail:
    domain:
      public: "webmail"
      internal: "webmail.app"
    ports:
      http: "8888"
    subuid: "100081"
    dependency:
      web: "app-public"
  vaultwarden:
    domain:
      public: "vault"
      internal: "vault.app"
    ports:
      http: "8000"
    dependency:
      web: "app-public"
      db: "postgresql"
  gitea:
    domain:
      public: "gitea"
      internal: "gitea.app"
    ports:
      http: "3001"
    subuid: "100999"
    dependency:
      web: "app-public"
      db: "postgresql"
  nextcloud:
    domain:
      public: "nextcloud"
      internal: "nextcloud.app"
    ports:
      http: "8002"
      redis: "6382"
    subuid: "100032"
    dependency:
      web: "app-public"
      db: "postgresql"
  collabora:
    domain:
      public: "collabora"
      internal: "collabora.app"
    ports:
      http: "9980"
    subuid: "101000"
    dependency:
      web: "app-public"
  immich:
    domain:
      public: "immich"
      internal: "immich.app"
    ports:
      http: "2283"
      redis: "6379"
    dependency:
      web: "app-public"
      db: "postgresql"
  immich-ml:
    ports:
      http: "3003"
  outline:
    domain:
      public: "outline"
      internal: "outline.app"
    ports:
      http: "3004"
      redis: "6384"
    subuid: "101000"
    dependency:
      web: "app-public"
      db: "postgresql"
  memos:
    domain:
      public: "memos"
      internal: "memos.app"
    ports:
      http: "3005"
    subuid: "110000"
    dependency:
      web: "app-public"
      db: "postgresql"
  sure:
    domain:
      public: "sure"
      internal: "sure.app"
    ports:
      http: "3002"
      redis: "6383"
    subuid: "100999"
    dependency:
      web: "app-public"
      db: "postgresql"
  paperless:
    domain:
      public: "paperless"
      internal: "paperless.app"
    ports:
      http: "8001"
      redis: "6380"
    subuid: "100999"
    dependency:
      web: "app-public"
      db: "postgresql"
  mealie:
    domain:
      public: "mealie"
      internal: "mealie.app"
    ports:
      http: "9001"
    subuid: "100910"
    dependency:
      web: "app-public"
      db: "postgresql"
  homebox:
    domain:
      public: "homebox"
      internal: "homebox.app"
    ports:
      http: "7745"
    dependency:
      web: "app-public"
      db: "postgresql"

version:
  packages:
    sops: "3.13.1"
    step: "0.30.2"
    kopia: "0.23.0"
    blocky: "0.29.0"
    alloy: "1.16.1"
  containers:
    # common
    caddy: "2.11.4"
    # infra
    ca: "0.30.2"
    ## Postgresql
    postgresql: "18.4"
    ### For immich - https://github.com/immich-app/base-images/blob/main/postgres/versions.yaml
    ### pgvector: "v0.8.1"
    vectorchord: "1.1.1"
    ## lldap
    ldap: "v0.6.3"
    ## maddy
    maddy: "0.9.5"
    x509-exporter: "4.1.0"
    prometheus: "v3.12.0"
    loki: "3.7.1"
    grafana: "13.0.1"
    # Auth
    authelia: "4.39.20"
    # App
    vaultwarden: "1.36.0"
    gitea: "1.26.4"
    redis: "8.8.0"
    immich: "v2.7.5"
    paperless: "2.20.15"
    nextcloud: "34.0.0"
    collabora: "26.04.1.4.1"
    sure: "0.7.1-hotfix.1"
    outline: "1.8.1"
    memos: "0.29.1"
    mealie: "v3.19.2"
    homebox: "0.26.2"
    homepage: "v1.13.2"
    snappymail: "v2.38.2"