---
# Global vars
timezone: "Asia/Seoul"
ansible_ssh_private_key_file: "/etc/secrets/{{ hostvars['console']['node']['uid'] }}/id_console"

# CA
root_cert_filename: "ilnmors_root_ca.crt"
intermediate_cert_filename: "ilnmors_intermediate_ca.crt"
intermediate_key_filename: "ilnmors_intermediate_ca.key"

# Domains
domain:
  public: "ilnmors.com"
  internal: "ilnmors.internal"
  dc: "dc=ilnmors,dc=internal"
  org: "ilnmors"

services:
  # common
  wireguard:
    domain:
      public: "vpn"
    ports:
      udp: "11290"
  crowdsec:
    domain:
      internal: "crowdsec"
    ports:
      https: "8080"
    sub:
      machines:
        - "fw"
        - "vmm"
        - "bk"
        - "infra"
        - "auth"
        - "app"
      bouncers:
        - "fw"
        - "caddy"
    dependency:
      cert: true
  kopia:
    domain:
      internal: "kopia"
    ports:
      https: "51515"
    uid: "951"
    dependency:
      cert: true
  caddy:
    ports:
      http: "2080"
      https: "2443"
  # fw
  bind:
    domain:
      internal: "bind"
    ports:
      dns: "53"
  blocky:
    domain:
      internal: "blocky"
    ports:
      https: "443"
      dns: "53"
      dot: "853"
    dependency:
      cert: true
  # infra
  postgresql:
    domain:
      internal: "postgresql"
    ports:
      tcp: "5432" # postgresql db connection port
    subuid: "100998"
    dependency:
      cert: true
  mariadb:
    domain:
      internal: "mariadb"
    ports:
      tcp: "3306" # mariadb db connection port
    subuid: "100998"
    dependency:
      cert: true
  ldap:
    domain:
      internal: "ldap"
    ports:
      http: "17170"
      ldaps: "6360"
    subuid: "100999"
    dependency:
      cert: true
      web: "infra-internal"
      db: "postgresql"
  maddy:
    domain:
      internal: "maddy"
    ports:
      smtp: "2587"
      imaps: "2993"
    dependency:
      cert: true
      db: "postgresql"
  ca:
    domain:
      internal: "ca"
    ports:
      https: "9000"
    subuid: "100999"
  x509-exporter:
    ports:
      http: "9793"
    subuid: "165533"
  prometheus:
    domain:
      internal: "prometheus"
    ports:
      https: "9090"
    subuid: "165533"
    dependency:
      cert: true
      web: "infra-internal"
  loki:
    domain:
      internal: "loki"
    ports:
      https: "3100"
    subuid: "110000"
    dependency:
      cert: true
  grafana:
    domain:
      internal: "grafana"
    ports:
      http: "3000" # infra
    subuid: "100471"
    dependency:
      web: "infra-internal"
      db: "postgresql"
  # auth
  authelia:
    domain:
      public: "authelia"
    ports:
      http: "9091"
    dependency:
      web: "auth-public"
      db: "postgresql"
  # app
  redis:
    subuid: "100998"
  homepage:
    domain:
      public: "@"
      internal: "homepage.app"
    ports:
      http: "3000" # app
    dependency:
      web: "app-public"
  snappymail:
    domain:
      public: "webmail"
      internal: "webmail.app"
    ports:
      http: "8888"
    subuid: "100081"
    dependency:
      web: "app-public"
  vaultwarden:
    domain:
      public: "vault"
      internal: "vault.app"
    ports:
      http: "8000"
    dependency:
      web: "app-public"
      db: "postgresql"
  gitea:
    domain:
      public: "gitea"
      internal: "gitea.app"
    ports:
      http: "3001"
    subuid: "100999"
    dependency:
      web: "app-public"
      db: "postgresql"
  mastodon:
    domain:
      public: "mastodon"
      internal: "mastodon.app"
    ports:
      http: "3002"
      api: "4000"
      redis: "6379"
    subuid: "100990"
    route:
      api: "/api/v1/streaming*"
    dependency:
      web: "app-public"
      db: "postgresql"
  nextcloud:
    domain:
      public: "nextcloud"
      internal: "nextcloud.app"
    ports:
      http: "8001"
      redis: "6380"
    subuid: "100032"
    dependency:
      web: "app-public"
      db: "postgresql"
  collabora:
    domain:
      public: "collabora"
      internal: "collabora.app"
    ports:
      http: "9980"
    subuid: "101000"
    dependency:
      web: "app-public"
  immich:
    domain:
      public: "immich"
      internal: "immich.app"
    ports:
      http: "2283"
      redis: "6381"
    dependency:
      web: "app-public"
      db: "postgresql"
  immich-ml:
    ports:
      http: "3003"
  booklogr:
    domain:
      public: "booklogr"
      internal: "booklogr.app"
    ports:
      http: "5150"
      api: "5000"
    route:
      api: "/v1 /v1/*"
      deny: "/v1/login /v1/login/* /v1/register /v1/register/*"
    dependency:
      web: "app-public"
      db: "postgresql"
  outline:
    domain:
      public: "outline"
      internal: "outline.app"
    ports:
      http: "3004"
      redis: "6382"
    subuid: "101000"
    dependency:
      web: "app-public"
      db: "postgresql"
  bookstack:
    domain:
      public: "bookstack"
      internal: "bookstack.app"
    ports:
      http: "8004"
    subuid: "100032"
    dependency:
      web: "app-public"
      db: "mariadb"
  sure:
    domain:
      public: "sure"
      internal: "sure.app"
    ports:
      http: "3006"
      redis: "6383"
    subuid: "100999"
    dependency:
      web: "app-public"
      db: "postgresql"
  papra:
    domain:
      public: "papra"
      internal: "papra.app"
    ports:
      http: "1221"
    subuid: "100998"
    dependency:
      web: "app-public"
  mealie:
    domain:
      public: "mealie"
      internal: "mealie.app"
    ports:
      http: "9000"
    subuid: "100910"
    dependency:
      web: "app-public"
      db: "postgresql"
  tandoor:
    domain:
      public: "tandoor"
      internal: "tandoor.app"
    ports:
      http: "8003"
    dependency:
      web: "app-public"
      db: "postgresql"
  homebox:
    domain:
      public: "homebox"
      internal: "homebox.app"
    ports:
      http: "7745"
    dependency:
      web: "app-public"
      db: "postgresql"
  romm:
    domain:
      public: "romm"
      internal: "romm.app"
    ports:
      http: "8002"
      redis: "6384"
    subuid: "100999"
    dependency:
      web: "app-public"
      db: "postgresql"


version:
  packages:
    sops: "3.13.2"
    step: "0.30.2"
    kopia: "0.23.1"
    blocky: "0.33.0"
    alloy: "1.17.1"
  containers:
    # common
    caddy: "2.11.4"
    # infra
    ca: "0.30.2"
    ## Postgresql
    postgresql: "18.4"
    ## Mariadb
    mariadb: "12.3.2"
    ### For immich - https://github.com/immich-app/base-images/blob/main/postgres/versions.yaml
    vectorchord: "1.1.1"
    ## lldap
    ldap: "v0.6.3"
    ## maddy
    maddy: "0.9.5"
    x509-exporter: "4.1.0"
    prometheus: "v3.13.2"
    loki: "3.7.4"
    grafana: "13.1.1"
    # Auth
    authelia: "4.39.20"
    # App
    vaultwarden: "1.37.1"
    gitea: "1.27.2"
    redis: "8.10.0"
    immich: "v3.1.0"
    nextcloud: "34.0.3"
    collabora: "26.04.3.1.1"
    sure: "0.7.3"
    outline: "1.9.2"
    mealie: "v3.22.0"
    homebox: "0.26.2"
    homepage: "v2.0.0"
    snappymail: "v2.38.2"
    mastodon: "v4.6.6"
    booklogr: "v1.11.1"
    papra: "26.6.1-rootless"
    romm: "5.1.0"
    tandoor: "2.6.13"
    bookstack: "26.5.3"