---
# Node Factors
node:
  name: "fw"
  group: "svadmins"
  uid: 2001
  home_path: "/home/fw"
  ssh_san: "{{ node['name'] }},{{ node['name'] }}.{{ domain['internal'] }}"
  local_san: "localhost {{ node['name'] }}.{{ domain['internal'] }}"

# VM Factors
vm:
  name: "fw"
  cpu: 4
  cpu_pin: |
    <vcpupin vcpu='0' cpuset='0'/>
    <vcpupin vcpu='1' cpuset='1'/>
    <vcpupin vcpu='2' cpuset='4'/>
    <vcpupin vcpu='3' cpuset='5'/>
    <emulatorpin cpuset='4-5'/>
  shares: 2048
  memory: 4
  storage: 64
  wan_mac: "0a:49:6e:4d:00:00"
  lan_mac: "0a:49:6e:4d:00:01"
  wan_net: "wan-net"
  lan_net: "lan-net"
  lan_group: "vlan-trunk"

# Network Factors
network:
  dns_serial: "{{ now().strftime('%Y%m%d') }}00"
  subnet:
    ipv4:
      client: "192.168.1.0/24"
      server: "192.168.10.0/24"
      user: "192.168.20.0/24"
      wg: "192.168.99.0/24"
      lla: "169.254.0.0/16"
    ipv6:
      client: "fd00:1::/64"
      server: "fd00:10::/64"
      wg: "fd00:99::/64"
      lla: "fe80::/10"
  podman:
    ipv4:
      lla: "169.254.1.2"
  reverse_zone:
    ipv4:
      client: "1.168.192.in-addr.arpa"
      server: "10.168.192.in-addr.arpa"
    ipv6:
      client: "0.0.0.0.0.0.0.0.1.0.0.0.0.0.d.f.ip6.arpa"
      server: "0.0.0.0.0.0.0.0.0.1.0.0.0.0.d.f.ip6.arpa"
  fw:
    ipv4:
      client: "192.168.1.1"
      server: "192.168.10.1"
      user: "192.168.20.1"
      wg: "192.168.99.1"
      reverse: "1"
    ipv6:
      client: "fd00:1::1"
      server: "fd00:10::1"
      wg: "fd00:99::1"
      reverse: "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0"
    alias:
      - "ntp"
      - "crowdsec"
  blocky:
    ipv4:
      server: "192.168.10.2"
      reverse: "2"
    ipv6:
      server: "fd00:10::2"
      reverse: "2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0"
  bind:
    ipv4:
      server: "192.168.10.3"
      reverse: "3"
    ipv6:
      server: "fd00:10::3"
      reverse: "3.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0"
  console:
    ipv4:
      client: "192.168.1.20"
      wg: "192.168.99.20"
      reverse: "20"
    ipv6:
      client: "fd00:1::20"
      wg: "fd00:99::20"
      reverse: "0.2.0.0.0.0.0.0.0.0.0.0.0.0.0.0"
  vmm:
    ipv4:
      client: "192.168.1.10"
      server: "192.168.10.10"
      reverse: "10"
    ipv6:
      client: "fd00:1::10"
      server: "fd00:10::10"
      reverse: "0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0"
    alias:
      - "init.vmm"
  bk:
    ipv4:
      server: "192.168.10.9"
      reverse: "9"
    ipv6:
      server: "fd00:10::9"
      reverse: "9.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0"
    alias:
      - "kopia"
  infra:
    ipv4:
      server: "192.168.10.11"
      reverse: "11"
    ipv6:
      server: "fd00:10::11"
      reverse: "1.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0"
    alias:
      - "ca"
      - "postgresql"
      - "mariadb"
      - "ldap"
      - "maddy"
      - "prometheus"
      - "loki"
      - "grafana"
  auth:
    ipv4:
      server: "192.168.10.12"
      reverse: "12"
    ipv6:
      server: "fd00:10::12"
      reverse: "2.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0"
    alias:
      - "authelia"
  app:
    ipv4:
      server: "192.168.10.13"
      reverse: "13"
    ipv6:
      server: "fd00:10::13"
      reverse: "3.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0"
    alias:
      - "*.app"
  switch:
    ipv4:
      client: "192.168.1.2"
      reverse: "2"
  printer:
    ipv4:
      client: "192.168.1.101"
      reverse: "101"

# Suricata Factors
# suricata_home_net: '[10.0.0.0/8,172.16.0.0/12,192.168.0.0/16]'
suricata:
  home_net: '[10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,fd00::/8,fe80::/8]'
  interfaces: ["wan", "client", "server", "user"]