---
# Node Factors
node:
  name: "fw"
  group: "svadmins"
  uid: 2001
  home_path: "/home/fw"
  ssh_san: "{{ node['name'] }},{{ node['name'] }}.{{ domain['internal'] }}"
  local_san: "localhost {{ node['name'] }}.{{ domain['internal'] }}"

# VM Factors
vm:
  name: "fw"
  cpu: 4
  cpu_pin: |
    <vcpupin vcpu='0' cpuset='0'/>
    <vcpupin vcpu='1' cpuset='1'/>
    <vcpupin vcpu='2' cpuset='4'/>
    <vcpupin vcpu='3' cpuset='5'/>
    <emulatorpin cpuset='4-5'/>
  shares: 2048
  memory: 4
  storage: 64
  wan_mac: "0a:49:6e:4d:00:00"
  lan_mac: "0a:49:6e:4d:00:01"
  wan_net: "wan-net"
  lan_net: "lan-net"
  lan_group: "vlan-trunk"

# Network Factors
# LLA is like MAC address for L3 (Network layer). Usually, subnet is used to separate network.
network4:
  subnet:
    client: "192.168.1.0/24"
    server: "192.168.10.0/24"
    user: "192.168.20.0/24"
    wg: "192.168.99.0/24"
    lla: "169.254.0.0/16"
  # You can use "{{ hostvars['fw']['network4']['firewall'].values() | join(', ') }}" for all
  firewall:
    client: "192.168.1.1"
    server: "192.168.10.1"
    user: "192.168.20.1"
    wg: "192.168.99.1"
  blocky:
    server: "192.168.10.2"
  bind:
    server: "192.168.10.3"
  console:
    client: "192.168.1.20"
    wg: "192.168.99.20"
  vmm:
    client: "192.168.1.10"
    server: "192.168.10.10"
  bk:
    server: "192.168.10.9"
  infra:
    server: "192.168.10.11"
  auth:
    server: "192.168.10.12"
  app:
    server: "192.168.10.13"
  switch:
    client: "192.168.1.2"
  printer:
    client: "192.168.1.101"

network6:
  subnet:
    client: "fd00:1::/64"
    server: "fd00:10::/64"
    wg: "fd00:99::/64"
    lla: "fe80::/10"
  firewall:
    client: "fd00:1::1"
    server: "fd00:10::1"
    wg: "fd00:99::1"
  blocky:
    server: "fd00:10::2"
  bind:
    server: "fd00:10::3"
  console:
    client: "fd00:1::20"
    wg: "fd00:99::20"
  vmm:
    client: "fd00:1::10"
    server: "fd00:10::10"
  bk:
    server: "fd00:10::9"
  infra:
    server: "fd00:10::11"
  auth:
    server: "fd00:10::12"
  app:
    server: "fd00:10::13"

# Suricata Factors
# suricata_home_net: '[10.0.0.0/8,172.16.0.0/12,192.168.0.0/16]'
suricata:
  home_net: '[10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,fd00::/8,fe80::/8]'
  interfaces: ["wan", "client", "server", "user"]