---
# file: group_vars/all

# Proxmox variables
proxmox_user: "root@pam"
proxmox_password: "{{ vault_proxmox_root_password }}"
proxmox_host: "main-street-usa.local.mk-labs.cloud"

# DNS variables
dns_server: "monorail" # .local.mk-labs.cloud"
#dns_admin: "admin"
base_domain: "local.mk-labs.cloud"
# DHCP server
#dhcp_server: "matchbox"

# Terraform variables
terraform_server: "infra01"

# Traefik variables
traefik_server: "lightning-lane"

# ---------------------------------------------------------------------------
# JARVIS automation account
# ---------------------------------------------------------------------------
# Public key for the 'jarvis' user provisioned by the linux-baseline role on
# every host. Public keys are not secret; the matching private key lives on
# the JARVIS command centre (carousel-of-progress) and, when needed, in
# group_vars/all/vault as vault_jarvis_ssh_private_key.
jarvis_ssh_public_key: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID5sym5ajFvDyzw395BkHv7qVb66XPTx/OF1p19MGuNo jarvis@mk-labs"

step_ca_principal_mappings:
  - local_user: wed
    principals:
      - ryan.blundon@protonmail.com
      - ryan.blundon
      - ryanblundon
  - local_user: rblundon
    principals:
      - ryan.blundon@protonmail.com
      - ryan.blundon
      - ryanblundon