---
# Build-related directories
global_artifacts_dir: "{{ inventory_dir }}/../artifacts"
global_cache_dir: "{{ inventory_dir }}/../.cache"

# Directory for static assets
global_files_dir: "{{ inventory_dir }}/../files"


ssh_users_root:
  - equinox
ssh_keys_root: "{{ ssh_users_root | default([]) | map('extract', users) | map(attribute='ssh') | flatten | list }}"
ssh_keys_root_extra: []

admin_users_host: []
sshd_allowusers_host: "{{ admin_users_host }}"

admin_users_group: []
sshd_allowusers_group: "{{ admin_users_group }}"


apt_repo_provider: default
apt_repo_providers:
  default:
    debian:
      host: deb.debian.org
      path: /debian
    debian_security:
      host: deb.debian.org
      path: /debian-security
    debian_archive:
      host: archive.debian.org
      path: /debian
    ubuntu:
      host: archive.ubuntu.com
      path: /ubuntu
    raspbian:
      host: raspbian.raspberrypi.org
      path: /raspbian
    kali:
      host: http.kali.org
      path: /kali
  hetzner:
    debian:
      host: mirror.hetzner.de
      path: /debian/packages
    debian_security:
      host: mirror.hetzner.de
      path: /debian/security
    debian_archive:
      host: archive.debian.org
      path: /debian
    ubuntu:
      host: mirror.hetzner.de
      path: /ubuntu/packages
    raspbian:
      host: raspbian.raspberrypi.org
      path: /raspbian
    kali:
      host: http.kali.org
      path: /kali
  ffgraz:
    debian:
      host: debian.ffgraz.net
      path: /debian
    debian_security:
      host: debian.ffgraz.net
      path: /debian-security
    debian_archive:
      host: debian.ffgraz.net
      path: /archive
    ubuntu:
      host: debian.ffgraz.net
      path: /ubuntu
    raspbian:
      host: debian.ffgraz.net
      path: /raspbian
    kali:
      host: http.kali.org
      path: /kali
  inode:
    debian:
      host: debian.inode.at
      path: /debian
    debian_security:
      host: security.debian.org
      path: /debian-security
    debian_archive:
      host: archive.debian.org
      path: /debian
    ubuntu:
      host: ubuntu.inode.at
      path: /ubuntu
    raspbian:
      host: raspbian.raspberrypi.org
      path: /raspbian
    kali:
      host: http.kali.org
      path: /kali
  anexia:
    debian:
      host: debian.anexia.at
      path: /debian
    debian_security:
      host: debian.anexia.at
      path: /debian-security
    debian_archive:
      host: archive.debian.org
      path: /debian
    ubuntu:
      host: ubuntu.anexia.at
      path: /ubuntu
    raspbian:
      host: debian.anexia.at
      path: /raspbian/raspbian
    kali:
      host: http.kali.org
      path: /kali


acme_directory_server_le_live_v1: "https://acme-v01.api.letsencrypt.org/directory"
acme_directory_server_le_staging_v1: "https://acme-staging.api.letsencrypt.org/directory"

acme_directory_server_le_live_v2: "https://acme-v02.api.letsencrypt.org/directory"
acme_directory_server_le_staging_v2: "https://acme-staging-v02.api.letsencrypt.org/directory"

acme_directory_server: "{{ acme_directory_server_le_staging_v2 }}"

## at least acmetool can't be used to change this after the account has been created (aka after the first run)
## and it's not recommended to keep this empty so we don't define it here to force the user to define it
# acme_account_email: