---
network_zones:
  lan:
    vlan: 28
    prefix: 192.168.28.0/24
    gateway: 192.168.28.254
    dns:
#    - 192.168.28.254
#    - 9.9.9.9
    - 1.1.1.1
    dhcp:
      start: 100
      limit: 199
    offsets:
      ch-equinox-ws: 1
      ch-mc: 10
      ch-telesto: 20
      ch-calypso: 21
      ch-thetys: 22
      ch-dione: 23
      ch-helene: 24
      ch-hpws-maxi: 30
      ch-hpws-mini1: 31
      ch-alix1d: 32
      ch-raspi-ntp: 33
      ch-prometheus: 200
      ch-epimetheus: 201
      ch-gw-lan: 254
      #############
      ## legacy stuff
      ch-prometheus-legacy: 250
    wifi:
      ssid: "chaos at home"
      encryption: "sae-mixed"
      key: "{{ vault_wifi_keys.lan }}"

  iot:
    vlan: 30
    prefix: 192.168.30.0/24
    wifi:
      ssid: "stuff at home"
      encryption: "sae-mixed"
      key: "{{ vault_wifi_keys.iot }}"
    offsets:
      ch-wled-test: 1
      ch-sensors0: 10
      ch-sensors1: 11
      ch-sensors2: 12
      ch-mon: 230
      ch-iot: 254

  svc:
    vlan: 32
    prefix: 192.168.32.0/24
    gateway: 192.168.32.254
    dns:
#    - 192.168.32.254
#    - 9.9.9.9
    - 1.1.1.1
    offsets:
      ch-apps: 1
      ch-http-proxy: 8
      ch-imap-proxy: 9
      ch-vpn: 10
      ch-k8s-master: 20
      ch-jump: 22
      ch-gw-lan: 28
      ch-iot: 30
      ch-testvm-prometheus: 42
      ch-nic: 53
      __svc_http__: 80
      __svc_imap__: 143
      ch-mon: 230
      ch-omd: 231
      ch-router-obsd: 253
      ch-router: 254
      #############
      ## legacy stuff
      ch-auth-legacy: 88


  mgmt:
    vlan: 42
    prefix: 192.168.42.0/24
    offsets:
      ch-prometheus: 20 # IPMI
      ch-jump: 22
      ch-equinox-ws: 42
      ch-dione: 100 # IPMI
      ch-helene: 101 # IPMI
      ch-sw0: 200
      ch-sw1: 201
      ch-ups-test: 210
      ch-ap0: 220
      ch-ap1: 221
      ch-mon: 230
      ch-gnocchi: 240
      ch-router: 241

  magenta:
    vlan: 329
    prefix: 62.99.185.128/30
    gateway: 62.99.185.129
    dns:
    - 195.58.160.194
    - 195.58.161.122
    offsets:
      ch-router: 2


network_services:
  http:
    ports:
    - 80
    - 443
    addr: "{{ network_zones.svc.prefix | ipaddr(network_zones.svc.offsets.__svc_http__) | ipaddr('address') }}"
  imap:
    ports:
    #- 143
    - 993
    addr: "{{ network_zones.svc.prefix | ipaddr(network_zones.svc.offsets.__svc_imap__) | ipaddr('address') }}"