---
network_zones:
  lan:
    vlan: 28
    prefix: 192.168.28.0/24
    gateway: 192.168.28.254
    dns:
#    - 192.168.28.254
    - 9.9.9.9
    dhcp:
      start: 100
      limit: 199
    offsets:
      ch-equinox-ws: 1
      ch-oulu: 2 ## testing
      ch-oulu-vm1: 3 ## testing
      ch-mc: 10
      ch-auth-legacy: 88 ## legacy
      ch-prometheus-legacy: 99 ## legacy
      ch-prometheus: 200
      ch-prometheus-old: 250
      ch-gw-lan: 254
    wifi:
      ssid: "chaos at home"
      encryption: "psk2"
      key: "{{ vault_wifi_keys.lan }}"

  iot:
    vlan: 30
    prefix: 192.168.30.0/24
    dhcp:
      start: 1
      limit: 199
    wifi:
      ssid: "stuff at home"
      encryption: "psk2"
      key: "{{ vault_wifi_keys.iot }}"

  svc:
    vlan: 32
    prefix: 192.168.32.0/24
    gateway: 192.168.32.254
    dns:
#    - 192.168.32.254
    - 9.9.9.9
    offsets:
      ch-apps: 1
      ch-stats-legacy: 10 ## legacy
      ch-jump: 22
      ch-gw-lan: 28
      ch-nic: 53
      ch-web-legacy: 80 ## legacy
      __svc_web__: 80
      ch-mail-legacy: 143 ## legacy
      __svc_imap__: 143
      ch-router-obsd: 253
      ch-router: 254

  mgmt:
    vlan: 42
    prefix: 192.168.42.0/24
    offsets:
      ch-equinox-ws: 1
      ch-jump: 22
      ch-prometheus: 100 # IPMI
      ch-sw0: 200
      ch-sw1: 201
      ch-ap0: 220
      ch-ap1: 221
      ch-gnocchi: 240
      ch-router: 241

  magenta:
    vlan: 329
    prefix: 62.99.185.128/30
    gateway: 62.99.185.129
    dns:
    - 195.58.160.194
    - 195.58.161.122
    offsets:
      ch-router: 2


network_services:
  web:
    ports:
    - 80
    - 443
    addr: "{{ network_zones.svc.__svc_web__ }}"
  imap:
    ports:
    - 143
    - 993
    addr: "{{ network_zones.svc.__svc_imap__ }}"