---
network_zones:
  lan:
    vlan: 28
    prefix: 192.168.28.0/24
    gateway: 192.168.28.254
    dns:
#    - 192.168.28.254
    - 195.58.160.194
    - 195.58.161.122
    dhcp:
      start: 100
      limit: 199
    offsets:
      ch-equinox-ws: 1
      ch-octopi: 8
      ch-chromebook: 9
      ch-mclr: 10
      ch-mcbr: 11
      ch-turingpi: 19 # remove once BMC firmware can configure the built-in switch
      ch-telesto: 20
      ch-calypso: 21
      ch-thetys: 22
      ch-dione: 23
      ch-helene: 24
      ch-hyperion: 25
      ch-ymir: 26
      ch-tarvos: 27
      ch-k8s-ctrl: 29
      ch-hpws-maxi: 30
      ch-hpws-mini1: 31
      ch-alix1d: 32
      ch-raspi-openwrt: 33
      ch-cm4-test: 34
      ch-rpi4-test: 35
      ch-rpi3-test: 36
      ch-rpizerow-test: 37
      ch-rpizero2w-test: 38
      ch-apu-openwrt: 39
      ch-zimaplayer1: 40
      ch-zimaplayer2: 41
      ch-hdmistick: 42
      ch-companion-raspi: 43
      ele-media: 99
      ch-prometheus: 200
      ch-epimetheus: 201
      ch-phoebe: 202
      ch-gw-lan: 254
      #############
      ## legacy stuff
      ch-prometheus-legacy: 250
    wifi:
      ssid: "chaos at home"
      encryption: "sae-mixed"
#      encryption: "psk2"
      key: "{{ vault_wifi_keys.lan }}"

  iot:
    vlan: 30
    prefix: 192.168.30.0/24
    wifi:
      ssid: "stuff at home"
      #encryption: "sae-mixed"
      encryption: "psk2"
      key: "{{ vault_wifi_keys.iot }}"
    offsets:
      ch-wled-test: 1
      ch-sensors0: 10
      ch-sensors1: 11
      ch-sensors2: 12
      ch-testvm-phoebe: 43
      ch-mon: 230
      ch-iot: 254

  svc:
    vlan: 32
    prefix: 192.168.32.0/24
    gateway: 192.168.32.254
    dns:
#    - 192.168.32.254
    - 195.58.160.194
    - 195.58.161.122
    offsets:
      ch-apps: 1
      ch-http-proxy: 8
      ch-imap-proxy: 9
      ch-vpn: 10
      ch-jump: 22
      ch-gw-lan: 28
      ch-iot: 30
      ch-testvm-prometheus: 42
      ch-testvm-phoebe: 43
      ch-testvm-openwrt: 44
      ch-nic: 53
      ch-gw-c3voc: 73
      __svc_http__: 80
      __svc_imap__: 143
      ch-mon: 230
      ch-greenbone: 231
      ch-router-obsd: 253
      ch-router: 254

  mgmt:
    vlan: 42
    prefix: 192.168.42.0/24
    offsets:
      ch-turingpi: 19 # BMC
      ch-prometheus: 20 # IPMI
      ch-phoebe: 21 # IPMI
      ch-jump: 22
      ch-equinox-ws: 42
      ch-dione: 100 # IPMI
      ch-helene: 101 # IPMI
      ch-telesto: 102 # IPMI
      ch-sw0: 200
      ch-sw1: 201
      ch-ups-test0: 210
      ch-ups-test1: 211
      ch-ap0: 220
      ch-ap1: 221
      ch-ap2: 222
      ch-mon: 230
      ch-installsmb: 240
      ch-router: 241
      ch-equinox-t450s: 250

  magenta:
    vlan: 329
    prefix: 62.99.185.128/30
    gateway: 62.99.185.129
    dns:
    - 195.58.160.194
    - 195.58.161.122
    offsets:
      ch-router: 2

  c3voc:
    vlan: 1073
    prefix: 10.73.0.0/16
    gateway: 10.73.0.254
    dns:
    - 8.8.8.8
    - 8.8.8.8
    offsets:
      ch-gw-c3voc: 254

  remote:
    prefix: 192.168.51.0/24
    offsets:
      ch-router: 1
      ch-pan: 2
      ch-mimas: 3
      ch-equinox-fp4: 4


network_services:
  ssh-jump:
    ports:
    - 2342
    addr: "{{ network_zones.svc.prefix | ansible.utils.ipaddr(network_zones.svc.offsets['ch-jump']) | ansible.utils.ipaddr('address') }}"
  http:
    ports:
    - 80
    - 443
    addr: "{{ network_zones.svc.prefix | ansible.utils.ipaddr(network_zones.svc.offsets.__svc_http__) | ansible.utils.ipaddr('address') }}"
  imap:
    ports:
    #- 143
    - 993
    addr: "{{ network_zones.svc.prefix | ansible.utils.ipaddr(network_zones.svc.offsets.__svc_imap__) | ansible.utils.ipaddr('address') }}"
  # whawty-auth-sync:
  #   ports:
  #   - 3022
  #   addr: "{{ network_zones.svc.prefix | ansible.utils.ipaddr(network_zones.svc.offsets['ch-apps']) | ansible.utils.ipaddr('address') }}"