---
install_jumphost: ch-jump

install:
  vm:
    memory: 8G
    numcpus: 8
    autostart: yes
  disks:
    primary: /dev/sda
    scsi:
      sda:
        type: zfs
        name: root
        size: 10g
      sdb:
        type: zfs
        name: data
        size: 50g
  interfaces:
  - bridge: br-svc
    name: svc0
  - bridge: br-iot
    name: iot0
  - bridge: br-mgmt
    name: mgmt0

network:
  nameservers: "{{ network_zones.svc.dns }}"
  domain: "{{ host_domain }}"
  systemd_link:
    interfaces: "{{ install.interfaces }}"
  primary: &_network_primary_
    name: svc0
    address: "{{ network_zones.svc.prefix | ipaddr(network_zones.svc.offsets[inventory_hostname]) | ipaddr('address/prefix') }}"
    gateway: "{{ network_zones.svc.gateway }}"
    static_routes:
    - destination: "{{ network_zones.lan.prefix }}"
      gateway: "{{ network_zones.svc.prefix | ipaddr(network_zones.svc.offsets['ch-gw-lan']) | ipaddr('address') }}"
  interfaces:
  - *_network_primary_
  - name: iot0
    address: "{{ network_zones.iot.prefix | ipaddr(network_zones.iot.offsets[inventory_hostname]) | ipaddr('address/prefix') }}"
  - name: mgmt0
    address: "{{ network_zones.mgmt.prefix | ipaddr(network_zones.mgmt.offsets[inventory_hostname]) | ipaddr('address/prefix') }}"


lvm_groups:
  mondata:
    pvs:
    - /dev/sdb


spreadspace_apt_repo_components:
  - prometheus

prometheus_server_storage:
  type: lvm
  vg: mondata
  lv: prometheus
  size: 30G
  fs: ext4

prometheus_server_alertmanager:
  url: "127.0.0.1:9093"
  path_prefix: "/alertmanager/"

prometheus_server_web_external_url: /prometheus/


prometheus_exporters_extra:
  - blackbox
  - nut

prometheus_exporter_blackbox_modules_extra:
  icmp:
    prober: icmp

prometheus_job_multitarget_blackbox__probe:
  ch-mon:
  - instance: "ping-magentagw"
    target: 62.99.185.129
    module: icmp
  - instance: "ping-quad9"
    target: 9.9.9.9
    module: icmp

  - instance: "https-pan.chaos-at-home.org"
    target: "https://pan.chaos-at-home.org"
    module: http_tls_2xx
  - instance: "https-mimas.chaos-at-home.org"
    target: "https://mimas.chaos-at-home.org"
    module: http_tls_2xx

  - instance: "ssh-{{ inventory_hostname }}"
    target: "{{ network_zones.svc.prefix | ipaddr(network_zones.svc.offsets[inventory_hostname]) | ipaddr('address') }}:{{ ansible_port | default(22) }}"
    module: ssh_banner


promethues_alertmanager_smtp:
  smarthost: "{{ network_zones.lan.prefix | ipaddr(network_zones.lan.offsets['ch-prometheus-legacy']) | ipaddr('address') }}:25"
  from: "noreply@chaos-at-home.org"
  require_tls: no

prometheus_alertmanager_web_route_prefix: /alertmanager/


grafana_secret_key: "{{ vault_grafana_secret_key }}"