---
# Global settings shared by all inventory groups.

timezone: America/New_York
container_user: ansible
container_group: ansible
container_uid: 1000
container_runtime_dir: "/run/user/{{ container_uid }}"

bootstrap_user: "{{ container_user }}"
deployment_directory: "/home/{{ container_user }}/sbots1"

# Stack directories
stack_root: "/home/{{ container_user }}/lab"

adguard_dir: "{{ stack_root }}/adguard"
prowlarr_dir: "{{ stack_root }}/prowlarr"
qbittorrent_dir: "{{ stack_root }}/qbittorrent"
radarr_dir: "{{ stack_root }}/radarr"
sonarr_dir: "{{ stack_root }}/sonarr"
bazarr_dir: "{{ stack_root }}/bazarr"
caddy_dir: "{{ stack_root }}/caddy"
nas01_dir: /mnt/nas01
downloads_root: "{{ nas01_dir }}"

# Container paths
container_config_dir: "/home/{{ container_user }}/.config/containers/systemd"

adguard_base_directories:
  - "{{ stack_root }}"
  - "{{ adguard_dir }}/work/data"
  - "{{ adguard_dir }}/conf"

servarr_base_directories:
  - "{{ stack_root }}"
  - "{{ prowlarr_dir }}/config"
  - "{{ qbittorrent_dir }}/config"
  - "{{ radarr_dir }}/config"
  - "{{ sonarr_dir }}/config"
  - "{{ bazarr_dir }}/config"

caddy_base_directories:
  - "{{ stack_root }}"
  - "{{ caddy_dir }}/data"
  - "{{ caddy_dir }}/config/caddy"
  - "{{ container_config_dir }}"

storage_tree:
  - data
  - data/media/movies
  - data/media/tv
  - data/media/music
  - data/torrents/movies
  - data/torrents/tv
  - data/torrents/music
  - data/torrents/incomplete
  - data/torrents/complete

arr_suite:
  - qbittorrent
  - prowlarr
  - radarr
  - sonarr
  - bazarr
  - flaresolverr

base_firewall_rules:
  - service: ssh

adguard_firewall_rules:
  - port: 53/tcp
  - port: 53/udp
  - port: 80/tcp
  - port: 443/tcp
  - port: 3000/tcp

nfs_exports:
  - path: "{{ nas01_dir }}"
    clients:
      - "192.168.1.11(rw,sync,no_subtree_check,fsid=0)"
      - "192.168.1.12(rw,sync,no_subtree_check,fsid=0)"
      - "192.168.1.14(rw,sync,no_subtree_check,fsid=0)"

adguard_admin_user: ansible
adguard_admin_password_hash: "replace-with-adguard-bcrypt-hash"

nfs_server_name: 192.168.1.10
nfs_export_location: /
nfs_export_path: "{{ nas01_dir }}"
nfs_export_type: nfs4
nfs_export_options: rw,sync,no_subtree_check,fsid=0