storagebox_account: "u469968"
storagebox_user: "{{ storagebox_account }}-sub5"
storagebox_url: "https://{{ storagebox_user }}.your-storagebox.de/"
storagebox_mount_point: "/mnt/storagebox"
storagebox_password: "{{ vault_storagebox_password }}"
storagebox_managed_directories:
  - path: "{{ storagebox_mount_point }}/db"
    mode: "0777"
  - path: "{{ storagebox_mount_point }}/ssl"
    mode: "0777"
  - path: "{{ storagebox_mount_point }}/swag"
    mode: "0777"
  - path: "{{ storagebox_mount_point }}/swag/dns-conf"
    mode: "0777"
  - path: "{{ storagebox_mount_point }}/swag/site-confs"
    mode: "0777"
  - path: "{{ storagebox_mount_point }}/swag/proxy-confs"
    mode: "0777"
  - path: "{{ storagebox_mount_point }}/swag/certbot"
    mode: "0777"
  - path: "{{ storagebox_managed_directories_grafana_path | default(storagebox_mount_point ~ '/grafana/data') }}"
    mode: "0777"
  - path: "{{ storagebox_mount_point }}/precipitation/images"
    mode: "0777"

iklim_password: "{{ vault_iklim_password }}"

# WireGuard — prod (runs on iklim-db-01; routes developer traffic to 10.20.20.0/24)
wireguard_enable_routing: true
wireguard_routed_subnet: "10.20.20.0/24"
wireguard_clients:
  - name: murat-inspiron-15-3525
    public_key: "8nYHZvSwxCr2uwOYohLG3DlC85NbVNhKnPxYtOEKvE0="
    allowed_ips: 10.8.0.2/32
act_runner_labels: "prod-runner:docker://catthehacker/ubuntu:act-22.04,ubuntu-24.04,{{ inventory_hostname }}"
swarm_manager_ip: "10.20.10.11"
mongodb_replset_name: "rs0"
admin_allowed_cidrs: "78.187.87.109/32 95.70.151.248/32 188.3.184.2/32"
admin_ssh_public_keys:
  - "{{ lookup('file', 'files/keys/murat_ozdemir.pub') }}"
  - "{{ lookup('file', 'files/keys/bimetri_dev1.pub') }}"
  - "{{ lookup('file', 'files/keys/bimetri_dev2.pub') }}"
timezone: "Europe/Istanbul"