homelab/ansible/inventories/group_vars/all/main.yml

proxmox_api_host: "10.0.2.2"
proxmox_api_user: "root@pam"
proxmox_api_token_id: "ansible"
proxmox_api_token_secret: "{{ vault_proxmox_api_token_secret }}"
proxmox_node: "pve"

template_name: "debian-13-cloudinit"

ansible_user: root

docker_packages:
  - docker.io
  - docker-compose

# Traefik configuration
domain: "lino.cooking"
letsencrypt_email: "letsencrypt@lino.cooking"
cloudflare_api_token: "{{ vault_cloudflare_api_token }}"

# Pocket ID configuration
pocketid_encryption_key: "{{ vault_pocketid_encryption_key }}"

auto_configure_traefik:
  # arr
  sonarr:
    subdomain: "sonarr"
    host: "10.0.2.25"
    port: 8989
    auth_required: true
  radarr:
    subdomain: "radarr"
    host: "10.0.2.25"
    port: 7878
    auth_required: true
  lidarr:
    subdomain: "lidarr"
    host: "10.0.2.25"
    port: 8686
    auth_required: true
  transmission:
    subdomain: "transmission"
    host: "10.0.2.25"
    port: 9091
    auth_required: true
  tdarr:
    subdomain: "tdarr"
    host: "10.0.2.25"
    port: 8265
    auth_required: true
  bazarr:
    subdomain: "bazarr"
    host: "10.0.2.25"
    port: 6767
    auth_required: true
  seerr:
    subdomain: "overseerr"
    host: "10.0.2.25"
    port: 5055
    auth_required: false
  prowlarr:
    subdomain: "prowlarr"
    host: "10.0.2.25"
    port: 9696
    auth_required: true
  unpackerr:
    subdomain: "unpackerr"
    host: "10.0.2.25"
    port: 5656
    auth_required: true

  # infra
  komodo:
    subdomain: "komodo"
    host: "10.0.4.10"
    port: 9120
    auth_required: true

  homeassistant:
    subdomain: "homeassistant"
    host: "10.0.2.100"
    port: 8123
    auth_required: false

  # media
  plex:
    subdomain: "plex"
    host: "10.0.2.10"
    port: 32400
    auth_required: false
  tracearr:
    subdomain: "tracearr"
    host: "10.0.2.21"
    port: 3000
    auth_required: true

  vaultwarden:
    subdomain: "pwds"
    host: "10.0.2.27"
    port: 8004
    auth_required: false
  changedetection:
    subdomain: "changedetection"
    host: "10.0.2.24"
    port: 5000
    auth_required: true
  nextcloud:
    subdomain: "cloud"
    host: "10.0.2.30"
    port: 8001
    auth_required: false
  convertx:
    subdomain: "convertx"
    host: "10.0.2.43"
    port: 3000
    auth_required: true
  dawarich:
    subdomain: "places"
    host: "10.0.2.48"
    port: 3000
    auth_required: false
  frigate:
    subdomain: "frigate"
    host: "10.0.2.14"
    port: 5000
    auth_required: true
  droposs:
    subdomain: "games"
    host: "10.0.2.46"
    port: 3000
    auth_required: false
  # geoguessr:
  #   subdomain: "geoguessr"
  #   host: "10.0.2.39"
  #   port: 8080
  #   auth_required: true
  gitea:
    subdomain: "gitea"
    host: "10.0.2.28"
    port: 3000
    auth_required: true
  immich:
    subdomain: "immich"
    host: "10.0.2.18"
    port: 2283
    auth_required: false
  mastodon:
    subdomain: "social"
    host: "10.0.2.20"
    port: 80
    auth_required: false
    forward_https: true
  matrix:
    subdomain: "chat"
    host: "10.0.2.20"
    port: 8008
    auth_required: false
  mealie:
    subdomain: "recipes"
    host: "10.0.2.26"
    port: 9000
    auth_required: false
  truenas:
    subdomain: "nas"
    host: "10.0.2.200"
    port: 80
    auth_required: true
  paperless:
    subdomain: "paperless"
    host: "10.0.2.29"
    port: 8003
    auth_required: true
  pbs:
    subdomain: "pbs"
    host: "10.0.2.104"
    port: 8007
    https: true
    auth_required: true
  # pinchflat:
  #   subdomain: "youtube"
  #   host: "10.0.2.23"
  #   port: 8081
  #   auth_required: true
  proxmox:
    subdomain: "proxmox"
    host: "10.0.2.2"
    port: 8006
    https: true
    auth_required: true
  resume:
    subdomain: "resume"
    host: "10.0.2.53"
    port: 3000
    auth_required: true
    auth_bypass_paths:
      - /lino
      - /assets
      - /api
  speedtest-tracker:
    subdomain: "fast"
    host: "10.0.2.254"
    port: 8765
    auth_required: true
  stocks:
    subdomain: "stocks"
    host: "10.0.2.40"
    port: 3333
    auth_required: false
  super-productivity:
    subdomain: "tasks"
    host: "10.0.2.45"
    port: 80
    auth_required: true
  uptime-kuma:
    subdomain: "uptime"
    host: "10.0.2.203"
    port: 3001
    auth_required: true
  wealthfolio:
    subdomain: "wealth"
    host: "10.0.2.40"
    port: 8088
    auth_required: true

# Auth services configuration
pocketid_host: 10.0.4.10
pocketid_port: 8001

tinyauth_host: 10.0.4.10
tinyauth_port: 3000
tinyauth_oidc_provider: "https://auth.{{ domain }}"
tinyauth_client_id: "{{ vault_tinyauth_client_id }}"
tinyauth_client_secret: "{{ vault_tinyauth_client_secret }}"

# Website configuration (root domain)
website_host: 10.0.4.10
website_port: 8080

# Komodo configuration
komodo_admin_password: "{{ vault_komodo_admin_password }}"
komodo_db_username: "{{ vault_komodo_db_username }}"
komodo_db_password: "{{ vault_komodo_db_password }}"
komodo_webhook_secret: "{{ vault_komodo_webhook_secret }}"
komodo_jwt_secret: "{{ vault_komodo_jwt_secret }}"