---
k3s_version: v1.24.6+k3s1
# this is the user that has ssh access to these machines
ansible_user: lino
systemd_dir: /etc/systemd/system

# Set your timezone
system_timezone: "Europe/Lisbon"

# apiserver_endpoint is virtual ip-address which will be configured on each master
apiserver_endpoint: "10.0.3.1"

# k3s_token is required  masters can talk together securely
# this token should be alpha numeric only
k3s_token: "7qXiuKpSY9uLwdVSNSnEF5RkttoERixCpc2EVJW7vh7Ws4NMN3"

# The IP on which the node is reachable in the cluster.
# Here, a sensible default is provided, you can still override
# it for each of your hosts, though.
k3s_node_ip: '{{ ansible_facts[flannel_iface]["ipv4"]["address"] }}'

# Disable the taint manually by setting: k3s_master_taint = false
k3s_master_taint: false

# these arguments are recommended for servers as well as agents:
extra_args: >-
  --flannel-iface={{ flannel_iface }}
  --node-ip={{ k3s_node_ip }}

# change these to your liking, the only required are: --disable servicelb, --tls-san {{ apiserver_endpoint }}
extra_server_args: >-
  {{ extra_args }}
  {{ '--node-taint node-role.kubernetes.io/master=true:NoSchedule' if k3s_master_taint else '' }}
  --tls-san {{ apiserver_endpoint }}
  --disable servicelb
  --disable traefik
extra_agent_args: >-
  {{ extra_args }}

# image tag for kube-vip
kube_vip_tag_version: "v0.5.5"

# image tag for metal lb
metal_lb_speaker_tag_version: "v0.13.6"
metal_lb_controller_tag_version: "v0.13.6"

# metallb ip range for load balancer
metal_lb_ip_range: "10.0.4.1-10.0.4.254"

lxc_password: !vault |
  $ANSIBLE_VAULT;1.1;AES256
  38303735306236303463613632623161643633663631303931396564346565666236643562316264
  6533643331306364653564653763356537303932313531350a393261643137636232616335376461
  66383966333765626539363561613361393665616333303964373761356166623766663232303063
  3138353333373935660a383230393330646538303933336366383736643333623663333934663131
  3064

proxmox_api_password: !vault |
  $ANSIBLE_VAULT;1.1;AES256
  35376334616332386130656335663736343337396532663266383934643632363664646631653935
  6533343936353734343761343465646365616130643130360a316234333036303738663566666364
  61653638373830383733323563373862346662363339656632643661336533363162616435616531
  6331326462356366320a303331616366356333306638386130666538633833623162653934616338
  3566

traefik_http_auth_user: !vault |
  $ANSIBLE_VAULT;1.1;AES256
  38323532616336373939646333613338626431363466633631343162636235623563393135653231
  3961383965356631613164303566393632323938386664360a373037616335643662613564353130
  30353832376431633834336234386161313062373437613132623733646166303639313364373637
  3933626639646536320a303163353835633837356530613931346165353939363235373561333836
  39366266303064393334383835323330353934643862323330343337393761353166393333376131
  33303439393531303031653361393530313930363039646566613831373366326432653634653165
  313735383263623836363030386531613033

cloudflare_api_key: !vault |
  $ANSIBLE_VAULT;1.1;AES256
  38363363386466666266613930386237623430646531303734613863306530666530376433633339
  3166373361393839363439326661396136616637393865630a666637366132643035343832666335
  33376139643533313730313135653064393239316162376339653965313366643565643664666534
  6631393564333230370a303634643030346166383235643666356164393232643832333238313664
  38346161306138653735303861646638653830633938326566663136393862643264353437623963
  3462616435653132623563316231343739333761653365333437

dns_cloudflare_api_key: !vault |
          $ANSIBLE_VAULT;1.1;AES256
          61306235353261303235646331356666643339393164333762303730646563646633626466306436
          6565303031366262303161323536323236613861373536330a346564306238633461363765623030
          33343566363163623532386463616431313865316563616162336633353162316134363266363263
          6331353838343662380a303565643337653164613637323131363037613861306535326538333030
          64313165343933343535623731393536396332613336316239363764653565346535666531656433
          6131646439656638323561643264613834356662363332323835

dns_cloudflare_email: cloudflare@lino.cooking

cloudflare_ddns_api_key: !vault |
          $ANSIBLE_VAULT;1.1;AES256
          32353865663337376239333232376630616436643435343862346164353466356563623930386461
          3132306361653330356663613534626463373133616132620a313161316137313838666534313737
          34336161373334356630326432626139666566316663373630656538333331656461373631613931
          6364313538663464350a343061383835663264616238353965656635343564306635303830343266
          38396530393133646133643232363061386265373234373832656135393764346462666566656264
          3635316261393863393736383132386133313666306234343666

homeassistant_pwd: !vault |
          $ANSIBLE_VAULT;1.1;AES256
          34623865646265653733666136316164303765633036616464626133306339393032336465613735
          3139333561366530383535363834316138303338313030390a306561366265643737623833633837
          31353332646635353339373937393134376566643539363563613061393731623931643931336566
          3039626631643930650a393163643534353731316261376638643736623232366431396136313666
          37613864396630306335626532633832653633346465316332356236393239653063393630323461
          3862316639643265373166373330333936303233383333653362

gameyfin_pwd: !vault |
          $ANSIBLE_VAULT;1.1;AES256
          64653937643761616366313263363039336262313832623035313635353638393633643330303733
          3030373063343264633265616638373463383562626132650a643163333961353861626438356339
          64326161373332396234656664343736356566356561306334306230343335323733306533343563
          3639656666313434350a303432393831323338313331386262373130633930396365653836633965
          35623030313533313462666464333339633832643261383839383432366462313262386236346434
          39646434653137633062346234373965323036636663326437346238373764363261633736356532
          346437633064623331653362303034653463

igdb_client_id: !vault |
          $ANSIBLE_VAULT;1.1;AES256
          36343238373066633635656365376331626231396666373039636330376132393861373739323061
          3662366362633461383730633765323530316437626639630a613337333163393539653830366235
          36636139666332393366366166343064623931326634633161666264333038643537386363663962
          6430613364653562320a313934393633386262343933363835663639313630653631356563346435
          61616130336366613066316134303866323838653938393630623763383762316432

igdb_secret: !vault |
          $ANSIBLE_VAULT;1.1;AES256
          65383235643965353066343661616633353163393137326661363862353131333362383336613465
          3730323833613961326161643730363434643363346138610a313230656534626137373232653633
          30303163646261666461366161336131326134633832643834623438363137323531393865613761
          3137316331353531350a306636306233326637623030666634353066396663623663386235393238
          63303939666561353032396135646666623564616562306637613430663933626530