---
all:
  vars:
    hypervisor:
      type: "proxmox"
      url: "pve01.example.com"
      username: "root@pam"
      password: "CHANGE_ME"
      host: "pve01"
      storage: "local-lvm"
    boot_iso: "local:iso/archlinux-x86_64.iso"
  children:
    proxmox:
      hosts:
        app01.example.com:
          ansible_host: 10.0.0.10
          system:
            filesystem: "btrfs"
            type: "virtual"
            os: "archlinux"
            name: "app01.example.com"
            id: 100
            cpus: 2
            memory: 4096
            balloon: 0
            network: "vmbr0"
            ip: 10.0.0.10
            prefix: 24
            gateway: 10.0.0.1
            dns:
              servers:
                - 1.1.1.1
                - 1.0.0.1
              search:
                - example.com
            disks:
              - size: 40
              - size: 80
                mount:
                  path: /data
                  fstype: xfs
                  label: DATA
                  opts: defaults
            user:
              name: "ops"
              password: "CHANGE_ME"
              key: "ssh-ed25519 AAAA..."
            root:
              password: "CHANGE_ME"
            packages:
              - jq
              - tmux
            features:
              cis:
                enabled: false
              selinux:
                enabled: true
              firewall:
                enabled: true
                backend: "firewalld"
                toolkit: "nftables"
              ssh:
                enabled: true
              zstd:
                enabled: true
              swap:
                enabled: true
              banner:
                motd: true
                sudo: true
              chroot:
                tool: "arch-chroot"
        db01.example.com:
          ansible_host: 10.0.0.11
          rhel_iso: "local:iso/rhel-9.4-x86_64-dvd.iso"
          system:
            filesystem: "xfs"
            type: "virtual"
            os: "rhel"
            version: "9"
            name: "db01.example.com"
            id: 101
            cpus: 4
            memory: 8192
            network: "vmbr0"
            ip: 10.0.0.11
            prefix: 24
            gateway: 10.0.0.1
            dns:
              servers: "1.1.1.1,1.0.0.1"
            disks:
              - size: 80
              - size: 200
                mount:
                  path: /srv/data
                  fstype: ext4
            user:
              name: "dbadmin"
              password: "CHANGE_ME"
              key: "ssh-ed25519 AAAA..."
            root:
              password: "CHANGE_ME"
            luks:
              enabled: true
              passphrase: "CHANGE_ME"
              method: "keyfile"
              keysize: 128
            features:
              cis:
                enabled: true
              selinux:
                enabled: false
              firewall:
                enabled: false
                backend: "firewalld"
                toolkit: "nftables"
              ssh:
                enabled: true
              zstd:
                enabled: true
              swap:
                enabled: true
              banner:
                motd: true
                sudo: true
              chroot:
                tool: "arch-chroot"