---
# Example variables for baremetal installs.
hypervisor:
  type: "none"

system:
  type: "physical"
  os: "archlinux"
  filesystem: "btrfs" # btrfs|ext4|xfs
  name: "{{ inventory_hostname }}"
  cpus: 8
  memory: 16384
  network:
    ip: "{{ ansible_host | default('') }}"
    prefix: 24
    gateway: "10.0.0.1"
    dns:
      servers:
        - "1.1.1.1"
  disks:
    - device: "/dev/sda"
      size: 120
    - device: "/dev/sdb"
      size: 500
      mount:
        path: /data
        fstype: ext4
  user:
    name: "admin"
    password: "CHANGE_ME"
    key: "ssh-ed25519 AAAA..."
  root:
    password: "CHANGE_ME"
  luks:
    enabled: true
    passphrase: "CHANGE_ME"
    mapper: "SYSTEM_DECRYPTED"
    auto: true
    method: "tpm2"
    tpm2:
      device: "auto"
      pcrs: "7"
  features:
    cis:
      enabled: false
    selinux:
      enabled: true
    firewall:
      enabled: true
      backend: "firewalld"
      toolkit: "nftables"
    ssh:
      enabled: true
    zstd:
      enabled: true
    swap:
      enabled: true
    banner:
      motd: true
      sudo: true
    chroot:
      tool: "arch-chroot"