---
ansible_host: 192.168.1.200

# RAID5
raid_uuid: "3add8360-fa01-47eb-8aa1-0e84bacbbc15"
raid_mount: /srv/data

# NFS exports
nfs_exports:
  - path: /srv/data/nfs/k8s
    network: "{{ cluster_network }}"
    options: "rw,sync,no_subtree_check,no_root_squash"
  - path: /srv/data/models
    network: "{{ cluster_network }}"
    options: "rw,sync,no_subtree_check,no_root_squash"

# Chemins services (sous le RAID)
hermes_data_dir: /srv/data/hermes
postgres_data_dir: /srv/data/postgres
qdrant_data_dir: /srv/data/qdrant
minio_data_dir: /srv/data/minio

# Pairs WireGuard (clés privées : vault_wireguard_peer_private_keys.<name>)
# access: full = tout le lab (admin) | portal = portail Guacamole uniquement
wireguard_peers:
  - name: alkatrazz
    ip: 10.99.0.10
    public_key: "uMlKJzEdnEyjUbY2m3RzJ+0/VWzshaHnug8MeDXFfFA="
    access: full
  - name: invite-01
    ip: 10.99.0.50
    public_key: "hMtM2Kn4ENhK1ENFUJQeNLwI1yy5V6o01HKi2zCUDA8="
    access: portal