ansible_become_password: "{{ vault_root_pass }}"
ansible_host: "{{ vault_ansible_host }}"
ansible_user: "{{ vault_ssh_user }}"

security_firewall_mangle_drop_privatenets: false
security_firewall_mangle_policy_forward: accept
security_firewall_filter_policy_forward: accept

k3s_cluster_name: internal
k3s_cluster_role: server
k3s_cluster_ip: "{{ vault_cluster_ip }}"

mariadb_server_root_password: "{{ vault_mariadb_server_root_password }}"
mariadb_server_custom_sql: "{{ vault_mariadb_server_custom_sql }}"
mariadb_server_bind_addresses: "{{ vault_mariadb_server_bind_addresses }}"

k3s_cluster_additional_helm_charts:
  - release_name: redis
    release_namespace: default
    chart_ref: 'oci://registry-1.docker.io/bitnamicharts/redis'
    chart_version: '^18'
    values:
      replica:
        replicaCount: 1
k3s_cluster_additional_tf_resources:
  - name: Invoice Ninja
    git_repository: 'https://gitlab.0x2a.ninja/flowtech/oss/invoice-ninja.git'
    git_revision: 0.0.7
    terraform_dir: 'terraform'
    tfvars_content: '{{ vault_invoice_ninja_tfvars }}'

hc_vault_server_tls_cert_data: '{{ vault_hc_vault_server_tls_cert_data }}'
hc_vault_server_tls_key_data: '{{ vault_hc_vault_server_tls_key_data }}'
hc_vault_initialize: true