---
# Proxmox API settings (credentials come from vault variables)
openapply_pve_api_host: "{{ vault_proxmox_api_host | default('10.0.0.201') }}"
openapply_pve_api_user: "{{ vault_proxmox_api_user | default('root@pam') }}"
openapply_pve_api_token_id: "{{ vault_proxmox_api_token_id | default('automation', true) }}"
openapply_pve_api_token_secret: "{{ vault_proxmox_api_token_secret | default('') }}"
openapply_proxmox_validate_certs: false

# Proxmox target and LXC specification
openapply_pve_node: pve01
openapply_lxc_vmid: 105
openapply_lxc_hostname: openapply-prod
openapply_lxc_template: local:vztmpl/ubuntu-24.04-standard_24.04-2_amd64.tar.zst
openapply_lxc_storage: local-lvm
openapply_lxc_cores: 2
openapply_lxc_memory_mb: 4096
openapply_lxc_swap_mb: 512
openapply_lxc_unprivileged: true
openapply_lxc_onboot: true
openapply_lxc_features:
  - nesting=1

# LXC networking
openapply_lxc_bridge: vmbr0
openapply_lxc_ip_cidr: 10.0.0.105/24
openapply_lxc_gateway: 10.0.0.2
openapply_lxc_management_ip: 10.0.0.105
openapply_lxc_ssh_user: root
openapply_lxc_ssh_port: 22
openapply_lxc_nic_firewall: true
openapply_use_proxmox_nic: false

# LXC credentials (from vault)
openapply_lxc_password: "{{ vault_openapply_lxc_root_password | default(vault_proxmox_root_password | default('')) }}"

# Controller runtime preflight
openapply_validate_controller_python_deps: true

# Application runtime toggles for first deployment
openapply_app_install_firebase_cli: false
openapply_app_repo_version: master
openapply_app_force_rebuild: true