---
# Non-secret variables
domain_base: "csrx.ru"

# Derived domains
domain_vault:    "vault.{{ domain_base }}"
domain_git:      "git.{{ domain_base }}"
domain_plane:    "plane.{{ domain_base }}"
domain_sync:     "sync.{{ domain_base }}"
domain_traefik:  "traefik.{{ domain_base }}"

# Service paths
services_root: /opt/services
deploy_user: deploy
deploy_group: deploy

# Secrets (from vault)
acme_email:                   "{{ vault_acme_email }}"
vaultwarden_admin_token:      "{{ vault_vaultwarden_admin_token }}"
forgejo_db_password:          "{{ vault_forgejo_db_password }}"
plane_db_password:            "{{ vault_plane_db_password }}"
plane_secret_key:             "{{ vault_plane_secret_key }}"
plane_minio_password:         "{{ vault_plane_minio_password }}"
traefik_dashboard_htpasswd:   "{{ vault_traefik_dashboard_htpasswd }}"
syncthing_basic_auth_htpasswd: "{{ vault_syncthing_basic_auth_htpasswd }}"