ansible-edda/host_vars/valkyrie/vars.yml

# --------------------------------------------------------------------------------------------------
# system:mail
# --------------------------------------------------------------------------------------------------
system_mail_smtp_pass: "{{ vault_system_mail_smtp_pass }}"

# --------------------------------------------------------------------------------------------------
# system:base
# --------------------------------------------------------------------------------------------------
system_base_additional_ssh_users:
  - "pod-rproxy"
system_base_udp_ports:
  - "{{ vpn_wireguard_port }}"

# --------------------------------------------------------------------------------------------------
# vpn
# --------------------------------------------------------------------------------------------------
vpn_subnet_id: 1

# --------------------------------------------------------------------------------------------------
# vpn:wireguard
# --------------------------------------------------------------------------------------------------
vpn_wireguard_role: "server"
vpn_wireguard_interface_private_key: "{{ vault_vpn_wireguard_interface_private_key }}"
vpn_wireguard_clients:
  - public_key: "{{ vault_vpn_wireguard_clients_0_public_key }}"
    preshared_key: "{{ vault_vpn_wireguard_clients_0_preshared_key }}"
    subnet: "{{ hostvars.yggdrasil.vpn_bridge_prefix }}.0/24"

# --------------------------------------------------------------------------------------------------
# services
# --------------------------------------------------------------------------------------------------
services_host_services:
  rproxy:
    address: "{{ vpn_bridge_prefix }}.2"
    tcp: [80, 443]
  www:
    address: "{{ vpn_bridge_prefix }}.3"