---
ansible_host: sulfur.lan

## Users
users: 
  g33kex: sudo
  histausse: sudo

## Networking
interfaces:
  ens18:
    type: dhcp
  wg0:
    ipv4: "{{ intranet.subnets.physical.subnets.matrix.ipv4 }}"
    netmaskv4: "{{ intranet.netmaskv4 }}"
    type: wireguard

ipv4_forwarding: false
ipv6_forwarding: false

lan_address: "{{ intranet.subnets.physical.subnets.matrix.ipv4 }}"

## VPN
vpn_interfaces:
  wg0:
    ip: "{{ interfaces.wg0.ipv4 }}"
    private_key: "{{ vpn_key }}"
    public_key: "oQH8CBofxNSOGevaz1HZlz3ZW+H3ndb/TmqM0pCiRR8="
    keepalive: true
    peers:
    - endpoint: "{{ hostvars['hindley'].interfaces.enp2s0.ipv4 }}"
      public_key: "{{ hostvars['hindley'].vpn_interfaces.wg0.public_key }}"
      allowed_ips:
        - "{{ hostvars['hindley'].vpn_interfaces.wg0.ip }}/{{ interfaces.wg0.netmaskv4 }}"
      comment: "hindley"