---
# roles/samba_ad_dc_defaults/defaults/main.yml

# DNS
samba_ad_dc_dns_forwarders:
  - 10.0.0.5
  - 10.0.0.4

# Identity
# When samba_ad_dc_child_id is set (e.g., A000001), the realm/workgroup/netbios
# will be derived automatically as a child of samba_ad_dc_parent_realm.
samba_ad_dc_parent_realm: "PROLE.ORG"
samba_ad_dc_parent_netbios: "{{ samba_ad_dc_parent_realm.split('.')[0] | upper }}"
samba_ad_dc_child_id: ""
samba_ad_dc_realm: >-
  {{ (samba_ad_dc_child_id | length > 0)
     | ternary((samba_ad_dc_child_id | upper) ~ '.' ~ samba_ad_dc_parent_realm, samba_ad_dc_parent_realm) }}
samba_ad_dc_workgroup: >-
  {{ (samba_ad_dc_child_id | length > 0)
     | ternary((samba_ad_dc_child_id | upper), "PROLE") }}
samba_ad_dc_netbios_name: "{{ samba_ad_dc_workgroup }}"
samba_ad_dc_server_string: "{{ samba_ad_dc_realm }} AD DC"

# Role/services
samba_ad_dc_server_role: "active directory domain controller"
samba_ad_dc_server_services: "-smb -winbind"

# RFC2307
samba_ad_dc_rfc2307: true

# Homes
samba_ad_dc_template_homedir: "/prole/home/%U"
samba_ad_dc_template_shell: "/bin/bash"

# Shares
samba_ad_dc_sysvol_path: "/var/lib/samba/sysvol"
samba_ad_dc_netlogon_path: "/var/lib/samba/sysvol/{{ samba_ad_dc_realm | lower }}/scripts"

# K3s/Kubeadm access group
samba_kubeadm_group: "kubeadm"
samba_kubeadm_members:
  - chrisfu