[iscsi]
pi.prole.org
raspberry.prole.org
myrddin.prole.org
retropie.prole.org
merlin.prole.org
gandalf.prole.org

[pihole]
pi.prole.org
raspberry.prole.org

[ad_dc]
myrddin.prole.org

[k3s_servers]
myrddin.prole.org

[k3s_agents]
merlin.prole.org
gandalf.prole.org

[k3s_hosts:children]
k3s_servers
k3s_agents

[linux_hosts]
pi.prole.org
raspberry.prole.org
myrddin.prole.org
retropie.prole.org
merlin.prole.org
gandalf.prole.org

[ssl_hosts]
myrddin.prole.org

[mariadb_primary]
merlin.prole.org

[mariadb_replica]
raspberry.prole.org

[mariadb:children]
mariadb_primary
mariadb_replica

[tailscale]
merlin.prole.org
gandalf.prole.org

[merlin_bootstrap]
merlin ansible_host=10.0.0.36 ansible_user=ansible

# ── Engineer workstations ────────────────────────────────────────────────────
# Add each engineer's laptop here when they join.
# The workstation_kerberos.yml playbook targets this group to deploy:
#   - /etc/krb5.conf pointing to myrddin.prole.org PROLE.ORG KDC
#   - Chrome/Edge managed policy for automatic SPNEGO (no per-user browser config)
#
# Example entries:
#   chrisfu-mbp.prole.org ansible_user=chrisfu ansible_connection=ssh
#   ron-mbp.prole.org     ansible_user=ron     ansible_connection=ssh
#
# For macOS targets, ensure the ansible user has sudo rights (via sudoers or
# the local_user role run during initial provisioning).
[workstations]
# chrisfu-mbp.prole.org ansible_user=chrisfu