---
samba_dns_server: "127.0.0.1"
samba_dns_admin_user: "administrator@PROLE.ORG"

# myrddin's stable LAN service address. Scopes Samba service binding and
# samba_dnsupdate DNS registration to this IP only, so Docker/k3s interface IPs
# (172.17.x, 10.42.x) no longer pollute the prole.org zone. If a future child
# DC joins ad_dc with a different address, move this to host_vars instead.
samba_ad_dc_lan_ip: "10.0.0.3"

# We'll wire the password with vault next
samba_dns_admin_pass: "{{ vault_samba_dns_admin_pass }}"

rsyslog_role: receiver