---
ansible_host: 10.0.0.6

netplan_static_enabled: true
netplan_static_iface: eth0
netplan_static_address: 10.0.0.6/24
netplan_static_gateway4: 10.0.0.1
netplan_static_nameservers:
  - 10.0.0.1

# MariaDB primary (USB-backed)

# Stage merlin in the k3s inventory group while initial OS/storage work is completed.
# Flip to true once MariaDB-on-USB and networking are fully configured.
k3s_enabled: false

k3s_role: server
k3s_cluster_init: false

# Keep the current cluster datastore until the MariaDB cutover to merlin is performed.
k3s_datastore_mariadb_host: synology.prole.org
k3s_datastore_mariadb_port: 3306
k3s_datastore_mariadb_db: k3s
k3s_datastore_mariadb_user: prole_k3s
k3s_datastore_endpoint: "mysql://{{ k3s_datastore_mariadb_user }}:{{ k3s_datastore_mariadb_password | urlencode }}@tcp({{ k3s_datastore_mariadb_host }}:{{ k3s_datastore_mariadb_port }})/{{ k3s_datastore_mariadb_db }}"

k3s_tls_sans:
  - merlin.prole.org

k3s_node_labels:
  - "prole.org/role=control"

# No iSCSI mounts on merlin
iscsi_portal: 10.0.0.203

iscsi_targets:
  # PROLE-K3S-1 (moved from retropie)
  - iqn: "iqn.2000-01.com.synology:synology.Target-16.292d45194a1"
    chap_user: "prole"
    chap_password: "{{ vault_iscsi_prole_password }}"
    mounts:
      - path: /var/lib/rancher
        fstype: ext4
        opts: "_netdev,noatime"
        # Use PARTUUID (stable across mkfs) because we intentionally re-initialize the filesystem.
        src: "PARTUUID=29f70e08-5bf1-4803-b94c-ed82fa37f082"

iscsi_absent_mounts: []