iscsi_portal: 10.0.0.203

k3s_required_mounts:
  - /synology/d003

iscsi_targets:
  # `/var/lib/rancher` is local host storage (do not manage it via iSCSI).

  # PROLE-DATA-3
  - iqn: "iqn.2000-01.com.synology:synology.Target-13.292d45194a1"
    chap_user: "prole"
    chap_password: "{{ vault_iscsi_prole_password }}"
    mounts:
      - path: /synology/d003
        fstype: xfs
        opts: "_netdev,noatime"
        src: "UUID=757f1ee4-dc23-414b-b595-e3058c0744f0"

  # PROLE-PI-2
  - iqn: "iqn.2000-01.com.synology:synology.Target-19.292d45194a1"
    chap_user: "prole"
    chap_password: "{{ vault_iscsi_prole_password }}"
    mounts:
      - path: /var/log/pihole
        fstype: ext4
        opts: "_netdev,noatime"
        src: "UUID=56b21ec3-2826-4171-b909-a6715223f9a4"

# k3s intentionally disabled — pi.prole.org is a dedicated pihole node;
# insufficient RAM for k3s workloads; agent manually stopped 2026-04-01.
k3s_enabled: false
k3s_state: absent

k3s_rancher_mount_required: true
k3s_rancher_mount_src: /synology/d003/rancher
k3s_rancher_mount_fstype: none
k3s_rancher_mount_opts: bind
k3s_rancher_mount_passno: 0

k3s_role: agent
k3s_cluster_init: false
k3s_server_url: "https://myrddin.prole.org:6443"
k3s_service_node_labels:
  - "prole.org/node-role=general"
  - "prole.org/role=observer"
k3s_node_taints: []

k3s_write_kubeconfig_mode: "0640"
k3s_kubeconfig_group: kubeadm
k3s_kubeconfig_users:
  - pi