#SPDX-License-Identifier: MIT-0
---
# vars file
custom_vars:
  shared:
    ssh_authorized_keys:
      - sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIIO0sbFLwfgSWpWwn4cy4cddKvV74efUMZVYTTjX2vnjAAAABHNzaDo= rika@hikiki
      - sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIHJqHHMplgqm8yiq4Qwisk67p9+f9sLM8tIAzuw2qkwpAAAABHNzaDo= rika@hikiki
    ssh_private_key_paths:
      - ~/.ssh/id_ed25519_sukaato_yubikey.ppk
      - ~/.ssh/id_ed25519_sukaato_miniyubikey.ppk
fqdn: sukaato.moe
vps_service:
  exists: true
  password: !vault |
          $ANSIBLE_VAULT;1.2;AES256;vps1-root
          39303536373434346134346536653462623164373265646430636330616666323437363365366364
          3030303736323432636631306361313031376238356335350a653032376432333562663361623236
          30313766633662656637623033313461633662303763306361313337623965396130616531323061
          6538316265376536630a616330666430323631393035313933346332353939313833623666636164
          61653264643933636666613665633461646336656337383730396262633239376439
  api_key: !vault |
          $ANSIBLE_VAULT;1.2;AES256;vps1-api
          36353161313366323930643037643637636664373266356433616632313766386161666663336366
          3462666366646338616561643939333134666162616465320a376364363833653136366434633264
          63643364626235666333363335656536396239646562393837343138653737346537316536303739
          6565633730326234350a366435653637373061336162343134643431613034623761666264393134
          61343062323933366235356132376366636534343530316432336265316632393531303161316632
          64323431666361303137313937316631393266643961613863643035333237613931343533303537
          66643166303733333761313566343030343762306633613733613762386339653663323730666637
          38663634383531633838
  type: "linode"
  region: "us-east"
  ssh_authorized_keys:
    - sk-ecdsa-sha2-nistp256@openssh.com AAAAInNrLWVjZHNhLXNoYTItbmlzdHAyNTZAb3BlbnNzaC5jb20AAAAIbmlzdHAyNTYAAABBBNoC2Z4oLDEEeX7SmRpUlyXVQ+uJg3ZdjMaDONzJtMuZa9/bVzAByiNTXM0yYzas/lFLpOKh3tUw8NCS+3QMjkIAAAAEc3NoOg== rika@hikiki
    - sk-ecdsa-sha2-nistp256@openssh.com AAAAInNrLWVjZHNhLXNoYTItbmlzdHAyNTZAb3BlbnNzaC5jb20AAAAIbmlzdHAyNTYAAABBBDJjW/BGw3Rkr7pB69hwGGCD3poBWMRLPdUlrTjYqP/Lam5FZATRlzpDbCyub0tgBZwWIiGGvS88XWosESk2lToAAAAEc3NoOg== rika@hikiki
  root_fate: disposal
  ssh_private_key_paths:
    - ~/.ssh/id_ecdsa-sha2_sukaato_yubikey.ppk
    - ~/.ssh/id_ecdsa-sha2_sukaato_miniyubikey.ppk
  ssh_private_key_path_pref: 0
  ssh_motd_script_basenames:
    - 00-logo.sh
    - 01-server.sh
    - 02-info.sh
keywords:
  - social media
  - internet
  - chat
  - web
  - cloud
  - "file-share"
  - stream
groups:
  # @NOTE key/field names SHOULD match value of 'group_name' key or field of its object
  remote:
    group_name: remote
    type: system
    id: ~
users:
  # @NOTE key/field names MUST match value of 'username' key or field of its object
  senpai:
    username: senpai
    id: 1000
    password: !vault |
          $ANSIBLE_VAULT;1.2;AES256;vps1-senpai
          62626662666239376237616464626630393562373130623934653764333139346337313539613863
          3163623834636235323433323066373435393432303234320a343433343334386131613062353761
          30323832666333366330306261386435303066626664336332393263366262626430386230356161
          3863383530616135390a383361383136366565363066326332306631323730663533623163666133
          62646339613864356264656362326562636336376136656336323962616236396562623833313531
          38633938386435656437383033656630373238366663323265326533333035376233646465626363
          33316364356533616437343439653635626637393137633034613432383530376132656138333636
          66376535346164393630383532373963663439366339646666336264393731313135343962613932
          33316433656236353230643332333231623730323262363831396437656331626539
    shell: /bin/bash
    home: ~
    admin: true
    type: regular
    group: ~
    groups:
      - sudo
      - "{{ groups.remote.group_name }}"
    services: [sshd]
    ssh_authorized_keys: "{{ custom_vars['shared']['ssh_authorized_keys'] }}" 
    ssh_private_key_paths: "{{ custom_vars['shared']['ssh_private_key_paths'] }}"
    ssh_private_key_path_pref: 0
    gpg_keys:
      - id: 558041D5CF2AB23B # @NOTE professional
        name: professional
        password: !vault |
          $ANSIBLE_VAULT;1.2;AES256;vps1-senpai
          30326232323038346232663635343439393130376666616165626339646461663165393539353733
          3666346333366237643964653633306263373365373731660a663361633030613630623434353332
          35363939356339623732623061323866353739623936353234636133303534363863666462633133
          3462653139366138330a336433343566633066643834613836353331316163653739656230663164
          6131
      - id: F0CA546935C02C76 # @NOTE personal
        name: personal
        password: !vault |
          $ANSIBLE_VAULT;1.2;AES256;vps1-senpai
          62373636643365623161643266313734633632633066373863666661306433393464396565363636
          3638353234393838623133633839316130393539356464370a346262313262623164623637323066
          37333432313438343761636330663332383035306131643339326261386231643231353930373961
          3466643062396465330a656362316336376338653963376137663632646266343335333036656461
          3964
      - id: CE245A7D7CEE3639 # @NOTE undercover
        name: undercover
        password: !vault |
          $ANSIBLE_VAULT;1.2;AES256;vps1-senpai
          38343338373839336436396431366665383437646233613036393666613339363062616134383631
          3938333066323838623938353231623034643635663031620a646631346233653535643337623737
          63373437653665623361663131346137336435623862396262353764323161323338663731613266
          6466323838306131390a383962616461616237343261666630393166303932623765633239353631
          3230
    gpg_keyid_pref: 0
    git_profile:
      name: Alex Tavarez
      email: ajt95@prole.biz
  ftp:
    username: ftp
    id: 999
    password: ~
    shell: /sbin/nologin
    home: /srv/ftp
    admin: false
    type: system
    group: ~
    groups:
      - "{{ groups.remote.group_name }}"
    services: [proftpd,sftp,ftps]
    ssh_authorized_keys: "{{ custom_vars['shared']['ssh_authorized_keys'] }}" 
    ssh_private_key_paths: "{{ custom_vars['shared']['ssh_private_key_paths'] }}"
    ssh_private_key_path_pref: 0
    gpg_keys: []
    gpg_keyid_pref: 0
