---
# Variables applied to every host.
# Override per-group in group_vars/<group>.yml or per-host in host_vars/<host>/vars.yml.

ansible_python_interpreter: /usr/bin/python3

# LAN domain
lan_domain: sweet.home
tailnet_domain: tail13f623.ts.net

# DNS: FreeIPA is the authoritative resolver for sweet.home (Pi-hole decommissioned).
# All LAN clients point directly to domain-controller.sweet.home for DNS.
ipa_realm: SWEET.HOME
ipa_server: domain-controller.sweet.home

# Docker access GID — must match FreeIPA docker-access group GID
docker_access_gid: 50010

# IPA admins group granted passwordless sudo on all enrolled hosts
ipa_admin_group: admins