---
# Full infrastructure inventory.
# IPs are documented here for reference; use FQDNs where DNS is reliable.
# Hosts marked [nixos] are managed by the NixOS flake (nixos/) and are present
# here only for Ansible tasks that apply to them (e.g. drift-check pings).

all:
  children:

    # ── Proxmox hypervisors ───────────────────────────────────────────────────
    proxmox:
      hosts:
        pve1.sweet.home:
          ansible_user: wayne
          proxmox_node_name: pve
          proxmox_role: production
          proxmox_mgmt_cidr: "192.168.2.0/24"
          proxmox_admin_username: wayne
        pve-test.sweet.home:
          ansible_user: wayne
          proxmox_node_name: pve-test
          proxmox_role: sandbox
          proxmox_mgmt_cidr: "192.168.2.0/24"
          proxmox_admin_username: wayne

    # ── Identity / DNS ────────────────────────────────────────────────────────
    freeipa:
      hosts:
        domain-controller.sweet.home:
          ansible_user: wayne
          # IPA server parameters (consumed by freeipa role)
          ipa_realm: "SWEET.HOME"
          ipa_domain: "sweet.home"
          ipa_hostname: "domain-controller.sweet.home"
          ipa_ip: "192.168.2.253"
          ipa_dns_forwarder: "192.168.2.138"  # Pi-hole
          ansible_python_interpreter: /usr/bin/python3

    # ── Edge / monitoring ─────────────────────────────────────────────────────
    raspi:
      hosts:
        raspberrypi.tail13f623.ts.net:
          ansible_user: wayne
          docker_access_gid: 50010

    # ── NixOS hosts (flake-managed; present for ping/audit tasks only) ────────
    nixos:
      vars:
        ansible_note: >
          These hosts are managed by the NixOS flake in nixos/.
          Only non-NixOS tasks (connectivity checks, IPA enrollment helpers)
          should target this group directly from Ansible.
      hosts:
        docker.sweet.home:
          ansible_host: 192.168.2.225
          ansible_user: wayne
          nixos_build_type: docker
        nix-cache.sweet.home:
          ansible_host: 192.168.2.224
          ansible_user: wayne
          nixos_build_type: nix-cache

    # ── Groupings for playbook targeting ─────────────────────────────────────
    linux:
      children:
        proxmox: {}
        freeipa: {}
        raspi: {}
        nixos: {}

    network:
      children:
        freeipa: {}

    non_nixos:
      children:
        proxmox: {}
        freeipa: {}
        raspi: {}