all:
  hosts:
    nas:
      ansible_host: 192.168.56.200
      is_nas: true
      hostname: nas
      wireguard_ip: 10.20.0.100
      headscale:
        network: beta
  children:
    headscale_client:
      nas:
  vars:
    ansible_ssh_private_key_file: ~/.ssh/creator
    ansible_user: creator
    ansible_become_password: aberation
    ansible_ssh_port: 22
    k3s_version: v1.28.5+k3s1
    token: "aberation"  # Use ansible vault if you want to keep it secret
    api_endpoint: "{{ hostvars[groups['server'][0]]['ansible_tailscale0'].ipv4.address | default(groups['server'][0]) }}"
    extra_server_args: "--disable traefik --advertise-address {{hostvars[inventory_hostname]['ansible_tailscale0'].ipv4.address}} --flannel-iface tailscale0 --tls-san {{ ansible_host }} --disable servicelb {{ ['--node-label']|product(hostvars[inventory_hostname]['k3s_label'])|map('join', ' ')|join(' ') }}"
    extra_agent_args: "--flannel-iface tailscale0 --node-external-ip {{hostvars[inventory_hostname]['ansible_default_ipv4']['address']}} {{ ['--node-label']|product(hostvars[inventory_hostname]['k3s_label'])|map('join', ' ')|join(' ') }}"