---
all:
  vars:
    client_id: "DANC-001"
    client_name: "Dan Chilla"
    billing_model: "hybrid"
    maintenance_window_start: "02:00"
    maintenance_window_end: "05:00"
    maintenance_window_tz: "UTC"
    change_freeze: false
    hypervisor_type: "none"
    vpn_type: "none"
    auto_reboot: false
    human_estimate_seconds: 2700

  children:

  # --- NETWORK LAYER ---
    firewalls:
      children:
        opnsense:
          hosts:
            client-fw-01:
              ansible_host: "{{ FW_HOST }}"

        pfsense_nodes:
          hosts:
            client-fw-01:
              ansible_host: "{{ FW_HOST }}"
              ansible_port: 22222
              ha_role: "primary"        # Use: primary | backup
              #ha_peer: "client-fw-02"  # Uncomment if this node is part an HA pair


    linux_hosts:
      hosts: {}
      vars:
        ansible_user: root
        os_family: "debian"

    windows_hosts:
      hosts: {}
      vars:
        ansible_user: Administrator
        ansible_connection: winrm
        ansible_winrm_transport: ntlm
        ansible_winrm_server_cert_validation: validate
        ansible_port: 5986