---
# Vars for every VPS in the fleet. Keep this file plaintext and readable
# in diffs - actual secret values live in group_vars/all/vault.yml.

# settings used to connect to remote host
ansible_user: "ansible"
ansible_port: 25456

# remote used for all playbooks except firstrun
deploy_user: ansible
deploy_user_shell: /bin/bash

ufw_allowed_tcp_ports:
  - "{{ ssh_port }}"

unattended_upgrades_enabled: true

# Example of referencing a vault-held secret from a plaintext var.
# The value itself is defined in group_vars/all/vault.yml as vault_smtp_password.
smtp_password: "{{ vault_smtp_password }}"