## add generic 755 directory for application here
directories:
  - /opt/apps/npm
  - /opt/apps/jellyfin
  - /opt/apps/letsencrypt
  - /opt/apps/gitea
  - /opt/apps/jellyfin/config
  - /opt/apps/n8n/data
  - /opt/apps/prowler/data
  - /opt/apps/prowler/tmp/prowler_api_output
  - /opt/apps/prowler/postgres/data
  - /opt/apps/wireguard
  - /opt/apps/wazuh/config
  - /opt/apps/wazuh/config/wazuh_indexer_ssl_certs
  - /opt/apps/wazuh/config/wazuh_cluster
  - /opt/apps/wazuh/config/wazuh_dashboard
  - /opt/apps/wazuh/config/wazuh_indexer


## Jellyfin directories for media
directories_jellyfin:
  - /opt/apps/jellyfin/tvseries
  - /opt/apps/jellyfin/movies

images:
  - docker.io/jc21/nginx-proxy-manager:latest
  - lscr.io/linuxserver/jellyfin:latest
  - docker.gitea.com/gitea:nightly
  - docker.io/wazuh/wazuh-certs-generator:0.0.3
  - ghcr.io/wg-easy/wg-easy:15
  - docker.io/wazuh/wazuh-dashboard:{{ wazuh_version }}
  - docker.io/wazuh/wazuh-indexer:{{ wazuh_version }}
  - docker.io/wazuh/wazuh-manager:{{ wazuh_version }}


wazuh_version: 4.14.1
sudo_password: sdfwwww

POSTGRES_ADMIN_USER: theuseriwant
POSTGRES_PASSWORD: theuserthatineedpaswoord
POSTGRES_DB: thatoneit

## WireGuard Easy VPN
## IMPORTANT: After first run, change wireguard_ui_password to a strong password
## Public IP or DDNS hostname clients connect to — CHANGE THIS before deploying
wireguard_image: ghcr.io/wg-easy/wg-easy:15
wireguard_host: vpn.boxswapper.io
wireguard_ui_username: admin
wireguard_ui_password: T3l0penF@5tback
wireguard_port: 51820
wireguard_ui_port: 51821
wireguard_cidr: 10.10.1.0/24
wireguard_ipv6_cidr: fd00:10:10::/64
wireguard_allowed_ips: 10.10.1.0/24,10.10.0.0/24
wireguard_default_dns: 1.1.1.1
wireguard_ip: 10.10.0.36

## Wazuh SIEM (static IPs on npm_internal)
wazuh_dashboard_ip: 10.10.0.40
wazuh_manager_ip: 10.10.0.41
wazuh_indexer_ip: 10.10.0.42

## Wazuh agent (installed on this host by packages role)
## Server address the agent reports to (manager reachable on ports 1514/1515 via router forwarding)
wazuh_agent_rpm: wazuh-agent-4.14.1-1.x86_64.rpm
wazuh_server_address: wazuh.boxswapper.io