initial opencode commit

group_vars/all.yml

@@ -0,0 +1,31 @@
+---
+# ---------------------------------------------------------------------------
+# Variables shared by every host in the inventory.
+# Role defaults live in roles/<role>/defaults/main.yml and are overridden here.
+# ---------------------------------------------------------------------------
+
+# Administrative non-root user created by the auth role.
+# This is the account the Minecraft containers run under (rootless Podman).
+admin_user: mcadmin
+
+# SSH public key installed for {{ admin_user }}. MUST be set before first run
+# or you will lock yourself out once ssh_harden disables password auth.
+# Put your real key in host_vars/external-apps.yml.
+admin_user_ssh_key: ""
+
+# SSH daemon port (firewall + ssh_harden will both use this).
+ssh_port: 22
+
+# Minecraft Java server port exposed to the internet.
+minecraft_port: 25565
+minecraft_udp: false
+
+# Wher the Minecraft world/config data lives on the host.
+minecraft_data_dir: /srv/minecraft
+
+# Geyser - Bedrock protocol bridge. Opens the Bedrock UDP port in the
+# firewall (roles/firewall) and deploys the geyser.container Quadlet unit
+# (roles/minecraft) next to the Java server.
+enable_geyser: true
+# Bedrock UDP port Geyser publishes (host + container, must match).
+geyser_port: 19132