---
# ---------------------------------------------------------------------------
# Variables shared by every host in the inventory.
# Role defaults live in roles/<role>/defaults/main.yml and are overridden here.
# ---------------------------------------------------------------------------

# Administrative non-root user created by the auth role.
# This is the account the Minecraft containers run under (rootless Podman).
admin_user: mcadmin

# SSH public key installed for {{ admin_user }}. MUST be set before first run
# or you will lock yourself out once ssh_harden disables password auth.
# Put your real key in host_vars/external-apps.yml.
admin_user_ssh_key: ""

# SSH daemon port (firewall + ssh_harden will both use this).
ssh_port: 22

# Minecraft Java server port exposed to the internet.
minecraft_port: 25565
minecraft_udp: false

# Wher the Minecraft world/config data lives on the host.
minecraft_data_dir: /srv/minecraft

# Geyser - Bedrock protocol bridge. Opens the Bedrock UDP port in the
# firewall (roles/firewall) and deploys the geyser.container Quadlet unit
# (roles/minecraft) next to the Java server.
enable_geyser: true
# Bedrock UDP port Geyser publishes (host + container, must match).
geyser_port: 19132