---
# S3 Object Storage Configuration
# These should be overridden in vault or environment-specific vars

# S3 Endpoint Configuration
s3_region: hel1
s3_endpoint: "https://{{ s3_region }}.your-objectstorage.com"

# S3 Credentials
# WARNING: Store these in ansible-vault encrypted file!
# Override these in group_vars/all/vault.yaml (encrypted)
s3_access_key: "{{ vault_s3_access_key | default('') }}"
s3_secret_key: "{{ vault_s3_secret_key | default('') }}"

# S3 Bucket names
s3_bucket_terraform_main: asxpio-terraform-main
s3_bucket_terraform_repl: asxpio-terraform-repl
s3_bucket_backups_main: asxpio-backups-main
s3_bucket_backups_repl: asxpio-backups-repl

# S3 Buckets to mount on servers (non-replication only)
s3_buckets:
  - name: "{{ s3_bucket_terraform_main }}"
    mount_point: /mnt/s3/terraform
    owner: root
    group: root
    mode: "0755"
  - name: "{{ s3_bucket_backups_main }}"
    mount_point: /mnt/s3/backups
    owner: root
    group: root
    mode: "0755"