---
# Inventory for the Forgejo Actions runner. Jobs run in containers on
# asxpio-services, so asxpio-ops is reached over the VPC. The services
# host itself is reached through asxpio-ops: a container talking to its
# own host arrives from a Docker bridge address, which sshd and the
# firewall both refuse.

all:
  vars:
    ansible_user: deploy
    ansible_python_interpreter: /usr/bin/python3

  children:
    asxpio:
      children:
        ops_servers:
          hosts:
            asxpio-ops:
              ansible_host: "{{ vpc_ip }}"
        services_servers:
          hosts:
            asxpio-services:
              ansible_host: "{{ vpc_ip }}"
              ansible_ssh_common_args: "-o ProxyJump=deploy@{{ asxpio_ops_vpc_ip }}"