---
# Network configuration for all hosts
# Centralized network definitions to avoid hardcoding IPs across the codebase

# VPC Network (Hetzner private network)
vpc_network: "10.10.0.0/20"
vpc_network_cidr: "10.10.0.0/20"

# WireGuard VPN Network
wireguard_network: "10.20.0.0/24"
wireguard_network_cidr: "10.20.0.0/24"

# Host IP Addresses
# These are used for service communication and should match inventory
asxpio_ops_vpc_ip: "10.10.0.10"
asxpio_ops_wireguard_ip: "10.20.0.10"

asxpio_services_vpc_ip: "10.10.0.20"
asxpio_services_wireguard_ip: "10.20.0.20"

# Trusted Networks for SSH Access
ssh_trusted_networks:
  - "{{ wireguard_network }}"
  - "{{ vpc_network }}"