apt_packages:
  - curl
  - ca-certificates
  - fail2ban
  - iptables
  - proxmox-default-kernel
  - ufw
  - unattended-upgrades
  - vim

pve_packages:
  - ifupdown2
  - proxmox-ve
  - postfix
  - open-iscsi
  - chrony

apt_packages_to_remove:
  - openresolv
  - os-prober
  - rdnssd
  - resolvconf
  - systemd-resolved

wireguard_packages:
  - wireguard
  - wireguard-tools
  - iptables
  - iproute2

fail2ban_jail_dir: /etc/fail2ban/jail.d
random_hex: "{{ lookup('password', '/dev/null', length=8, chars='abcdefghijklmnopqrstuvwxyz0123456789') }}"
pve_hostname: "{{ hostname }}-{{ random_hex }}"
wg_server_home: /etc/wireguard
wg_peers_home: "{{ wg_server_home }}/peers.d"
wg_ip_file: "{{ wg_server_home }}/ips.txt"
wg_subnet_prefix: "{{ wg_subnet.split('.')[0:3] | join('.') }}"