apt_packages:
  - curl
  - ca-certificates
  - fail2ban
  - iptables
  - proxmox-default-kernel
  - ufw
  - unattended-upgrades

pve_packages:
  - proxmox-ve
  - postfix
  - open-iscsi
  - chrony

apt_packages_to_remove:
  - os-prober

wireguard_packages:
  - wireguard
  - wireguard-tools
  - iptables
  - iproute2

fail2ban_jail_dir: /etc/fail2ban/jail.d
wireguard_server_home: /etc/wireguard
wireguard_peers_home: "{{ wireguard_server_home }}/peers.d"
wireguard_ip_file: "{{ wireguard_server_home }}/ips.txt"
wireguard_subnet: "{{ wg_subnet }}"
wireguard_subnet_prefix: "{{ wg_subnet.split('.')[0:3] | join('.') }}"
wireguard_port: "{{ wg_port }}"
wireguard_interface: "{{ ansible_default_ipv4.interface }}"