--- # Username of the user that's being set up target_user: None # Group of the user that's being set up target_group: None # GitLab username used to obtain the public GPG key and public SSH keys gitlab_login: None # Full name for git fullname: None # Email used for git git_email: None # Signing key used for signing git commits and tags gpg_signingkey: None # Used as the FQDN that's set up in DNS and reachable from the network host_fqdn: None # Address of the HashiCorp Vault that is used to download the trusted CA # certificate for an SSH server setup hashicorp_vault_address: None # Address of the Vaultwarden instance vaultwarden_address: None # Public ID tied to the Yubikey OTP yubikey_token_id: None # Wireguard connections # List of connections to set up, example: # # - ifname: ‹interface name› # generate_keypair: true/false # domain: ‹domain, adjust DNS resolution, if set› # gateway: ‹part of the DNS resolution setup› # address: ‹assigned address on the VPN› # peers: # - { note, public_key, allowed_ips, endpoint, keepalive } wg_connections: []