# Centralized Services Configuration
# Subdomains and Caddy settings for all services

# Edit these subdomains to match your preferences
subdomains:
  # Monitoring Services (on watchtower)
  ntfy: ntfy
  # DEPRECATED 2026-09-11 — Uptime Kuma is decommissioned and this subdomain no
  # longer resolves to anything. Kept only because the deprecated monitoring
  # blocks still template it into uptime_kuma_api_url. See archive/uptime_kuma/.
  uptime_kuma: uptime
  
  # VPN Infrastructure (on spacey)
  headscale: headscale
  
  # Core Services (on vipy)
  vaultwarden: vault
  forgejo: forgejo
  lnbits: wallet
  
  # Secondary Services (on vipy)
  ntfy_emergency_app: avisame
  personal_blog: pablohere
  
  # Memos (on memos-box)
  memos: memos
  
  # Mempool Block Explorer (on mempool_box, proxied via vipy)
  mempool: mempool

  # DATUM Gateway dashboard (on knots_box, proxied via vipy)
  datum_gateway: datum

# Caddy configuration
caddy_sites_dir: /etc/caddy/sites-enabled

# Service-specific settings shared across playbooks
service_settings:
  ntfy:
    topic: alerts
  headscale:
    namespace: counter-net
  mempool:
    # The frontend port is needed in two places on two different hosts: the
    # mempool role deploys it on mempool-box, and the Caddy play proxies to it
    # from the edge host. A role default cannot serve the second play, so it
    # lives here rather than in roles/mempool/defaults.
    frontend_port: 8080
  bitcoin:
    # The P2P port is needed on two hosts: the bitcoin_knots role deploys the
    # node on knots-box, and the socket-proxy play publishes the port from the
    # edge host. A role default cannot reach that second play.
    p2p_port: 8333
    tailscale_hostname: knots-box
  fulcrum:
    # Same shape as mempool: the fulcrum role deploys on fulcrum-box, and the
    # socket-proxy play publishes the SSL port from the edge host. A role default
    # is invisible to that second play.
    ssl_port: 50002
    tailscale_hostname: fulcrum-box