# Headscale service configuration
# (subdomain in group_vars/all/main.yml, caddy_sites_dir in roles/caddy_site/defaults/)

headscale_port: 8080
headscale_grpc_port: 50443

# Version
headscale_version: "0.26.1"

# Data directory
headscale_data_dir: /var/lib/headscale

# Namespace is headscale_namespace in group_vars/all/main.yml

# Remote access
remote_host_name: "{{ groups['vpn_control'] | first }}"
remote_host: "{{ hostvars.get(remote_host_name, {}).get('ansible_host', remote_host_name) }}"
remote_user: "{{ hostvars.get(remote_host_name, {}).get('ansible_user', 'counterweight') }}"
remote_key_file: "{{ hostvars.get(remote_host_name, {}).get('ansible_ssh_private_key_file', '') }}"
remote_port: "{{ hostvars.get(remote_host_name, {}).get('ansible_port', 22) }}"

# Headplane (headscale admin UI), proxied at /admin* behind Caddy basic auth
headplane_port: 3000