hostname: dev-02.lab.alexpires.me
ansible_user: "{{ lookup('env', 'ANSIBLE_USER') }}"
ansible_host: "10.19.4.210"

# Users
login_users:
  - username: "{{ ansible_user }}"
    comment: "Managed by Ansible"
    sudoer: true
    sudoer_root_only: false
    sudoer_no_password: true
    pubkey: "{{ lookup('file', 'keys/ansible_user.pub') }}"
    password_disabled: true
  - username: devstation
    comment: "Managed by Ansible"
    pubkey: "{{ lookup('file', 'keys/localnetwork.pub') }}"
    shell: "/bin/zsh"
    groups:
      - "users"
    password_disabled: true

linux_dev_station_service_user_enabled: true
linux_dev_station_service_user: "devstation"
linux_dev_station_service_home: "/home/devstation"
linux_dev_station_workspace_dir: "/home/devstation/projects"
linux_dev_station_scripts_dir: "/home/devstation/scripts"
linux_dev_station_logs_dir: "/home/devstation/.local/state/logs"

linux_dev_station_code_server_host: "0.0.0.0"
linux_dev_station_code_server_port: 3000
linux_dev_station_code_server_auth: "password"

linux_dev_station_opencode_server_host: "0.0.0.0"
linux_dev_station_opencode_server_port: 4096
linux_dev_station_manage_systemd: true
linux_dev_station_oh_my_zsh_enabled: true

linux_dev_station_code_server_extensions_enabled: true
linux_dev_station_code_server_extensions:
  - ms-python.python
  - ms-python.vscode-pylance
  - ms-python.debugpy
  - golang.go
  - ms-azuretools.vscode-docker
  - hashicorp.terraform
  - opentofu.vscode-opentofu
  - redhat.ansible
  - redhat.vscode-yaml
  - eamodio.gitlens

linux_dev_station_ssh_agent_enabled: true
linux_dev_station_mcp_bootstrap_commands: []

linux_dev_station_mcp_installers_enabled: true
linux_dev_station_mcp_installers:
  - name: "chrome-devtools-mcp"
    kind: "npm"
    package: "chrome-devtools-mcp"
    version: "latest"
  - name: "playwright-mcp"
    kind: "npm"
    package: "@playwright/mcp"
    version: "latest"
  - name: "aws-documentation-mcp"
    kind: "uv"
    package: "awslabs.aws-documentation-mcp-server"
    version: "latest"
    binary: "awslabs.aws-documentation-mcp-server"
  - name: "gitea-mcp"
    kind: "go"
    module: "gitea.com/gitea/gitea-mcp"
    version: "latest"
    binary: "gitea-mcp"

linux_dev_station_opencode_extra_environment:
  GITEA_MCP_HOST: "https://code.alexpires.me"
  GITEA_APP_TOKEN: "{{ lookup('env', 'GITEA_APP_TOKEN', default='') }}"

linux_dev_station_opencode_config:
  "$schema": "https://opencode.ai/config.json"
  provider:
    alexpires-me:
      name: "alexpires.me"
      npm: "@ai-sdk/openai-compatible"
      options:
        baseURL: "https://open-webui.lab.alexpires.me/api"
        apiKey: "{{ lookup('env', 'OPEN_WEBUI_API_KEY', default='') }}"
        timeout: 3000000
        chunkTimeout: 3000000
      models:
        gemma-4-12b-q8-0:
          name: "gemma-4-12b-q8-0"
        gemma-4-26b-a4b-ud-iq4-xs:
          name: "gemma-4-26b-a4b-ud-iq4-xs"
        gemma-4-31b-iq4-xs:
          name: "gemma-4-31b-iq4-xs"
        gpt-oss-20b-q4-0:
          name: "gpt-oss-20b-q4-0"
        gpt-oss-20b-q8-0:
          name: "gpt-oss-20b-q8-0"
        qwen3-5-35b-a3b-q4-k-m:
          name: "qwen3-5-35b-a3b-q4-k-m"
        qwen3-5-9b-q8-0:
          name: "qwen3-5-9b-q8-0"
        qwen3-6-27b-mtp-q4-0:
          name: "qwen3-6-27b-mtp-q4-0"
        qwen3-6-27b-q4-k-m:
          name: "qwen3-6-27b-q4-k-m"
        qwen3-6-35b-a3b-mtp-ud-q4-m:
          name: "qwen3-6-35b-a3b-mtp-ud-q4-m"
        qwen3-6-35b-a3b-ud-q4-k-m:
          name: "qwen3-6-35b-a3b-ud-q4-k-m"
  mcp:
    deepwiki:
      type: "remote"
      url: "https://mcp.deepwiki.com/mcp"
      enabled: true
    terraform:
      type: "remote"
      url: "http://terraform-mcp.lab.alexpires.me/mcp"
      enabled: true
    opentofu:
      type: "remote"
      url: "https://mcp.opentofu.org/mcp"
      enabled: true
    microsoft_learn:
      type: "remote"
      url: "https://learn.microsoft.com/api/mcp"
      enabled: true
    mozilla_developer:
      type: "remote"
      url: "https://mcp.mdn.mozilla.net/"
      enabled: true
    chrome_devtools:
      type: "local"
      command:
        - "npx"
        - "-y"
        - "chrome-devtools-mcp@latest"
        - "--headless"
        - "--isolated"
      enabled: true
    playwright:
      type: "local"
      command:
        - "npx"
        - "-y"
        - "@playwright/mcp@latest"
        - "--headless"
        - "--isolated"
      enabled: true
    aws_documentation:
      type: "local"
      command:
        - "uvx"
        - "awslabs.aws-documentation-mcp-server@latest"
      enabled: true
    gitea:
      type: "local"
      command:
        - "gitea-mcp"
        - "-t"
        - "stdio"
        - "-H"
        - "{env:GITEA_MCP_HOST}"
        - "-T"
        - "{env:GITEA_APP_TOKEN}"
      enabled: true
  compaction:
    auto: true
    prune: true
    reserved: 32768

linux_dev_station_service_user_ssh_enabled: true
linux_dev_station_service_user_ssh_authorized_keys: []

# Firewall ports
ufw_enable: true
fw_allowed_ports:
  - { rule: "allow", port: "22", proto: "tcp", from: "10.5.5.5/32" } # SSH Access (VPN device)
  - { rule: "allow", port: "22", proto: "tcp", from: "10.19.4.0/24" } # SSH Access (local network)
  - { rule: "allow", port: "3000", proto: "tcp", from: "10.19.4.0/24" } # code-server (local network only)
  - { rule: "allow", port: "4096", proto: "tcp", from: "10.19.4.0/24" } # opencode (local network only)
  - { rule: "allow", port: "9090", proto: "tcp", from: "10.19.4.0/24" } # opencode (local network only)

linux_dev_station_oh_my_zsh_theme: "agnoster"
linux_dev_station_oh_my_zsh_plugins:
  - git
  - fzf
  - common-aliases
  - sudo
  - tmux
  - extract
  - colored-man-pages
  - history-substring-search
  - kubectl
  - ansible
  - aws
  - golang
  - dnf
  - bgnotify
linux_dev_station_zshrc_extra_env:
  EDITOR: "nano"
  MANPAGER: "less -R"
  LESS: "-R"
  BW_ORGANIZATION_ID: "{{ lookup('env', 'BW_ORGANIZATION_ID', default='') }}"
  BW_ACCESS_TOKEN: "{{ lookup('env', 'BW_ACCESS_TOKEN', default='') }}"
  ANSIBLE_USER: "{{ lookup('env', 'ANSIBLE_USER', default='') }}"