---
observability_dir: "{{ apps_base_dir }}/observability"
observability_loki_image: "grafana/loki:3.4.2"
observability_prometheus_image: "prom/prometheus:v3.2.1"
observability_grafana_image: "grafana/grafana:11.5.2"

# Container process UIDs for bind-mounted data dirs (official images).
observability_prometheus_uid: 65534   # nobody
observability_prometheus_gid: 65534
observability_grafana_uid: 472
observability_grafana_gid: 472

# Override in host_vars or secrets; change on first login if left default.
observability_grafana_admin_user: admin
observability_grafana_admin_password: "CHANGE_ME_ON_FIRST_LOGIN"
observability_grafana_public_url: "{{ grafana_public_url }}"
observability_grafana_domain: "{{ grafana_public_domain }}"

observability_loki_retention: 744h
observability_prometheus_retention: 31d

# LAN CIDR allowed to reach Loki / Prometheus / Grafana on this host.
observability_ufw_from: "{{ ufw_ssh_allowed_network }}"