---
ansible_user: westfarn
ansible_ssh_private_key_file: /home/westfarn/.ssh/ansible_deploy
ansible_python_interpreter: /usr/bin/python3

admin_user: westfarn

# UFW
ufw_ssh_port: 22
ufw_ssh_allowed_network: 10.0.0.0/24
ufw_allowed_tcp_ports:
  - 80
  - 443

# Docker
docker_users:
  - "{{ admin_user }}"

# Tianji monitoring
tianji_server_url: https://tianji.aimloperations.com
tianji_workspace_id: cm7w8087y020lddswyhamadj2
tianji_install_script_url: "https://tianji.aimloperations.com/serverStatus/{{ tianji_workspace_id }}/install.sh?url={{ tianji_server_url }}"

# ---------------------------------------------------------------------------
# Observability (Alloy on every host → Loki/Prometheus/Grafana on control node)
# See docs/OBSERVABILITY.md
# ---------------------------------------------------------------------------
loki_url: "http://10.0.0.128:3100"
loki_push_url: "{{ loki_url }}/loki/api/v1/push"
prometheus_url: "http://10.0.0.128:9090"
prometheus_remote_write_url: "{{ prometheus_url }}/api/v1/write"
grafana_public_url: "https://grafana.aimloperations.com"
grafana_public_domain: "grafana.aimloperations.com"

# ---------------------------------------------------------------------------
# App deployment (Phase 2)
# ---------------------------------------------------------------------------
git_base_url: "ssh://git@git.aimloperations.com:30009"

# Where app checkouts and per-app env files live on each target host.
apps_base_dir: /opt/apps
apps_env_dir: "{{ apps_base_dir }}/env"      # persistent .env files, never in git
apps_src_dir: "{{ apps_base_dir }}/src"      # git checkouts

# Control-node directory holding per-app .env secrets, pushed to hosts at
# deploy time. Layout: <secrets_dir>/<app>/<app>_<env>.env  (never in git).
secrets_dir: "{{ lookup('ansible.builtin.env', 'HOME') }}/Documents/secrets"

# Static site document root base (dta_webapp writes build output here).
web_static_root: /var/www

# Catalog of deployable apps. host_apps (per host_vars) references these by name.
app_catalog:
  company_site:
    type: django
    repo: "{{ git_base_url }}/ai_ml_operations/company_site.git"
    default_branch: master
    compose_file: docker-compose.prod.yml
    web_service: web
    migrate_cmd: "uv run python manage.py migrate --noinput"
  dta_service:
    type: django
    repo: "{{ git_base_url }}/Ditch_The_Agent/dta_service.git"
    default_branch: main
    compose_file: docker-compose.prod.yml
    web_service: web
    migrate_cmd: "uv run python manage.py migrate --noinput"
    # Pre-docker deploy used venv + systemd on each host; stop before compose up.
    legacy_systemd_units:
      beta: beta_dta_wsgi
      prod: prod_dta_wsgi
  dta_webapp:
    type: node-static
    repo: "{{ git_base_url }}/Ditch_The_Agent/dta_webapp.git"
    default_branch: main
    # package.json lives in this subdir of the checkout (npm runs here).
    subdir: ditch-the-agent
    # Document root served by nginx and written by `npm run build:<env>`.
    # {env} is replaced with the entry's env (beta/prod).
    webroot_pattern: "/var/www/{env}.app.ditchtheagent/html"
    # deploy runs `npm ci` then `npm run build:<env>`; that script writes to
    # {{ web_static_root }}/<env>_dta_webapp (beta/prod), served by web-static.
  scha:
    type: django
    repo: "{{ git_base_url }}/ai_ml_operations/scha.git"
    default_branch: master
    compose_file: docker-compose.prod.yml
    web_service: web
    migrate_cmd: "uv run python manage.py migrate --noinput"
  chat_web_app:
    type: node-static
    repo: "{{ git_base_url }}/ai_ml_operations/chat_web_app.git"
    default_branch: master
    # package.json lives in this subdir of the checkout (npm runs here).
    subdir: llm-fe
    # Document root served by nginx and written by `npm run build:<env>`.
    # {env} is replaced with the entry's env (beta/prod).
    webroot_pattern: "/var/www/{env}.chat.aimloperations/html"

# Deploy filter vars. CI passes these; manual runs may leave them undefined
# to (re)deploy every app listed in the host's host_apps.
# app: <name>   app_env: beta|prod   app_ref: <git sha or branch, default master>