---
# ── SSH connection ─────────────────────────────────────────────────────────────
# Credentials are injected from GitLab CI/CD Variables:
#   ANSIBLE_SSH_USER        — remote user
#   ANSIBLE_SSHKEY_ID_RSA   — private SSH key (записывается в ~/.ssh/id_rsa в before_script)
#   ANSIBLE_BECOME_PASS     — sudo password
ansible_user:        "{{ lookup('env', 'ANSIBLE_SSH_USER') | mandatory }}"
ansible_become:      true
ansible_become_method: sudo
ansible_become_pass: "{{ lookup('env', 'ANSIBLE_BECOME_PASS') | mandatory }}"

ansible_ssh_common_args: "-o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null"

# Zabbix agent default settings
agent_major_version: "7.0"
agent_variant: "2"
agent_2_plugin_list: ['']
agent_param_server:
  - 10.203.0.50
agent_param_serveractive:
  - 10.203.0.50
agent_param_tlsconnect: unencrypted
agent_param_tlsaccept:
  - unencrypted

# Chrony NTP Client settings
chrony_log_enable: true
chrony_log: measurements statistics tracking
chrony_logdir: /var/log/chrony/
chrony_ntp_servers:
  - 10.203.2.11
  - 10.203.2.12
chrony_rtcsync: true
chrony_timezone: Europe/Moscow
# Firewalld defaults
firewall_disable_conflicting_services: true
firewall_transactional_update_reboot_ok: true