hostname = "2001:67c:b54:1::f"
bundles = ["backup-server", "dm-crypt", "zfs"]
groups = ["debian-bookworm"]

[metadata]
nameservers = ["2001:4860:4860::8888"]

[metadata.apt.packages.qemu-guest-agent]

[metadata.apt.unattended-upgrades]
# requires manual apply to unlock disks
reboot_enabled = false

[metadata.interfaces.ens18]
ips = ["2001:67c:b54:1::f/64"]
gateway6 = "2001:67c:b54:1::1"

[metadata.backups]
# this is the backup server
exclude_from_backups = true

[metadata.backup-server.zpool_create_options]
ashift = 12

[metadata.backup-server.encrypted-devices.WVT0RNKF]
device = "/dev/disk/by-id/scsi-0QEMU_QEMU_HARDDISK_drive-scsi4"
passphrase = "!bwpass:bw/backup-kunsi/ata-ST20000NM007D-3DJ103_WVT0RNKF"

[metadata.backup-server.encrypted-devices.WVT0V0NQ]
device = "/dev/disk/by-id/scsi-0QEMU_QEMU_HARDDISK_drive-scsi5"
passphrase = "!bwpass:bw/backup-kunsi/ata-ST20000NM007D-3DJ103_WVT0V0NQ"

[metadata.backup-server.encrypted-devices.WVT0W64H]
device = "/dev/disk/by-id/scsi-0QEMU_QEMU_HARDDISK_drive-scsi6"
passphrase = "!bwpass:bw/backup-kunsi/ata-ST20000NM007D-3DJ103_WVT0W64H"

[metadata.zfs]
scrub_when = "Wed 08:00 Europe/Berlin"