hostname = "2a01:4f9:c010:95fa::2"
bundles = ["backup-client"]
groups = [
    "arch",
    "webserver",
]

[metadata]
description = [
    "When adding packages to aurto, please also add those packages to ~/PACKAGES",
    "Wenn Pakete zu aurto hinzugefügt werden, trage sie bitte auch in ~/PACKAGES ein",
]

[metadata.icinga_options]
period = "daytime"

[metadata.backups]
paths = [
    "/var/cache/pacman/aurto",
]

[metadata.interfaces.enp1s0]
ips = ["2a01:4f9:c010:95fa::2/64"]
gateway6 = "fe80::1"

[metadata.interfaces.enp7s0]
ips = ["172.19.137.4/32"]
gateway4 = "172.19.137.1"

[metadata.nginx.vhosts.aurto]
domain = "aurto.kunbox.net"
webroot = "/var/cache/pacman/aurto"
extras = true

[metadata.pacman]
enable_aurto = false
additional_config = [
    "Include = /etc/pacman.d/aurto",
]

[metadata.pacman.unattended-upgrades]
is_enabled = true

[metadata.sudo.extra_configs]
50_aurto_passwordless = [
    "%wheel ALL=(ALL) NOPASSWD: /usr/bin/arch-nspawn",
    "%wheel ALL=(ALL) NOPASSWD: /usr/bin/pacsync aurto",
    "%wheel ALL=(ALL) NOPASSWD:SETENV: /usr/bin/makechrootpkg",
]

[metadata.users.aurto]
groups = ["wheel"]
ssh_pubkey = [
    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICYst1HK+gJYhNxzqJGnz4iB73pa89Xz2yH+8wufOcsA", # kunsi work
    "ssh-rsa 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", # kunsi privat
]

[metadata.users.kunsi]
groups = ["wheel"]