hostname = "2a01:4f9:3b:436d::2"
bundles = [
    "backup-server",
    "dm-crypt",
    "smartd",
    "zfs",
]
groups = ["debian-bookworm"]

[metadata]
nameservers = ["2001:4860:4860::8888"]

[metadata.apt.unattended-upgrades]
# requires manual apply to unlock disks
reboot_enabled = false

[metadata.interfaces.enp0s31f6]
ips = ["2a01:4f9:3b:436d::2/64"]
gateway6 = "fe80::1"

[metadata.backups]
# this is the backup server
exclude_from_backups = true

[metadata.backup-server.zpool_create_options]
ashift = 12

[metadata.backup-server.encrypted-devices.ZR57ZPJ8]
device = "/dev/disk/by-id/ata-ST16000NM001J-2TW113_ZR57ZPJ8-part4"
passphrase = "!bwpass:bw/backup-kunsi/ata-ST16000NM001J-2TW113_ZR57ZPJ8-part4"

[metadata.backup-server.encrypted-devices.ZR58YEYV]
device = "/dev/disk/by-id/ata-ST16000NM001J-2TW113_ZR58YEYV-part4"
passphrase = "!bwpass:bw/backup-kunsi/ata-ST16000NM001J-2TW113_ZR58YEYV-part4"

[metadata.backup-server.encrypted-devices.ZR5C2ER6]
device = "/dev/disk/by-id/ata-ST16000NM001J-2TW113_ZR5C2ER6-part4"
passphrase = "!bwpass:bw/backup-kunsi/ata-ST16000NM001J-2TW113_ZR5C2ER6-part4"

[metadata.backup-server.encrypted-devices.ZR5C6MF4]
device = "/dev/disk/by-id/ata-ST16000NM001J-2TW113_ZR5C6MF4-part4"
passphrase = "!bwpass:bw/backup-kunsi/ata-ST16000NM001J-2TW113_ZR5C6MF4-part4"

[metadata.smartd]
disks = [
    "/dev/disk/by-id/ata-ST16000NM001J-2TW113_ZR57ZPJ8",
    "/dev/disk/by-id/ata-ST16000NM001J-2TW113_ZR58YEYV",
    "/dev/disk/by-id/ata-ST16000NM001J-2TW113_ZR5C2ER6",
    "/dev/disk/by-id/ata-ST16000NM001J-2TW113_ZR5C6MF4",
]

[metadata.zfs]
scrub_when = "Wed 08:00 Europe/Berlin"