---
hosts:
  f0:
    os: FreeBSD
    ssh:
      user: paul
      conf_dir: /usr/local/etc/wireguard
      sudo_cmd: doas
      reload_cmd: service wireguard reload
    lan:
      domain: 'lan.buetow.org'
      ip: '192.168.1.130'
    wg0:
      domain: 'wg0.wan.buetow.org'
      ip: '192.168.2.130'
      ipv6: 'fd42:beef:cafe:2::130'
    exclude_peers:
      - earth
      - pixel7pro
      - freebsd
  f1:
    os: FreeBSD
    ssh:
      user: paul
      conf_dir: /usr/local/etc/wireguard
      sudo_cmd: doas
      reload_cmd: service wireguard reload
    lan:
      domain: 'lan.buetow.org'
      ip: '192.168.1.131'
    wg0:
      domain: 'wg0.wan.buetow.org'
      ip: '192.168.2.131'
      ipv6: 'fd42:beef:cafe:2::131'
    exclude_peers:
      - earth
      - pixel7pro
      - freebsd
  f2:
    os: FreeBSD
    ssh:
      user: paul
      conf_dir: /usr/local/etc/wireguard
      sudo_cmd: doas
      reload_cmd: service wireguard reload
    lan:
      domain: 'lan.buetow.org'
      ip: '192.168.1.132'
    wg0:
      domain: 'wg0.wan.buetow.org'
      ip: '192.168.2.132'
      ipv6: 'fd42:beef:cafe:2::132'
    exclude_peers:
      - earth
      - pixel7pro
      - freebsd
  f3:
    os: FreeBSD
    ssh:
      user: paul
      conf_dir: /usr/local/etc/wireguard
      sudo_cmd: doas
      reload_cmd: service wireguard reload
    lan:
      domain: 'lan.buetow.org'
      ip: '192.168.1.133'
    wg0:
      domain: 'wg0.wan.buetow.org'
      ip: '192.168.2.133'
      ipv6: 'fd42:beef:cafe:2::133'
    exclude_peers:
      - earth
      - pixel7pro
      - freebsd
  r0:
    os: Linux
    ssh:
      user: root
      conf_dir: /etc/wireguard
      sudo_cmd:
      reload_cmd: systemctl reload wg-quick@wg0.service
    lan:
      domain: 'lan.buetow.org'
      ip: '192.168.1.120'
    wg0:
      domain: 'wg0.wan.buetow.org'
      ip: '192.168.2.120'
      ipv6: 'fd42:beef:cafe:2::120'
    exclude_peers:
      - earth
      - pixel7pro
      - freebsd
  r1:
    os: Linux
    ssh:
      user: root
      conf_dir: /etc/wireguard
      sudo_cmd:
      reload_cmd: systemctl reload wg-quick@wg0.service
    lan:
      domain: 'lan.buetow.org'
      ip: '192.168.1.121'
    wg0:
      domain: 'wg0.wan.buetow.org'
      ip: '192.168.2.121'
      ipv6: 'fd42:beef:cafe:2::121'
    exclude_peers:
      - earth
      - pixel7pro
      - freebsd
  r2:
    os: Linux
    ssh:
      user: root
      conf_dir: /etc/wireguard
      sudo_cmd:
      reload_cmd: systemctl reload wg-quick@wg0.service
    lan:
      domain: 'lan.buetow.org'
      ip: '192.168.1.122'
    wg0:
      domain: 'wg0.wan.buetow.org'
      ip: '192.168.2.122'
      ipv6: 'fd42:beef:cafe:2::122'
    exclude_peers:
      - earth
      - pixel7pro
      - freebsd
  blowfish:
    os: OpenBSD
    ssh:
      user: rex
      port: 2
      conf_dir: /etc/wireguard
      sudo_cmd: doas
      reload_cmd: sh /etc/netstart wg0
    internet:
      domain: 'buetow.org'
      ip: '23.88.35.144'
    wg0:
      domain: 'wg0.wan.buetow.org'
      ip: '192.168.2.110'
      ipv6: 'fd42:beef:cafe:2::110'
  fishfinger:
    os: OpenBSD
    ssh:
      user: rex
      port: 2
      conf_dir: /etc/wireguard
      sudo_cmd: doas
      reload_cmd: sh /etc/netstart wg0
    internet:
      domain: 'buetow.org'
      ip: '46.23.94.99'
    wg0:
      domain: 'wg0.wan.buetow.org'
      ip: '192.168.2.111'
      ipv6: 'fd42:beef:cafe:2::111'
  earth:
    os: Linux
    wg0:
      domain: 'wg0.wan.buetow.org'
      ip: '192.168.2.200'
      ipv6: 'fd42:beef:cafe:2::200'
    exclude_peers:
      - f0
      - f1
      - f2
      - r0
      - r1
      - r2
      - pixel7pro
      - freebsd
    # Note: No 'lan' or 'internet' section = roaming client
    # Note: No 'ssh' section = manual installation
    # Note: Only connects to blowfish and fishfinger (internet gateways)
  pixel7pro:
    os: Android
    wg0:
      domain: 'wg0.wan.buetow.org'
      ip: '192.168.2.201'
      ipv6: 'fd42:beef:cafe:2::201'
    exclude_peers:
      - f0
      - f1
      - f2
      - r0
      - r1
      - r2
      - earth
      - freebsd
    # Note: No 'lan' or 'internet' section = roaming client
    # Note: No 'ssh' section = manual installation
    # Note: Only connects to blowfish and fishfinger (internet gateways)
  freebsd:
    os: FreeBSD
    wg0:
      domain: 'wg0.wan.buetow.org'
      ip: '192.168.2.202'
      ipv6: 'fd42:beef:cafe:2::202'
    exclude_peers:
      - f0
      - f1
      - f2
      - r0
      - r1
      - r2
      - earth
      - pixel7pro
    gateway: false
    # Note: No 'lan' or 'internet' section = roaming client
    # Note: No 'ssh' section = manual installation
    # Note: gateway: false = connect to gateways but don't route internet through them