---

# Generell

all:
  vars:

    # Ansible-Connection and Credentials

    ansible_connection: winrm
    ansible_winrm_transport: ntlm
    
    ansible_user: '{{ vault_default_domain }}\{{ vault_default_username }}'
    username: '{{ vault_default_username }}'
    ansible_password: '{{ vault_default_userpass }}'

    # Windows Geo/Language Settings

    windows_language: de-DE
    windows_keyboard: 0407:00000407
    windows_geo_id: 94

    # Windows NTP Settings

    ntp_servers:
      - "0.pool.ntp.org"
      - "1.pool.ntp.org"

    # Energiesparoptionen

    powermanagement:
      power_plan: "High performance"
      lid_close_action: 0        # 0 = Do nothing
      sleep_timeout_ac: 0        # 0 = Never
      sleep_timeout_dc: 0        # 0 = Never
      monitor_timeout_ac: 20     # Bildschirm darf ausgehen
      monitor_timeout_dc: 10

    # Windows RDP Settings

    rdp:
      rdp_port: 3389
      enable_nla: true 
      custommember: false
      member:
        - membername: "" #Group-Name or Account-Name


    # Windows Tools Uninstall Parameters

    uninstall365:
      m365_match_patterns:
        - "Microsoft 365"
        - "Microsoft Office"
        - "Office 365"
        - "Microsoft Teams"
        - "OneDrive"

      remove_onedrive: true
      remove_store_apps: true
      remove_click_to_run: true

      m365_log_path: "C:\\Temp\\m365_removal.log"

      reboot_if_required: true


# Testdeployment
test_domain_vm_client:
  hosts:
    test-vm-002.int.ansi.int:
        hostname: "test-vm-002.int.ansi.int"

        ansible_port: 5986
        domain_member: true

        ansible_user: '{{ vault_domain_default_domain }}\{{ vault_domain_default_username }}'
        username: '{{ vault_domain_default_username }}'
        ansible_password: '{{ vault_domain_default_userpass }}'
        
        local_user: '{{ vault_default_domain }}\{{ vault_default_username }}'

        
        wg:
          non_admin: false
          users:
            - username: ""

          private_key: '{{ wg_private_key }}'
          address: "10.66.66.13/32,fd42:42:42::13/128"
          dns: "192.168.19.244,192.168.19.244"

          wireguard_peers:
            - public_key: '{{ wg_p1_public_key }}'
              preshared_key: '{{ wg_p1_preshared_key }}'
              allowed_ips: "172.16.4.0/24"
              endpoint: "93.93.202.133:56483"


# Client-Gruppen zum Deployen

notebooks_client:
  hosts:




workstation_client:
  hosts:




# Server-Gruppen zum Deployen

domainmember_server:
  hosts: