---
# node_baseline — first-boot floor for k3s/Cilium/Longhorn, moved out of cloud-init
# (Proxmox provisioning is API-only). Runs before k3s (site.yml). Idempotent.
node_baseline_packages:
  - qemu-guest-agent
  - open-iscsi
  - nfs-common
  - curl
node_baseline_kernel_modules:
  - overlay
  - br_netfilter
  - iscsi_tcp
  - dm_crypt
  - nfs
node_baseline_longhorn_device: /dev/vdb
node_baseline_longhorn_mount: /var/lib/longhorn
node_baseline_longhorn_fs_label: longhorn

# DNS resilience (see tasks/main.yml "DNS resilience"). PiHole stays PRIMARY (local
# jackson.lan zone + network ad-blocking); the pfSense gateway is an additive FALLBACK so
# external resolution (containerd image pulls, CoreDNS→pods) survives PiHole recursion
# outages. Keep these aligned with tofu variables dns_server / network_gateway.
node_baseline_primary_iface: eth0
node_baseline_dns_primary: 192.168.1.18   # PiHole — local zone + ad-block (PRIMARY)
node_baseline_dns_fallback: 192.168.1.1   # pfSense gateway — reliable external recursion
node_baseline_dns_search: jackson.lan