name: homelab
domain: crenam.space
home_url: https://dashboard.crenam.space
regions:
  - id: rooster_palace
    en: rooster_palace
    vn: điện kê
    kre: palè kòk
    fr: palais coq
    region_type: sovereign

  - id: ambassadors_garden
    en: ambassadors' garden
    vn: vườn nam
    kre: jadin anbasadè
    fr: jardin des ambassadeurs
    region_type: diplomatic

  - id: family_village
    en: family village
    vn: xã làng
    kre: vilaj fanmi
    fr: village familial
    region_type: family
  
  - id: central_terminal
    en: central terminal
    region_type: tech
    vn: phòng kỹ thuật
    kre: sal ekipman
    fr: le centre technique

  - id: playroom
    en: playroom
    kre: sal jé
    fr: la salle de jeux
    vn: phòng vui chơi
    region_type: leisure

  - id: library
    region_type: knowledge
    en: library
    kre: biblyotèk pèp
    fr: bibliothèque
    vn: thư viện

  - id: great-hall
    region_type: lobby
    kre: gwo sal
    vn: sảnh lớn
    fr: grand hall
    en: great hall

machines:
  - id: cortex
    name: cortex
    ip: 192.168.27.69
    public_ip: 51.210.13.240
    provider: ovh
    role: cerveau
    domains:
      - internal: cortex.home
      - external: crenam.space

  - id: galerie
    name: galerie
    ip: 192.168.27.67
    public_ip: 37.187.32.116
    role: vitrine
    domains:
      - internal: galerie.home

  - id: salon
    name: salon
    ip: 192.168.1.15
    role: foyer
    domains:
      - internal: salon.home
    
  - id: gaufre
    name: gaufre
    ip: 192.168.1.30
    role: garde-manger
    domains:
      - internal: gaufre.home

  - id: yakimo
    name: yakimo
    ip: 192.168.1.20
    role: coffre-fort
    domains:
      - internal: yakimo.home

services:
  - id: affine
    name: AFFiNE
    machine_id: cortex
    installation_mode: docker
    auth: oidc
    ports: 
      - 3010
    public_url: https://affine.crenam.space
    internal_url: http://cortex.home:3010
    status: active
    categories: 
      - productivity
    service_group: productivity
    dependencies:         
      - postgresql-shared
    allowed_groups:       
      - nuji
      - family
      - friend
      - admin

  - id: authelia
    name: Authelia
    machine_id: cortex
    installation_mode: docker
    ports: 
      - 9091
    public_url: https://auth.crenam.space
    internal_url: http://cortex.home:9091
    status: inactive
    categories: 
      - auth
    allowed_groups:       
      - nuji
      - family
      - friend
      - admin

  - id: aliasvault
    name: Alias Vault
    machine_id: salon
    installation_mode: docker
    auth: internal
    ports:
      - 8008
      - 8443
      - 25
      - 587
    public_url: https://aliasvault.crenam.space
    internal_url: http://salon.home:8008
    status: active
    categories: 
      - auth
    service_group: mandatory
    allowed_groups:       
      - nuji
      - family
      - friend
      - admin

  - id: beszel
    name: beszel
    machine_id: gaufre
    auth: vpn
    ports:
      - 8090
    internal_url: http://gaufre.home:8090
    installation_mode: docker
    status: active
    categories: 
      - monitoring
    allowed_groups: 
      - admin

  - id: borgbackup
    name: Borg Backup
    machine_id: yakimo
    auth: none
    installation_mode: native
    status: active
    categories: 
      - backup
    allowed_groups: 
      - admin

  - id: firefly
    name: firefly iii
    machine_id: gaufre
    installation_mode: docker
    auth: vpn
    ports: 
      - 8800
      - 8801
    internal_url: http://gaufre.home:8800
    status: active
    categories: 
      - finance
    service_group: bonus
    allowed_groups:       
      - nuji
      - admin

  - id: gitea
    name: gitea
    machine_id: salon
    installation_mode: docker
    auth: vpn
    ports: 
      - 3000
    public_url: https://git.crenam.space
    internal_url: http://salon.home:3000
    status: active
    categories: 
      - dev
    service_group: bonus
    allowed_groups:       
      - nuji
      - admin
  
  - id: homarr
    name: homarr
    machine_id: salon
    auth: oidc
    installation_mode: docker
    ports: 
      - 7575
    public_url: https://dashboard.crenam.space
    internal_url: http://salon.home:7575
    status: active
    categories: 
      - monitoring
    service_group: mandatory
    allowed_groups:
      - nuji
      - family
      - friend
      - admin
      - guest

  - id: immich
    name: immich
    machine_id: gaufre
    installation_mode: docker
    auth: oidc
    ports: 
      - 2283
    internal_url: http://gaufre.home:2283
    status: active
    categories: 
      - media
    service_group: de-googling
    allowed_groups:       
      - nuji
      - family
      - friend
      - admin

  - id: jellyfin
    name: jellyfin
    machine_id: gaufre
    installation_mode: docker
    auth: oidc
    ports:
      - 8096
      - 7359
    internal_url: http://gaufre.home:8096
    status: active
    categories: 
      - media
    service_group: "de-googling"
    allowed_groups:
      - nuji
      - family
      - friend
      - admin

  - id: maurane
    name: maurane's website
    machine_id: galerie
    installation_mode: native
    ports:
      - 8000
    internal_url: http://galerie.home:8000
    public_url: https://maurane.crenam.space
    status: active
    categories:
      - media
      - experimental
    allowed_groups:
      - guest
      - nuji
      - family
      - friend

  - id: matrix
    name: element server suite
    machine_id: cortex
    installation_mode: docker
    auth: internal
    ports:
      - 80
      - 443
      - 30001
      - 30002
    internal_url: http://cortex.home:30001
    public_url: https://matrix.element.crenam.space
    status: active
    categories: 
      - communication
    service_group: de-googling
    allowed_groups:
      - nuji
      - family
      - friend
      - admin

  - id: mealie
    name: mealie
    machine_id: gaufre
    installation_mode: docker
    auth: oidc
    ports:
      - 9925
    internal_url: http://gaufre.home:9925
    public_url: https://mealie.crenam.space
    status: active
    categories: 
      - storage
      - productivity
    service_group: bonus
    allowed_groups:
      - nuji
      - family
      - friend
      - admin

  - id: n8n
    name: n8n
    machine_id: gaufre
    installation_mode: docker
    auth: vpn
    ports:
      - 5678
    internal_url: http://gaufre.home:5678
    status: active
    categories: 
      - productivity
      - automation
    allowed_groups:
      - nuji
      - admin

  - id: ntfy
    name: ntfy
    machine_id: salon
    installation_mode: docker
    auth: vpn
    ports:
      - 810
    internal_url: http://salon.home:810
    status: active
    categories:
      - automation
    allowed_groups:
      - admin

  - id: openwebui
    name: open web ui
    auth: vpn # (oidc ?)
    machine_id: cortex
    installation_mode: docker
    ports:
      - 3000
    internal_url: http://cortex.home:3000
    public_url: https://llm.crenam.space
    status: active
    categories: 
      - ai
      - productivity
    service_group: bonus
    allowed_groups:
      - nuji
      - admin

  - id: paperless
    name: paperless-ngx
    machine_id: salon
    installation_mode: docker
    auth: trusted headers
    ports:
      - 8101
    internal_url: http://salon.home:8101
    public_url: https://paperless.crenam.space
    status: active
    categories: 
      - storage
      - productivity
    service_group: bonus
    allowed_groups:
      - nuji
      - admin

  - id: patience
    name: patience
    machine_id: galerie
    installation_mode: native
    ports:
      - 8001
    internal_url: http://galerie.home:8001
    public_url: https://patience.crenam.space
    status: active
    categories:
      - media
      - experimental
      - productivity
    allowed_groups:
      - guest
      - nuji
      - family
      - friend

  - id: postgres-shared
    name: PostgreSQL
    machine_id: cortex
    installation_mode: docker
    auth: internal
    ports: 
      - 5432
    internal_url: postgres://cortex.home:5432
    status: active
    categories: 
      - database
    allowed_groups:
      - admin

  - id: pihole_main
    name: pi-hole main
    machine_id: salon
    installation_mode: docker
    auth: vpn
    ports:
      - 80
    internal_url: http://salon.home
    status: active
    categories: 
      - network
      - monitoring
    allowed_groups:
      - admin

  - id: pihole_secondary
    name: pi-hole secondary
    machine_id: yakimo
    installation_mode: native
    auth: vpn
    ports:
      - 80
    internal_url: http://yakimo.home
    status: planned
    categories: 
      - network
      - monitoring
    allowed_groups:
      - admin   

  - id: radicale
    name: radicale
    machine_id: yakimo
    installation_mode: native
    auth: internal # how to sso + sharing collections ?
    ports:
      - 5232
    internal_url: http://yakimo.home:5232
    public_url: https://radicale.crenam.space
    status: active
    categories: 
      - caldav
      - productivity
    service_group: de-googling
    allowed_groups:
      - admin
      - nuji
      - family
      - friend
  
  - id: seafile
    name: seafile
    machine_id: gaufre
    installation_mode: docker
    auth: trusted headers
    ports:
      - 80
      - 8000
      - 8082
    internal_url: http://gaufre.home:80
    status: active
    categories:
      - storage
      - media
    service_group: de-googling
    allowed_groups:
      - admin
      - nuji
      - friend
      - family

  - id: uptime_kuma
    name: uptime kuma
    machine_id: salon
    installation_mode: docker
    auth: vpn
    ports:
      - 5232
    internal_url: http://salon.home:5232
    status: active
    categories: 
      - monitoring
    allowed_groups:
      - admin

  - id: vikunja
    name: vikunja
    machine_id: gaufre
    installation_mode: docker
    auth: oidc
    ports:
      - 3456
    internal_url: http://gaufre.home:3456
    public_url: https://task.crenam.space
    status: active
    categories: 
      - productivity
    service_group: productivity
    allowed_groups:
      - admin
      - nuji
      - family
      - friend

groups:
  - id: admin
    name: renn
    group_description: Moi
    region: central_terminal

  - id: nuji
    name: nuji
    group_description: couple fondateur
    region: rooster_palace

  - id: family
    name: làng fanmi
    group_description: famille proche
    region: family_village

  - id: friend
    name: zanmi
    group_description: amis de nuji
    region: ambassadors_garden

  - id: guest
    name: vakansyé
    group_description: invités (accès limité)
    region: great-hall


users:
  - id: maurane
    name: maurane
    nickname: nuna
    email: maurane.glaude@crenam.space
    groups:
      - admin

  - id: adrien
    name: adrien
    nickname: adri
    email: adrien.ton@crenam.space
    groups: 
      - nuji