# ============================================================
# homelab.conf — EINZIGE QUELLE DER WAHRHEIT
# ============================================================
# Wenn sich eine IP, URL, ein Container oder Passwort ändert:
# → NUR DIESE DATEI editieren.
# → sync-state.sh liest hieraus und generiert alles andere.
# → Niemals STATE.md, MOTDs oder Issues manuell pflegen.
# ============================================================

# --- DOMAINS ---
DOMAIN_PRIMARY="arakavanews.com"
DOMAIN_OLD="arakava-news-2.orbitalo.net"
DOMAIN_MATOMO="matomo.orbitalo.net"
DOMAIN_SEAFILE="seafile.orbitalo.net"
DOMAIN_GRAFANA="grafana.orbitalo.net"

# --- SERVER (Tailscale IPs) ---
SRV_HETZNER="100.88.230.59"
SRV_PVE1="100.122.56.60"
SRV_PVE1_LOCAL="192.168.0.197"
SRV_HELMUT="100.87.235.11"
SRV_PVE2="100.99.101.37"
SRV_PVE3="100.109.101.12"
SRV_PBS="100.99.139.22"

# --- PASSWÖRTER ---
PW_HETZNER="Astral-Proxmox!2026"
PW_DEFAULT="astral66"
PW_WP_ADMIN="eJIyhW0p5PFacjvvKGufKeXS"

# --- CONTAINER: pve-hetzner ---
# Format: CT_<nummer>="name|tailscale_ip|dienste"
CT_101="wordpress-v2|100.91.212.19|WordPress + MySQL (Docker)"
CT_103="seafile|100.75.247.60|Seafile"
CT_109="rss-manager|100.113.244.101|RSS Manager + Matomo"
CT_110="portainer|100.109.206.43|Portainer Docker UI"
CT_111="forgejo|100.89.246.60|Forgejo Git"
CT_144="muldenstein-backup|—|Backup-Archiv"
CT_999="cluster-docu|100.79.8.49|Dokumentation"

# --- CONTAINER: pve1 (Kambodscha) ---
CT_136="gold-silber-v3|100.72.230.87|Edelmetall-Bot"
CT_143_PVE1="smart-home|—|ioBroker + Grafana + InfluxDB"

# --- CONTAINER: pve3 (Muldenstein) ---
CT_139="Syncthing-Muldenstein|—|Syncthing"
CT_141="syncthing|—|Syncthing"
CT_142="WG-easy|—|WireGuard"
CT_143_PVE3="Raspi-Broker|—|MQTT Broker"
CT_145="flugscanner-mu|—|Flugpreisscanner Node"
CT_504="projektscan-template|—|Projektscan"
CT_600="wp-mirror|100.92.205.101|WordPress Mirror (Redundanz CT 101)"
CT_601="rss-mirror|—|RSS Manager Mirror (Redundanz CT 109)"

# --- TELEGRAM BOTS ---
TG_CHAT_ID="674951792"
TG_MUTTER_TOKEN="8551565940:AAHIUpZND-tCNGv9yEoNPRyPt4GxEPYBJdE"
TG_FUENFVORACHT_TOKEN="8799990587:AAEoQuohGdoJ2WudoOHs_j5Ns3iwft6OlFc"
TG_EDELMETALL_TOKEN="8262992299:AAEf8YHPsz42ZdP85DV7JqC4822Ts75GqF4"

# --- API KEYS ---
FORGEJO_TOKEN="b874766bdf357bd4c32fa4369d0c588fc6193336"
FORGEJO_SYNC_TOKEN="5402da0447b0eb6aede721a8748a08974ddc5c42"
GITHUB_PAT="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"
OPENROUTER_KEY="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"

# --- ROUTING (Cloudflare Tunnels) ---
# Format: TUNNEL_<ct>="domain|ziel|status"
TUNNEL_101_PRIMARY="arakavanews.com|:80|aktiv"
TUNNEL_101_OLD="arakava-news-2.orbitalo.net|301→arakavanews.com|aktiv"
TUNNEL_109="matomo.orbitalo.net|:80|aktiv"
TUNNEL_600="arakavanews.com|:80|standby"
TUNNEL_601="rss-manager|:8080|standby"