---
all:
  children:
    all_servers:
      hosts:
        dmz:
          ansible_host: 192.168.56.10
          ansible_ssh_private_key_file: .vagrant/machines/dmz/libvirt/private_key
          ansible_user: vagrant
        backend:
          ansible_host: 192.168.56.11
          ansible_ssh_private_key_file: .vagrant/machines/backend/libvirt/private_key
          ansible_user: vagrant
        backend2:
          ansible_host: 192.168.56.12
          ansible_ssh_private_key_file: .vagrant/machines/backend2/libvirt/private_key
          ansible_user: vagrant

    # Backend servers that host application services
    backend_servers:
      hosts:
        backend:
        backend2:

    # Reverse proxy servers
    traefik_servers:
      children:
        traefik_servers_dmz:
        traefik_servers_backend:

    # DMZ reverse proxy (public-facing, file provider mode)
    traefik_servers_dmz:
      hosts:
        dmz:

    # Backend reverse proxy (docker provider mode)
    traefik_servers_backend:
      hosts:
        backend:
        backend2:

    # Application servers
    httpbin_servers:
      hosts:
        backend:
        backend2:

    keycloak_servers:
      hosts:
        backend:

    authentik_servers:
      hosts:
        backend:

    garage_servers:
      hosts:
        backend:

    nextcloud_servers:
      hosts:
        backend: