inventory.ssh.example.yml

all:
  children:
    tg_proxies:
      vars:
        ansible_python_interpreter: /usr/bin/python3
        ansible_user: deploy
        # Listed public addresses come first; unlisted links follow in unspecified order.
        tg_links_order: [tg.example.com]
        tg_port: 443
        tg_unattended_upgrades: true
      hosts:
        example:
          ansible_host: 203.0.113.10
          tg_endpoint: tg.example.com
          tg_engine: mtg
          tg_mode: faketls
          tg_domain: www.example.com
          tg_container_name: mtg-proxy
          tg_secret: REPLACE_WITH_VAULT_ENCRYPTED_32_HEX_KEY
          tg_admin:
            user: deploy
            public_key: ssh-ed25519 REPLACE_WITH_ADMIN_PUBLIC_KEY
          tg_egress: ssh
          tg_ssh_host: exit.example.com
          tg_ssh_port: 22
          tg_ssh_user: tun-telegram
          tg_ssh_private_key: REPLACE_WITH_VAULT_ENCRYPTED_PRIVATE_KEY
          tg_ssh_known_hosts: exit.example.com ssh-ed25519 REPLACE_WITH_VERIFIED_HOST_KEY
          tg_network: mtg_net
          tg_bridge: br-mtg
          tg_subnet: 172.30.44.0/24
          tg_gateway: 172.30.44.1
          tg_ssh_socks_port: 1080