---
ansible_host: 204.110.191.229
ansible_python_interpreter: /usr/bin/python3
ansible_ssh_common_args: '-o StrictHostKeyChecking=accept-new'

# OpenSearch configuration
opensearch_heap_min: "4g"
opensearch_heap_max: "4g"

# Firewall — Caddy needs HTTP/HTTPS open for Let's Encrypt + traffic
firewall_allow_rules:
  - port: 80
    proto: tcp
    comment: HTTP
  - port: 443
    proto: tcp
    comment: HTTPS