# The FULL mesh: both server sets on ONE substrate, converging together — the final stage of the
# whole-mesh rehearsal (novox/hq). Combines scenarios/whole-mesh-novox.yml and whole-mesh-ace.yml.
#
#   anchor — substrate ONLY (store, broker, control).
#   novox  — the 17-module novox set (providers + web apps + route-proxy + mailu + firewall).
#   ace    — the 24-module ace set (media/home stack), its /services/media library pre-created.
#
# An overlay is placed across all three so cross-node `at` resolves. Each service node is
# self-contained (its own postgres/redis), so nothing crosses a node boundary except enrolment and
# the shared broker/store on anchor — which is exactly what this stage proves converges for two
# independent node-plans at once on one substrate.
#
#   MESH_LAB_HOST_BINARY=.../mesh-host   MESH_LAB_BUNDLE=.../examples/substrate-first-node.lock
# The images are the UNION of the two per-server scenarios; every one is already built/pulled by the
# per-server bed prerequisites (scripts/build-module-runtime.sh, build-route-proxy-image.sh, the
# mailu/keycloak and media :mesh digest pulls).
scenario: whole-mesh-full

segments:
  hosting:
    kind: public
    cidr: [192.0.2.0/24]

machines:
  anchor:
    at: { segment: hosting, address: [192.0.2.10] }
    inbound: allow
    memory: 4GiB
    cpus: 4
    disk: 20GiB
  novox:
    at: { segment: hosting, address: [192.0.2.20] }
    inbound: allow
    memory: 16GiB
    cpus: 6
    disk: 100GiB
  ace:
    at: { segment: hosting, address: [192.0.2.30] }
    inbound: allow
    memory: 18GiB
    cpus: 6
    disk: 120GiB

images:
  # --- substrate + shared ---
  - postgres:17-alpine
  - cloudamqp/lavinmq:latest
  - mesh-control:development
  - redis:7-alpine
  - portainer/portainer-ce:latest
  - mcr.microsoft.com/mssql/server:2022-latest
  # --- novox server images ---
  - minio/minio:latest
  - mongo:7
  - quay.io/keycloak/keycloak:mesh
  - gitea/gitea:1.22
  - nextcloud:stable
  - ghcr.io/umami-software/umami:postgresql-latest
  - alpine:latest
  - verdaccio/verdaccio:6
  - registry:2
  - registry-api.novox.be/novox/invoicing-app:latest
  - registry-api.novox.be/novox/invoicing-api:latest
  - ghcr.io/mailu/unbound:mesh
  - ghcr.io/mailu/admin:mesh
  - ghcr.io/mailu/dovecot:mesh
  - ghcr.io/mailu/postfix:mesh
  - ghcr.io/mailu/rspamd:mesh
  - ghcr.io/mailu/webmail:mesh
  - ghcr.io/mailu/nginx:mesh
  # --- ace server images ---
  - lscr.io/linuxserver/sonarr:mesh
  - lscr.io/linuxserver/radarr:mesh
  - lscr.io/linuxserver/lidarr:mesh
  - lscr.io/linuxserver/bazarr:mesh
  - lscr.io/linuxserver/nzbget:mesh
  - lscr.io/linuxserver/qbittorrent:mesh
  - lscr.io/linuxserver/jackett:mesh
  - lscr.io/linuxserver/ombi:mesh
  - lscr.io/linuxserver/tautulli:mesh
  - lscr.io/linuxserver/unifi-controller:mesh
  - plexinc/pms-docker:mesh
  - ghcr.io/pennydreadful/bookshelf:mesh
  - ghcr.io/home-assistant/home-assistant:mesh
  - eclipse-mosquitto:mesh
  - influxdb:mesh
  - grafana/grafana:mesh
  - baserow/baserow:mesh
  - letta/letta:mesh
  - nodered/node-red:mesh
  - searxng/searxng:mesh
  - valkey/valkey:mesh
  # --- per-module runtimes (union) ---
  - mesh-runtime-postgres:development
  - mesh-runtime-redis:development
  - mesh-runtime-mssql:development
  - mesh-runtime-portainer:development
  - mesh-runtime-minio:development
  - mesh-runtime-mongodb:development
  - mesh-runtime-keycloak:development
  - mesh-runtime-gitea:development
  - mesh-runtime-nextcloud:development
  - mesh-runtime-umami:development
  - mesh-runtime-photos:development
  - mesh-runtime-verdaccio:development
  - mesh-runtime-mailu:development
  - mesh-route-proxy:development
  - mesh-runtime-sonarr:development
  - mesh-runtime-radarr:development
  - mesh-runtime-lidarr:development
  - mesh-runtime-plex:development
  - mesh-runtime-bazarr:development
  - mesh-runtime-nzbget:development
  - mesh-runtime-qbittorrent:development
  - mesh-runtime-jackett:development
  - mesh-runtime-ombi:development
  - mesh-runtime-tautulli:development
  - mesh-runtime-bookshelf:development
  - mesh-runtime-home-assistant:development
  - mesh-runtime-mosquitto:development
  - mesh-runtime-influxdb:development
  - mesh-runtime-grafana:development
  - mesh-runtime-baserow:development
  - mesh-runtime-letta:development
  - mesh-runtime-nodered:development
  - mesh-runtime-searxng:development
  - mesh-runtime-unifi:development

place:
  all: [host, runtime]