---
## Basic Configuration
checkmk_agent_version: "2.3.0p40"
checkmk_agent_edition: 'cme'
checkmk_agent_server_protocol: 'https'
checkmk_agent_server: 'monitoring.gc-gruppe.net'
checkmk_agent_server_validate_certs: true
checkmk_agent_server_port: "{% if checkmk_agent_server_protocol == 'https' %}443{% else %}80{% endif %}"
checkmk_agent_site: 'monitoring'

## Authentication
checkmk_agent_user: "cmkdeploy"
checkmk_agent_secret: !vault |
          $ANSIBLE_VAULT;1.1;AES256
          63633966663337623764613664326433653262356562333931616436333131636662363139353032
          3734326165343338396633343736623333626133363865660a353634326332366630343437376339
          63326464356633363166663432393435653634303664613631306462306337353436396162346632
          6530363064343633380a633163396437666361616634633336613030636138333036383663386438
          39323632643233666466343031663737373565616339343462333037373761393734
checkmk_agent_auth: "{{ checkmk_agent_secret }}"

checkmk_agent_mysql_root_user_secret: !vault |
          $ANSIBLE_VAULT;1.1;AES256
          34346530316663376137626665623066383763643230623066666132653934323565666661623232
          6661633538363532313365636635623730393038343930390a363133376665643866333635636635
          37363333373636393764653037326135663233646434326338353761323538393930396339383865
          6132626566326336330a333861383832643439613761343432343939306533376238373138323564
          6139
checkmk_agent_mysql_monitoring_user_secret: !vault |
          $ANSIBLE_VAULT;1.1;AES256
          62636330356263333533373537363834396661353261666263343765393430376262343865323831
          6436623465633539353066303039616332303731646361630a626532613833303062363530313939
          34653132363536316139663138323466353332313165386330386430643861343264646563643939
          6239303635323166650a633261656164616638633465323139653535666336363234633863343231
          62316638666665323131613232666234633734653532373437353831363864363731

## Registration
checkmk_agent_registration_server: "{{ checkmk_agent_server }}"
checkmk_agent_registration_server_protocol: "{{ checkmk_agent_server_protocol }}"
checkmk_agent_registration_site: "DE0900_RZ"
checkmk_agent_auto_activate: 'true'
checkmk_agent_add_host: 'true'
checkmk_agent_host_name: "{{ inventory_hostname }}"
# If you trust your local hostnames, you could also use the following
# to use the local hostname instead of the inventory hostname:
# checkmk_agent_host_name: "{{ hostvars[inventory_hostname]['ansible_fqdn'] }}"
checkmk_agent_host_attributes:
  ipaddress: "{{ checkmk_agent_host_ip | default(omit) }}"
# Checkmk does not need an IP address, as long as the hostname is DNS-resolvable
# If that does not apply to your environment, you can configure the IP address below:
# checkmk_agent_host_ip: "{{ hostvars[inventory_hostname]['ansible_default_ipv4']['address'] }}"
checkmk_agent_folder: "/0000/services"
checkmk_agent_discover: 'true'
checkmk_agent_discover_max_parallel_tasks: '1'
checkmk_agent_force_foreign_changes: 'true'

## Agent Configuration
checkmk_agent_mode: 'pull'
checkmk_agent_port: '6556'
checkmk_agent_update: "{{ ansible_architecture in ['x86_64', 'ppc64le'] }}"
checkmk_agent_tls: "{{ ansible_architecture in ['x86_64', 'ppc64le'] }}"
checkmk_agent_force_tls_registration: 'true'
checkmk_agent_force_install: 'false'
checkmk_agent_prep_legacy: 'true'

## Security
checkmk_agent_no_log: 'false'
checkmk_agent_configure_firewall: 'true'
checkmk_agent_configure_firewall_zone: 'public'
checkmk_agent_server_ips: []

## Delegation
checkmk_agent_delegate_api_calls: 'localhost'
checkmk_agent_delegate_download: "{{ inventory_hostname }}"
checkmk_agent_delegate_registration: 'false'
checkmk_agent_delegate_registration_target: "{{ inventory_hostname }}"

## Advanced Options
checkmk_agent_activation_wait_seconds: 60
# The following setting can be used to increase the timeout for downloading
# the Checkmk agent from the Checkmk server. Only use this, if you encounter
# issues with the agent download. There is no role default, the module defaults
# will be used. Value in seconds.
# checkmk_agent_download_timeout: "{% if ansible_system == 'Win32NT' %}30{% else %}10{% endif %}"