---
# Inventory. Copy to hosts.local.yml and edit, or edit in place.
all:
  children:
    samba_dc:
      hosts:
        dc1:
          ansible_host: 192.168.10.5
          ansible_user: ansible        # cloud-init user created by create-dc-vm.yml
          # Provisions to dc1.ad.ddupan.top — matches samba_ad_* vars in group_vars.

    samba_members:
      hosts:
        laptop:
          # The KVM/hypervisor host itself (192.168.10.127 on br0), also the KMS host.
          # Joined as an AD member fileserver by join-member.yml — runs locally.
          ansible_connection: local
          ansible_host: 127.0.0.1

    windows_admin:
      hosts:
        winadmin1:
          ansible_host: 192.168.10.6
      vars:
        # WinRM connection for ansible.windows modules.
        ansible_connection: winrm
        ansible_user: Administrator
        ansible_password: "{{ vault_win_local_admin_password }}"
        ansible_port: 5986
        ansible_winrm_transport: ntlm
        ansible_winrm_server_cert_validation: ignore

    # Hosts that need INTERACTIVE domain login (PAM/SSSD), not SMB serving.
    ad_workstations:
      hosts:
        retrolab:
          ansible_host: 10.60.0.10
          ansible_user: panxiao81