nebula_is_lighthouse: true
nebula_listen_port: "{{ nebula_lighthouse_port }}"
ssh_extra_allowed_users: f2b@{{ nebula.cidr }} f2b@{{ pve_hosts.internal_cidr }} f2b@{{ tailscale_cidr }}

nginx_https_redirect: true

certbot_certs:
  - domains:
      - headscale.jakehoward.tech
  - domains:
      - whoami-cdn.theorangeone.net

cdn_domains:
  - whoami-cdn.theorangeone.net

restic_backup_locations:
  - /var/lib/headscale/