---
# Connection settings for the LXCs on the Proxmox nodes — the group
# inventory/proxmox.yml composes from the API, targeted by
# playbooks/proxmox.yml. As distinct from proxmox_nodes.yml, which is the
# hosts those guests run on.
#
# In group_vars rather than repeated per guest because it is a property of
# how every container this repo creates is built, not of any one app: the
# Terraform modules install `ssh_public_keys` for root (see
# build/config/terraform/variables.tf) and create no other account, so root
# is the only user Ansible can authenticate as.
#
# Needed explicitly because the other three groups set this in hosts.yml
# (`root` for unraid_servers and proxmox_nodes, `ansible` for k3s_cluster)
# and the guests have no static entry to set it in. Without it Ansible falls
# back to the *controller's* login name, which no container has an account
# for — a "Permission denied (publickey)" that names a user nothing in the
# repo mentions, so there is no obvious thread to pull.
ansible_user: root