[ipaservers]
ipa001.rockylinux.org ansible_host=10.100.1.110
ipa002.rockylinux.org ansible_host=10.100.1.111

[ipaserver]
ipa001.rockylinux.org ansible_host=10.100.1.110

[ipaserver:vars]
ipaserver_domain=rockylinux.org
ipaserver_realm=ROCKYLINUX.ORG
ipaserver_setup_dns=yes
ipaserver_setup_kra=true
ipaserver_auto_forwarders=yes
ipaserver_no_host_dns=true
ipaserver_hostname=ipa001.rockylinux.org
ipaserver_allow_zone_overlap=yes
ipaserver_setup_firewalld=yes
ipaclient_no_ntp=true
ipaclient_mkhomedir=yes
ipaserver_reverse_zones=["1.100.10.in-addr.arpa."]

[ipareplicas]
ipa002.rockylinux.org ansible_host=10.100.1.111

[ipareplicas:vars]
ipaadmin_principal=admin
ipaclient_no_ntp=true
ipaclient_mkhomedir=yes
ipaserver_realm=ROCKYLINUX.ORG
ipaserver_hostname=ipa002.rockylinux.org
ipareplica_domain=rockylinux.org
ipareplica_auto_forwarders=yes
ipareplica_setup_firewalld=yes
ipareplica_setup_ca=yes
ipareplica_setup_kra=yes
ipareplica_setup_dns=yes
ipa_dns_master=10.100.1.110

[ipaclients]
build-a-box.rockylinux.org ansible_host=10.100.1.112

[ipaclients:vars]
ipaclient_domain=rockylinux.org
ipaadmin_principal=admin
ipaclient_no_ntp=true
ipaclient_mkhomedir=yes