# ===========================================
# INVENTÁRIO DE REDE
# ===========================================
# TODO: Descobrir IPs reais via:
#   - ER605 Admin UI: LAN settings
#   - AdGuard: 10.0.0.2 → Settings > DHCP
# ===========================================

network:
  domain: "hackerfortress.cc"
  gateway: "10.0.0.1"        # ER605

# ===========================================
# Subnets e VLANs
# ===========================================
vlans:
  1:
    name: "infra"
    subnet: "10.0.0.0/24"
    gateway: "10.0.0.1"           # ER605
    dhcp_server: true
    dhcp_range:
      start: "10.0.0.100"
      end: "10.0.0.200"
    static_leases:
      # Dispositivos已知 — Omada discovered
      "b8-97-5a-f0-87-a1": "10.0.0.20"     # proxmox
      "00-e0-21-47-21-2b": "10.0.0.30"     # truenas
      "36-71-57-af-09-e0": "10.0.0.50"     # dockerino
      "bc-24-11-81-d3-a6": "10.0.0.100"   # homeassistant
      "98-ba-5f-c3-9c-80": "10.0.0.10"    # eap610-sala
      "98-ba-5f-c3-84-fc": "10.0.0.11"    # eap610-suite
      "d8-44-89-52-a0-df": "10.0.0.2"     # sg2428p (mesmo que AdGuard?)
      "5a-12-e5-10-60-15": "10.0.0.36"    # media

  10:
    name: "geral"
    subnet: "10.0.10.0/24"
    gateway: "10.0.10.1"
    dhcp_server: true
    dhcp_range:
      start: "10.0.10.100"
      end: "10.0.10.200"
    static_leases:
      "0c-84-dc-d5-03-d1": "10.0.10.100"  # hestia (wifi)
      "34-36-3b-c8-b4-d0": "10.0.10.148"  # Macbook Pro JP
      "6a-34-0f-8c-60-a5": "10.0.10.105"  # iPad
      "3a-79-8e-ec-19-6a": "10.0.10.103"  # iPhone
      "e0-01-c7-52-bb-a8": "10.0.10.149"  # TV Suíte
      "04-d9-f5-76-01-cd": "10.0.10.146"  # Desktop Thamara
      "00-d7-6d-74-29-21": "10.0.10.106"  # CERC Workstation

  20:
    name: "iot"
    subnet: "10.0.20.0/24"
    gateway: "10.0.20.1"
    dhcp_server: true
    dhcp_range:
      start: "10.0.20.100"
      end: "10.0.20.200"
    static_leases:
      "d4-f9-21-45-18-a5": "10.0.20.101"   # Ar da Thamara
      "d4-f9-21-44-83-36": "10.0.20.103"   # Ar do JP
      "fc-67-1f-b0-bf-15": "10.0.20.108"   # Smart switch Sala
      "fc-67-1f-b0-b8-00": "10.0.20.111"   # Smart switch Cozinha
      "fc-67-1f-b0-c1-44": "10.0.20.107"   # Smart switch Suíte
      "90-a8-22-10-05-6d": "10.0.20.104"   # Alexa Echo Sala
      "fc-d7-49-0d-04-f0": "10.0.20.114"   # Alexa Pop JP
      "48-55-19-4b-46-b6": "10.0.20.100"   # ESP_4B46B6
      "44-17-93-26-72-03": "10.0.20.106"   # ESP_267203
      "fc-d7-49-49-3e-d1": "10.0.20.113"   # FC-D7-49-49-3E-D1
      "dc-c2-c9-be-e3-3e": "10.0.20.102"   # Canon IX6800
      "fc-67-1f-b0-bb-dc": "10.0.20.110"   # Smart switch sala de jantar
      "fc-67-1f-b0-bc-9f": "10.0.20.109"   # Smart switch área externa

  30:
    name: "guests"
    subnet: "10.0.30.0/24"
    gateway: "10.0.30.1"
    dhcp_server: true
    dhcp_range:
      start: "10.0.30.100"
      end: "10.0.30.200"

# ===========================================
# DNS — Services
# ===========================================
dns_services:
  adguard:
    ip: "10.0.0.2"
    port: 53
    web_ui: "http://10.0.0.2"
    roles:
      - dns-recursive
      - dns-blocklist

# ===========================================
# Port Forwards (ER605)
# ===========================================
# TODO: ER605 Admin UI > NAT > Port Forwarding
forwarding:
  # external_port: [protocol, internal_ip, internal_port, description]
  #443: ["TCP", "10.0.0.50", "443", "Picsur HTTPS"]
  #80: ["TCP", "10.0.0.50", "80", "Picsur HTTP"]