# TrueNAS connection
TRUENAS_HOST=192.168.10.10
SSH_USER=youruser

# VM identity / networking
VM_NAME=musicassistant
# Static IP OUTSIDE the Fritzbox DHCP pool (.20-.200) AND not already taken by
# another device — verify with `ping`/`arp` first (.12 was occupied here, so we
# use .13, next to the AdGuard jail at .11). Must be on the same flat LAN as
# your players (no VLAN).
VM_IP=192.168.10.13
VM_SUBNET_CIDR=24
VM_GATEWAY=192.168.10.1
# DNS for the VM. Point it at your AdGuard jail (dogfooding) + a public fallback.
VM_DNS=192.168.10.11
VM_DNS_FALLBACK=1.1.1.1
# Physical NIC the VM attaches to (TrueNAS bridges it automatically). Must be the
# LAN interface that carries the NAS IP. On this box: igb0 (em0 is down).
# Find valid values: GET /api/v2.0/vm/device/nic_attach_choices
VM_NIC_ATTACH=igb0

# VM resources
VM_VCPUS=2
VM_MEMORY_MB=4096
VM_DISK_SIZE=20G
VM_TIMEZONE=Europe/Berlin

# Storage on the NAS. VM_DATASET holds the zvol, seed ISO and image cache.
VM_POOL=tank
VM_DATASET=tank/vms

# Images
# Debian 13 "trixie" genericcloud raw image (no qemu-img needed). Check for newer point releases.
DEBIAN_IMAGE_URL=https://cloud.debian.org/images/cloud/trixie/latest/debian-13-genericcloud-amd64.raw
MASS_IMAGE=ghcr.io/music-assistant/server:latest

# VM login user (for the serial console, `logs`/`update` over SSH).
VM_USER=admin
# Console/SSH password for VM_USER. Used by the TrueNAS serial console and as an
# SSH fallback when the key isn't available. CHANGE THIS from the default.
VM_PASSWORD=changeme
# Your SSH PUBLIC key for the VM login (strongly recommended; required for
# `logs`/`update`). Example: VM_SSH_AUTHORIZED_KEY="ssh-ed25519 AAAA... you@host"
VM_SSH_AUTHORIZED_KEY=