---
# sys_autoupdate_ntfy_topic: ""  # Intentionally undefined - role will fail if not set

sys_autoupdate_ntfy_server: https://ntfy.sh

# sys_autoupdate_ntfy_token: ""  # Intentionally undefined - unauthenticated if not set

sys_autoupdate_script_path: /usr/local/bin/sys-autoupdate.sh

# Schedule: daily at 04:00 with up to 60min jitter
sys_autoupdate_update_hour: 4
sys_autoupdate_update_minute: 0
sys_autoupdate_randomized_delay: 60m

# Arch Linux only: check archlinux.org/news before updating
# Ignored on Debian (sys_autoupdate_has_news_check is false in vars/debian.yml)
sys_autoupdate_check_news: true
sys_autoupdate_news_hours: 24

# Kernel reboot check cadence: notify drift (running vs installed kernel) only
# on this day of the week (1=Monday .. 7=Sunday) to avoid daily nagging.
sys_autoupdate_reboot_notify_weekday: 1

sys_autoupdate_allow_downgrade: false

# Packages excluded from auto-update.
# Arch: passed as `pacman --ignore=pkg1,pkg2`
# Debian/Ubuntu: reconciled via `apt-mark hold` / `apt-mark unhold` on each run
#
# Common use case: hold kernel back when running out-of-tree modules (ZFS DKMS,
# Nvidia, VirtualBox, etc.). When holding the kernel, also hold matching headers
# and any DKMS modules to keep them in lockstep.
#
# Example (Arch with ZFS DKMS):
# sys_autoupdate_ignore_packages:
#   - linux
#   - linux-headers
#   - zfs-dkms
#   - zfs-utils
#
# Example (Debian/Ubuntu with ZFS DKMS):
# sys_autoupdate_ignore_packages:
#   - linux-image-generic
#   - linux-headers-generic
#   - zfs-dkms
sys_autoupdate_ignore_packages: []

# Podman image auto-update (rootless, runs as ansible_user)
# Pulls latest images via podman-compose and recreates containers if changed
sys_autoupdate_podman_enabled: true
sys_autoupdate_podman_projects_dir: "{{ podman_projects_dir | default('/opt/podman') }}"

# Prune images older than this duration after update.
# Format: hours suffix (e.g. 720h = 30 days). Set to "" to disable age-based prune
# (only dangling images will be removed in that case).
sys_autoupdate_podman_prune_until: "720h"