variant: fcos
version: 1.4.0
passwd:
  users:
    - name: core
      ssh_authorized_keys:
        - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDR7q2FfdizNkvel66N/jHcwlEA8R5JEOneKXshMWqkX jeff@station-1
      password_hash: $y$j9T$kNtG1zoLVEs5WhA3pE5Eh1$sKckG1SOcZ/p5Vw/4bqSgttLOW5z6WonOtoW6E91mt3
systemd:
  units:
    - name: adguardhome.service
      enabled: true
      contents: |
        [Unit]
        Description=AdGuardHome
        After=network-online.target
        Wants=network-online.target

        [Service]
        TimeoutStartSec=0
        ExecStartPre=-/bin/podman kill adguardhome
        ExecStartPre=-/bin/podman rm adguardhome
        ExecStartPre=/bin/podman pull adguard/adguardhome
        ExecStart=podman run \
          --name adguardhome \
          --restart unless-stopped \
          -v /my/own/workdir:/opt/adguardhome/work \
          -v /my/own/confdir:/opt/adguardhome/conf \
          -p 53:53/tcp -p 53:53/udp \
          -p 67:67/udp -p 68:68/udp \
          -p 80:80/tcp -p 443:443/tcp -p 443:443/udp -p 3000:3000/tcp \
          -p 853:853/tcp \
          -p 784:784/udp -p 853:853/udp -p 8853:8853/udp \
          -p 5443:5443/tcp -p 5443:5443/udp \
          -d adguard/adguardhome

        [Install]
        WantedBy=multi-user.targetstorage:
storage:
  files:
    - path: /etc/exports
      contents:
        inline: /storage-0 192.168.1.*(rw,sync) 
  disks:
    - device: /dev/disk/by-id/nvme-WD_Blue_SN570_500GB_22400V806157
      wipe_table: true
      partitions:
        - number: 1
          label: var
        - number: 2
          label: swap
  filesystems:
    - path: /var
      label: var
      device: /dev/disk/by-partlabel/var
      format: btrfs
      wipe_filesystem: false
      with_mount_unit: true
    - path: /swap
      label: swap
      device: /dev/disk/by-partlabel/swap
      format: swap
      wipe_filesystem: true
      with_mount_unit: true
    - path: /storage-0
      label: storage-0
      device: /dev/disk/by-partlabel/storage-0
      format: btrfs
      wipe_filesystem: false
      with_mount_unit: true
  luks:
    - name: static-key
      device: /dev/disk/by-partlabel/storage-0
      key_file:
        inline: grub.pbkdf2.sha512.10000.8398C220CCB0807EEE0C5C007F475AFD4247506DC186F3F09ACD0D6F8AB9955B4DCB3E4FAC91900E7C507791394D80887C786CF81519F5D44FBB10C901524BEE.3B935E208D0DBEDCDB4634555D1540A3D903A5463197D847B65A54264964739E746CC86FD1A2C809BEA42DE2F68F45445F7FD93B021B3B127FD5CB3EDC30975E