---
all:
  vars:
    # Master switch for the Graylog logging stack (graylog + graylog-opensearch
    # + graylog-mongo), the fluent-bit journal shipper that feeds it, the GeoIP
    # database download it enriches with, and the graylog-config role that
    # provisions its streams/pipelines over the REST API.
    #
    # Lives in inventory rather than a role default because it is read by three
    # separate roles (common, podman, graylog-config) and role defaults are
    # scoped to their own role.
    #
    # Off because the stack is the worst cost/benefit tenant on this 4-core box:
    # two JVMs plus MongoDB hold ~1.6 GB resident and burn ~3% of the CPU around
    # the clock to store ~3k messages a day -- about 28 MB of actual log data
    # across its four live indices. journald already retains ~25 days of the
    # same logs at its 500M cap, so turning this off costs searchability, not
    # the logs themselves.
    #
    # Set true (here, or -e graylog_enabled=true) to bring it back. All data
    # under {{ graylog_path }} is left in place, so re-enabling resumes with the
    # existing indices, streams and pipelines intact.
    graylog_enabled: false
  hosts:
    home.debyl.io:
      ansible_user: fedora