# WISP Daily Backup Configuration — Template
# ============================================
# Copy this file, fill in the CHANGE_ME values, and save as config.yaml.
# Keep this template clean — it gets overwritten on skill updates.

vpn:
  # L2TP/IPsec connection details to your MicroTik gateway
  server_ip: "CHANGE_ME"            # Public IP of the MicroTik gateway
  psk: "CHANGE_ME"                  # IPsec pre-shared key
  username: "CHANGE_ME"             # L2TP username
  password: "CHANGE_ME"             # L2TP password
  interface: "ppp0"                 # Interface name after connection (usually ppp0)

  # Routed network: each tower subnet needs a static route through the VPN.
  # Add one entry per tower subnet — the VPN script adds/removes these on connect/disconnect.
  routes:
    - "CHANGE_ME"                   # e.g. "172.16.1.0/24"
    - "CHANGE_ME"                   # e.g. "172.16.2.0/24"

s3:
  bucket: "CHANGE_ME"               # Wasabi/AWS bucket name
  region: "us-east-1"               # Must match bucket region
  prefix: "wisp-backups"            # Optional prefix before site/date structure
  endpoint: ""                      # Wasabi: "https://s3.<region>.wasabisys.com"
                                    # AWS S3: leave empty (uses native endpoints)
                                    # DO NOT omit the key; set to empty string for AWS
  # Credentials in ~/.aws/credentials

towers:
  # Each tower's management IP on its routed subnet.
  # SSH key auth is preferred — deploy the same key to all towers for simplicity.
  - name: "CHANGE_ME"               # e.g. "tower-alpha"
    ip: "CHANGE_ME"                 # e.g. "172.16.1.1"
    site: "CHANGE_ME"               # e.g. "black-creek"
    ssh_port: 22
    ssh_user: "wisp-backup"
    ssh_key: "/root/.ssh/wisp_rsa"  # Path to SSH key (Ed25519 recommended)

  # - name: "tower-bravo"
  #   ip: "CHANGE_ME"
  #   site: "CHANGE_ME"
  #   ssh_port: 22
  #   ssh_user: "wisp-backup"
  #   ssh_key: "/root/.ssh/wisp_rsa"

backup:
  log_lines: 500                    # Number of log lines to fetch per tower
  temp_dir: "/tmp/wisp-backups"     # Local temp directory
  compress: true                    # Gzip config and log files
  retention_days: 7                 # Keep local copies this many days
  timeout_seconds: 60               # SSH timeout per tower