[server]

# let's default to the Debian Edu 11 diskless workstation
DEFAULT_IMAGE=dlw+amd64+bullseye

# Debian Edu 10 pretty names
IPXE_DLW_AMD64_BUSTER_IMG="Debian Edu 10 Diskless Workstation (Squashfs Image)"
IPXE_DLW_AMD64_BUSTER="Debian Edu 10 Diskless Workstation (NFS rootfs)"
IPXE_X2GO_DISPLAYMANAGER_AMD64_BUSTER_IMG="X2Go Thin Client (Squashfs, 64 bit, Debian 10, Anmeldemanager)"
IPXE_X2GO_DISPLAYMANAGER_AMD64_BUSTER="X2Go Thin Client (NFS rootfs, 64 bit, Debian 10, Anmeldemanager)"
IPXE_X2GO_DISPLAYMANAGER_I386_BUSTER_IMG="X2Go Thin Client (Squashfs, 32 bit, Debian 10, Anmeldemanager)"
IPXE_X2GO_DISPLAYMANAGER_I386_BUSTER="X2Go Thin Client (NFS rootfs, 32 bit, Debian 10, Anmeldemanager)"
IPXE_X2GO_MINIDESKTOP_AMD64_BUSTER_IMG="X2Go Thin Client (Squashfs, 64 bit, Debian 10, Desktop)"
IPXE_X2GO_MINIDESKTOP_AMD64_BUSTER="X2Go Thin Client (NFS rootfs, 64 bit, Debian 10, Desktop)"
IPXE_X2GO_MINIDESKTOP_I386_BUSTER_IMG="X2Go Thin Client (Squashfs, 32 bit, Debian 10, Desktop)"
IPXE_X2GO_MINIDESKTOP_I386_BUSTER="X2Go Thin Client (NFS rootfs, 32 bit, Debian 10, Desktop)"

# Debian Edu 11 pretty names
IPXE_DLW_AMD64_BULLSEYE_IMG="Debian Edu 11 Diskless Workstation (SquashFS Image)"
IPXE_DLW_AMD64_BULLSEYE="Debian Edu 11 Diskless Workstation (NFS rootfs)"
IPXE_X2GO_DISPLAYMANAGER_AMD64_BULLSEYE_IMG="X2Go Thin Client (Squashfs, 64 bit, Debian 11, Anmeldemanager)"
IPXE_X2GO_DISPLAYMANAGER_AMD64_BULLSEYE="X2Go Thin Client (NFS rootfs, 64 bit, Debian 11, Anmeldemanager)"
IPXE_X2GO_DISPLAYMANAGER_I386_BULLSEYE_IMG="X2Go Thin Client (Squashfs, 32 bit, Debian 11, Anmeldemanager)"
IPXE_X2GO_DISPLAYMANAGER_I386_BULLSEYE="X2Go Thin Client (NFS rootfs, 32 bit, Debian 11, Anmeldemanager)"
IPXE_X2GO_MINIDESKTOP_AMD64_BULLSEYE_IMG="X2Go Thin Client (Squashfs, 64 bit, Debian 11, Desktop)"
IPXE_X2GO_MINIDESKTOP_AMD64_BULLSEYE="X2Go Thin Client (NFS rootfs, 64 bit, Debian 11, Desktop)"
IPXE_X2GO_MINIDESKTOP_I386_BULLSEYE_IMG="X2Go Thin Client (Squashfs, 32 bit, Debian 11, Desktop)"
IPXE_X2GO_MINIDESKTOP_I386_BULLSEYE="X2Go Thin Client (NFS rootfs, 32 bit, Debian 11, Desktop)"

# Debian Edu 12 (aka testing/unstable) pretty names
IPXE_DLW_AMD64_BOOKWORM_IMG="Debian Edu testing/unstable Diskless Workstation (SquashFS Image)"
IPXE_DLW_AMD64_BOOKWORM="Debian Edu testing/unstable Diskless Workstation (NFS rootfs)"
IPXE_X2GO_DISPLAYMANAGER_AMD64_BOOKWORM_IMG="X2Go Thin Client (Squashfs, 64 bit, Debian 12, Anmeldemanager)"
IPXE_X2GO_DISPLAYMANAGER_AMD64_BOOKWORM="X2Go Thin Client (NFS rootfs, 64 bit, Debian 12, Anmeldemanager)"
IPXE_X2GO_DISPLAYMANAGER_I386_BOOKWORM_IMG="X2Go Thin Client (Squashfs, 32 bit, Debian 12, Anmeldemanager)"
IPXE_X2GO_DISPLAYMANAGER_I386_BOOKWORM="X2Go Thin Client (NFS rootfs, 32 bit, Debian 12, Anmeldemanager)"
IPXE_X2GO_MINIDESKTOP_AMD64_BOOKWORM_IMG="X2Go Thin Client (Squashfs, 64 bit, Debian 12, Desktop)"
IPXE_X2GO_MINIDESKTOP_AMD64_BOOKWORM="X2Go Thin Client (NFS rootfs, 64 bit, Debian 12, Desktop)"
IPXE_X2GO_MINIDESKTOP_I386_BOOKWORM_IMG="X2Go Thin Client (Squashfs, 32 bit, Debian 12, Desktop)"
IPXE_X2GO_MINIDESKTOP_I386_BOOKWORM="X2Go Thin Client (NFS rootfs, 32 bit, Debian 12, Desktop)"

# Debian Edu specific
DNS_SERVER=10.0.2.2
SEARCH_DOMAIN=intern

KERNEL_PARAMETERS="quiet splash"

ADD_IMAGE_EXCLUDES="/etc/ltsp/image-local.excludes"
OMIT_IMAGE_EXCLUDES="/etc/ltsp/image-local.omit-excludes"

[common]
OMIT_FUNCTIONS="pam_main"

[clients]

HOSTS_1="10.0.2.2 tjener.intern tjener"
HOSTS_2="10.0.2.9 disklserver.intern disklserver"

LIGHTDM_CONF="greeter-hide-users=true"

CUPS_SERVER="ipp.intern"

POST_INIT_USE_FQDN="sed -i '/10.0.2.2/ s/server/tjener.intern tjener/' /etc/hosts"
POST_INIT_SITESUMMARY="sed -i 's/main-server/ltsp-client/' /etc/sitesummary/hostclass"
MASK_SYSTEM_SERVICES="apache2 etckeeper icinga2 nmbd smbd systemd-journald isc-dhcp-server"
# uncomment this to enable SSH access to LTSP clients
KEEP_SYSTEM_SERVICES="ssh"

# Allow local root logins by setting a password hash for the root user.
# The hash contains $, making it hard to escape in POST_INIT_x="sed ...".
# So put sed in a section and call it at POST_INIT like this:
POST_INIT_SET_ROOT_HASH="section_set_root_hash"

[set_root_hash]
sed 's|^root:[^:]*:|root:@rootpw@:|' -i /etc/shadow