# Example: Standalone Incus server with defaults
#
# This seed configures a single Incus server with:
#   - ZFS storage pool "local" on remaining disk space
#   - Network bridge "incusbr0"
#   - Listening on port 8443 on all interfaces
#   - Client certificate pre-trusted
#
# Usage with incusos-seed:
#   incusos-seed --defaults --cert ~/.config/incus/client.crt
#
# Usage with flasher-tool (place files in a tar archive):
#   tar -cf seed.tar install.yaml applications.yaml incus.yaml
#   flasher-tool --seed seed.tar

# --- install.yaml ---
# force_install: true
# force_reboot: true
# target:
#   id: "virtio-*"
# security:
#   missing_tpm: true

# --- applications.yaml ---
# applications:
#   - name: incus

# --- incus.yaml ---
apply_defaults: true
preseed:
  server:
    certificates:
      - name: "my-workstation"
        type: "client"
        certificate: |
          -----BEGIN CERTIFICATE-----
          <paste your certificate from: incus remote get-client-certificate>
          -----END CERTIFICATE-----