Merge remote-tracking branch 'origin/master'

2 files changed, 399 insertions, 538 deletions

diff --git a/out/acme/apps.yaml b/out/acme/apps.yaml
index fddeea6..0c69b8e 100644
--- a/out/acme/apps.yaml
+++ b/out/acme/apps.yaml
@@ -1,301 +1,261 @@
 ---
-type: "io.trygvis.acme.AcmeServer"
-data:
-  name: "acme-1"
-  machine:
-    name: "acme-1"
-    fqdn: "acme-1.machine.acme.com."
----
-type: "io.trygvis.acme.AcmeServer"
-data:
-  name: "acme-2"
-  machine:
-    name: "acme-2"
-    fqdn: "acme-2.machine.acme.com."
----
-type: "io.trygvis.acme.AcmeServer"
-data:
-  name: "acme-3"
-  machine:
-    name: "acme-3"
-    fqdn: "acme-3.machine.acme.com."
----
-type: "io.trygvis.acme.apps.AcmeMyApp"
-data:
-  environment: "ci"
-  dockerTag: "development"
----
-type: "io.trygvis.acme.apps.AcmeMyApp"
-data:
-  environment: "production"
-  dockerTag: "master"
----
-type: "io.trygvis.acme.apps.AcmeOps"
-data: {}
----
-type: "io.trygvis.rules.dba.Cluster"
-data:
-  name: "acme-myapp-ci"
----
-type: "io.trygvis.rules.dba.Cluster"
-data:
-  name: "acme-myapp-production"
----
-type: "io.trygvis.rules.dba.Cluster"
-data:
-  name: "acme-ops"
----
-type: "io.trygvis.rules.dba.Container"
-data:
-  cluster:
-    name: "acme-myapp-ci"
-  name: "app"
-  machineRole: "4tune-api"
-  image: "4tune-api"
-  tag: "development"
----
-type: "io.trygvis.rules.dba.Container"
-data:
-  cluster:
-    name: "acme-myapp-production"
-  name: "app"
-  machineRole: "4tune-api"
-  image: "4tune-api"
-  tag: "master"
----
-type: "io.trygvis.rules.dba.Container"
-data:
-  cluster:
-    name: "acme-myapp-ci"
-  name: "app"
-  machineRole: "4tune-web"
-  image: "4tune-web"
-  tag: "development"
----
-type: "io.trygvis.rules.dba.Container"
-data:
-  cluster:
-    name: "acme-myapp-production"
-  name: "app"
-  machineRole: "4tune-web"
-  image: "4tune-web"
-  tag: "master"
----
-type: "io.trygvis.rules.dba.Container"
-data:
-  cluster:
-    name: "acme-ops"
-  name: "app"
-  machineRole: "n8n"
-  image: "n8n"
-  tag: "0.84.1"
----
-type: "io.trygvis.rules.dba.Container"
-data:
-  cluster:
-    name: "acme-ops"
-  name: "app"
-  machineRole: "pdb"
-  image: "postgresql"
-  tag: "11"
----
-type: "io.trygvis.rules.dba.Container"
-data:
-  cluster:
-    name: "acme-myapp-ci"
-  name: "app"
-  machineRole: "statera"
-  image: "statera"
-  tag: "development"
----
-type: "io.trygvis.rules.dba.Container"
-data:
-  cluster:
-    name: "acme-myapp-production"
-  name: "app"
-  machineRole: "statera"
-  image: "statera"
-  tag: "master"
----
-type: "io.trygvis.rules.dba.Container"
-data:
-  cluster:
-    name: "acme-myapp-ci"
-  name: "app"
-  machineRole: "statera-console"
-  image: "statera-console"
-  tag: "development"
----
-type: "io.trygvis.rules.dba.Container"
-data:
-  cluster:
-    name: "acme-myapp-production"
-  name: "app"
-  machineRole: "statera-console"
-  image: "statera-console"
-  tag: "master"
----
-type: "io.trygvis.rules.dba.Container"
-data:
-  cluster:
-    name: "acme-myapp-production"
-  name: "db"
-  machineRole: "mdb"
-  image: "mongodb"
-  tag: "3.2"
----
-type: "io.trygvis.rules.dba.Container"
-data:
-  cluster:
-    name: "acme-myapp-ci"
-  name: "db"
-  machineRole: "mdb"
-  image: "mongodb"
-  tag: "3.2"
----
-type: "io.trygvis.rules.dba.Container"
-data:
-  cluster:
-    name: "acme-myapp-production"
-  name: "db"
-  machineRole: "pdb"
-  image: "postgresql"
-  tag: "13"
----
-type: "io.trygvis.rules.dba.Container"
-data:
-  cluster:
-    name: "acme-myapp-ci"
-  name: "db"
-  machineRole: "pdb"
-  image: "postgresql"
-  tag: "13"
----
-type: "io.trygvis.rules.dns.DnsEntry"
-data:
-  fqdn: "acme-1.machine.acme.com."
-  type: "A"
----
-type: "io.trygvis.rules.dns.DnsEntry"
-data:
-  fqdn: "acme-2.machine.acme.com."
-  type: "A"
----
-type: "io.trygvis.rules.dns.DnsEntry"
-data:
-  fqdn: "acme-3.machine.acme.com."
-  type: "A"
----
-type: "io.trygvis.rules.dns.DnsEntryTerraformExpression"
-data:
-  entry:
-    fqdn: "acme-1.machine.acme.com."
+- type: "io.trygvis.rules.machine.Machine"
+  data:
+    &acme-1 name: "acme-1"
+    fqdn: "acme-1.machine.acme.com"
+- type: "io.trygvis.rules.machine.Machine"
+  data:
+    &acme-2 name: "acme-2"
+    fqdn: "acme-2.machine.acme.com"
+- type: "io.trygvis.rules.machine.Machine"
+  data:
+    &acme-3 name: "acme-3"
+    fqdn: "acme-3.machine.acme.com"
+- type: "io.trygvis.rules.machine.Machine"
+  data:
+    &ws-1 name: "ws-1"
+    fqdn: null
+- type: "io.trygvis.rules.machine.Machine"
+  data:
+    &ws-2 name: "ws-2"
+    fqdn: null
+- type: "io.trygvis.rules.dns.DnsEntry"
+  data:
+    fqdn: "acme-1.machine.acme.com"
     type: "A"
-  key: "acme-1"
-  expression: "scaleway_instance_ip.acme-1.address"
----
-type: "io.trygvis.rules.dns.DnsEntryTerraformExpression"
-data:
-  entry:
-    fqdn: "acme-2.machine.acme.com."
+- type: "io.trygvis.rules.dns.DnsEntry"
+  data:
+    fqdn: "acme-2.machine.acme.com"
     type: "A"
-  key: "acme-2"
-  expression: "scaleway_instance_ip.acme-2.address"
----
-type: "io.trygvis.rules.dns.DnsEntryTerraformExpression"
-data:
-  entry:
-    fqdn: "acme-3.machine.acme.com."
+- type: "io.trygvis.rules.dns.DnsEntry"
+  data:
+    fqdn: "acme-3.machine.acme.com"
     type: "A"
-  key: "acme-3"
-  expression: "scaleway_instance_ip.acme-3.address"
----
-type: "io.trygvis.rules.engine.KeyValue"
-data:
-  key: "rm-gen"
-  value: null
----
-type: "io.trygvis.rules.machine.Machine"
-data:
-  name: "acme-1"
-  fqdn: "acme-1.machine.acme.com."
----
-type: "io.trygvis.rules.machine.Machine"
-data:
-  name: "acme-2"
-  fqdn: "acme-2.machine.acme.com."
----
-type: "io.trygvis.rules.machine.Machine"
-data:
-  name: "acme-3"
-  fqdn: "acme-3.machine.acme.com."
----
-type: "io.trygvis.rules.machine.Machine"
-data:
-  name: "ws-1"
-  fqdn: null
----
-type: "io.trygvis.rules.machine.Machine"
-data:
-  name: "ws-2"
-  fqdn: null
----
-type: "io.trygvis.rules.terraform.GoogleManagedZoneTerraformExpression"
-data:
-  name: "acme_zone"
----
-type: "io.trygvis.rules.terraform.ScalewayMachine"
-data:
-  machine:
-    name: "acme-1"
-    fqdn: "acme-1.machine.acme.com."
-  key: "acme-1"
----
-type: "io.trygvis.rules.terraform.ScalewayMachine"
-data:
-  machine:
-    name: "acme-1"
-    fqdn: "acme-1.machine.acme.com."
-  key: "acme-1"
----
-type: "io.trygvis.rules.terraform.ScalewayMachine"
-data:
-  machine:
-    name: "acme-2"
-    fqdn: "acme-2.machine.acme.com."
-  key: "acme-2"
----
-type: "io.trygvis.rules.terraform.ScalewayMachine"
-data:
-  machine:
-    name: "acme-2"
-    fqdn: "acme-2.machine.acme.com."
-  key: "acme-2"
----
-type: "io.trygvis.rules.terraform.ScalewayMachine"
-data:
-  machine:
-    name: "acme-3"
-    fqdn: "acme-3.machine.acme.com."
-  key: "acme-3"
----
-type: "io.trygvis.rules.terraform.ScalewayMachine"
-data:
-  machine:
-    name: "acme-3"
-    fqdn: "acme-3.machine.acme.com."
-  key: "acme-3"
----
-type: "io.trygvis.rules.terraform.ScalewayMachine"
-data:
-  machine:
-    name: "ws-1"
-    fqdn: null
-  key: "ws-1"
----
-type: "io.trygvis.rules.terraform.ScalewayMachine"
-data:
-  machine:
-    name: "ws-2"
-    fqdn: null
-  key: "ws-2"
+- type: "io.trygvis.rules.dns.DnsEntryTerraformExpression"
+  data:
+    entry:
+      fqdn: "acme-1.machine.acme.com"
+      type: "A"
+    key: "acme-1"
+    expression: "scaleway_instance_ip.acme-1.address"
+- type: "io.trygvis.rules.dns.DnsEntryTerraformExpression"
+  data:
+    entry:
+      fqdn: "acme-2.machine.acme.com"
+      type: "A"
+    key: "acme-2"
+    expression: "scaleway_instance_ip.acme-2.address"
+- type: "io.trygvis.rules.dns.DnsEntryTerraformExpression"
+  data:
+    entry:
+      fqdn: "acme-3.machine.acme.com"
+      type: "A"
+    key: "acme-3"
+    expression: "scaleway_instance_ip.acme-3.address"
+- type: "io.trygvis.rules.dns.DnsZone"
+  data:
+    name: "ci.acme.com"
+- type: "io.trygvis.rules.dns.DnsZone"
+  data:
+    name: "production.acme.com"
+- type: "io.trygvis.rules.dba.Cluster"
+  data:
+    &acme-myapp-ci name: "acme-myapp-ci"
+- type: "io.trygvis.rules.dba.Cluster"
+  data:
+    &acme-myapp-production name: "acme-myapp-production"
+- type: "io.trygvis.rules.dba.Cluster"
+  data:
+    &acme-ops name: "acme-ops"
+- type: "io.trygvis.rules.dba.Container"
+  data:
+    id: "acme-myapp-ci-4tune-api"
+    cluster: *acme-myapp-ci
+    name: "4tune-api"
+    machineRole: "ci-app"
+    image: "4tune-api"
+    tag: "development"
+    machine: *acme-1
+- type: "io.trygvis.rules.dba.Container"
+  data:
+    id: "acme-myapp-production-4tune-api"
+    cluster: *acme-myapp-production
+    name: "4tune-api"
+    machineRole: "production-app"
+    image: "4tune-api"
+    tag: "master"
+    machine: *acme-3
+- type: "io.trygvis.rules.dba.Container"
+  data:
+    id: "acme-myapp-ci-4tune-web"
+    cluster: *acme-myapp-ci
+    name: "4tune-web"
+    machineRole: "ci-app"
+    image: "4tune-web"
+    tag: "development"
+    machine: *acme-1
+- type: "io.trygvis.rules.dba.Container"
+  data:
+    id: "acme-myapp-production-4tune-web"
+    cluster: *acme-myapp-production
+    name: "4tune-web"
+    machineRole: "production-app"
+    image: "4tune-web"
+    tag: "master"
+    machine: *acme-3
+- type: "io.trygvis.rules.dba.Container"
+  data:
+    id: "acme-myapp-ci-mdb"
+    cluster: *acme-myapp-ci
+    name: "mdb"
+    machineRole: "ci-db"
+    image: "mongodb"
+    tag: "3.2"
+    machine: *acme-2
+- type: "io.trygvis.rules.dba.Container"
+  data:
+    id: "acme-myapp-production-mdb"
+    cluster: *acme-myapp-production
+    name: "mdb"
+    machineRole: "production-db"
+    image: "mongodb"
+    tag: "3.2"
+    machine: *acme-3
+- type: "io.trygvis.rules.dba.Container"
+  data:
+    id: "acme-ops-n8n"
+    cluster: *acme-ops
+    name: "n8n"
+    machineRole: "ops"
+    image: "n8n"
+    tag: "0.84.1"
+    machine: *acme-2
+- type: "io.trygvis.rules.dba.Container"
+  data:
+    id: "acme-myapp-ci-pdb"
+    cluster: *acme-myapp-ci
+    name: "pdb"
+    machineRole: "ci-db"
+    image: "postgresql"
+    tag: "13"
+    machine: *acme-2
+- type: "io.trygvis.rules.dba.Container"
+  data:
+    id: "acme-myapp-production-pdb"
+    cluster: *acme-myapp-production
+    name: "pdb"
+    machineRole: "production-db"
+    image: "postgresql"
+    tag: "13"
+    machine: *acme-3
+- type: "io.trygvis.rules.dba.Container"
+  data:
+    id: "acme-ops-pdb"
+    cluster: *acme-ops
+    name: "pdb"
+    machineRole: "ops"
+    image: "postgresql"
+    tag: "11"
+    machine: *acme-2
+- type: "io.trygvis.rules.dba.Container"
+  data:
+    id: "acme-myapp-ci-statera"
+    cluster: *acme-myapp-ci
+    name: "statera"
+    machineRole: "ci-app"
+    image: "statera"
+    tag: "development"
+    machine: *acme-1
+- type: "io.trygvis.rules.dba.Container"
+  data:
+    id: "acme-myapp-production-statera"
+    cluster: *acme-myapp-production
+    name: "statera"
+    machineRole: "production-app"
+    image: "statera"
+    tag: "master"
+    machine: *acme-3
+- type: "io.trygvis.rules.dba.Container"
+  data:
+    id: "acme-myapp-ci-statera-console"
+    cluster: *acme-myapp-ci
+    name: "statera-console"
+    machineRole: "ci-app"
+    image: "statera-console"
+    tag: "development"
+    machine: *acme-1
+- type: "io.trygvis.rules.dba.Container"
+  data:
+    id: "acme-myapp-production-statera-console"
+    cluster: *acme-myapp-production
+    name: "statera-console"
+    machineRole: "production-app"
+    image: "statera-console"
+    tag: "master"
+    machine: *acme-3
+- type: "io.trygvis.rules.dba.DbaMachineRole"
+  data:
+    machine: "acme-1"
+    roles:
+    - "ci-app"
+- type: "io.trygvis.rules.dba.DbaMachineRole"
+  data:
+    machine: "acme-2"
+    roles:
+    - "ops"
+    - "ci-db"
+- type: "io.trygvis.rules.dba.DbaMachineRole"
+  data:
+    machine: "acme-3"
+    roles:
+    - "production-app"
+    - "production-db"
+- type: "io.trygvis.rules.terraform.ScalewayMachine"
+  data:
+    &acme-1 key: "acme-1"
+    machine: *acme-1
+- type: "io.trygvis.rules.terraform.ScalewayMachine"
+  data:
+    &acme-2 key: "acme-2"
+    machine: *acme-2
+- type: "io.trygvis.rules.terraform.ScalewayMachine"
+  data:
+    &acme-3 key: "acme-3"
+    machine: *acme-3
+- type: "io.trygvis.rules.terraform.ScalewayMachine"
+  data:
+    &ws-1 key: "ws-1"
+    machine: *ws-1
+- type: "io.trygvis.rules.terraform.ScalewayMachine"
+  data:
+    &ws-2 key: "ws-2"
+    machine: *ws-2
+- type: "io.trygvis.rules.engine.KeyValue"
+  data:
+    key: "rm-gen"
+    value: null
+- type: "io.trygvis.rules.terraform.GoogleManagedZoneTerraformExpression"
+  data:
+    &acme_zone name: "acme_zone"
+- type: "io.trygvis.acme.AcmeServer"
+  data:
+    &acme-1 name: "acme-1"
+    machine: *acme-1
+- type: "io.trygvis.acme.AcmeServer"
+  data:
+    &acme-2 name: "acme-2"
+    machine: *acme-2
+- type: "io.trygvis.acme.AcmeServer"
+  data:
+    &acme-3 name: "acme-3"
+    machine: *acme-3
+- type: "io.trygvis.acme.apps.AcmeOps"
+  data: {}
+- type: "io.trygvis.acme.apps.AcmeMyApp"
+  data:
+    environment: "ci"
+    dockerTag: "development"
+- type: "io.trygvis.acme.apps.AcmeMyApp"
+  data:
+    environment: "production"
+    dockerTag: "master"
diff --git a/out/acme/wireguard.yaml b/out/acme/wireguard.yaml
index 2a3ff80..58572d9 100644
--- a/out/acme/wireguard.yaml
+++ b/out/acme/wireguard.yaml
@@ -1,242 +1,143 @@
 ---
-type: "io.trygvis.rules.dns.DnsEntry"
-data:
-  fqdn: "acme-1.vpn.acme.com"
-  type: "A"
----
-type: "io.trygvis.rules.dns.DnsEntry"
-data:
-  fqdn: "acme-2.vpn.acme.com"
-  type: "A"
----
-type: "io.trygvis.rules.dns.DnsEntry"
-data:
-  fqdn: "acme-3.vpn.acme.com"
-  type: "A"
----
-type: "io.trygvis.rules.dns.DnsEntry"
-data:
-  fqdn: "ws-1.vpn.acme.com"
-  type: "A"
----
-type: "io.trygvis.rules.dns.DnsEntry"
-data:
-  fqdn: "ws-2.vpn.acme.com"
-  type: "A"
----
-type: "io.trygvis.rules.machine.Machine"
-data:
-  name: "acme-1"
-  fqdn: "acme-1.machine.acme.com"
----
-type: "io.trygvis.rules.machine.Machine"
-data:
-  name: "acme-2"
-  fqdn: "acme-2.machine.acme.com"
----
-type: "io.trygvis.rules.machine.Machine"
-data:
-  name: "acme-3"
-  fqdn: "acme-3.machine.acme.com"
----
-type: "io.trygvis.rules.machine.Machine"
-data:
-  name: "ws-1"
-  fqdn: null
----
-type: "io.trygvis.rules.machine.Machine"
-data:
-  name: "ws-2"
-  fqdn: null
----
-type: "io.trygvis.rules.wireguard.WgConnection"
-data:
-  host: "acme-1"
-  to: "acme-2"
----
-type: "io.trygvis.rules.wireguard.WgConnection"
-data:
-  host: "acme-1"
-  to: "acme-3"
----
-type: "io.trygvis.rules.wireguard.WgConnection"
-data:
-  host: "acme-2"
-  to: "acme-1"
----
-type: "io.trygvis.rules.wireguard.WgConnection"
-data:
-  host: "acme-2"
-  to: "acme-3"
----
-type: "io.trygvis.rules.wireguard.WgConnection"
-data:
-  host: "acme-3"
-  to: "acme-1"
----
-type: "io.trygvis.rules.wireguard.WgConnection"
-data:
-  host: "acme-3"
-  to: "acme-2"
----
-type: "io.trygvis.rules.wireguard.WgConnection"
-data:
-  host: "ws-1"
-  to: "acme-1"
----
-type: "io.trygvis.rules.wireguard.WgConnection"
-data:
-  host: "ws-1"
-  to: "acme-2"
----
-type: "io.trygvis.rules.wireguard.WgConnection"
-data:
-  host: "ws-1"
-  to: "acme-3"
----
-type: "io.trygvis.rules.wireguard.WgConnection"
-data:
-  host: "ws-2"
-  to: "acme-1"
----
-type: "io.trygvis.rules.wireguard.WgConnection"
-data:
-  host: "ws-2"
-  to: "acme-2"
----
-type: "io.trygvis.rules.wireguard.WgConnection"
-data:
-  host: "ws-2"
-  to: "acme-3"
----
-type: "io.trygvis.rules.wireguard.WgHost"
-data:
-  name: "acme-1"
-  net: "vpn0"
-  publicName: "acme-1.machine.acme.com"
-  netToNetIp: null
-  networkIp: null
----
-type: "io.trygvis.rules.wireguard.WgHost"
-data:
-  name: "acme-2"
-  net: "vpn0"
-  publicName: "acme-2.machine.acme.com"
-  netToNetIp: null
-  networkIp: null
----
-type: "io.trygvis.rules.wireguard.WgHost"
-data:
-  name: "acme-3"
-  net: "vpn0"
-  publicName: "acme-3.machine.acme.com"
-  netToNetIp: null
-  networkIp: null
----
-type: "io.trygvis.rules.wireguard.WgHost"
-data:
-  name: "ws-1"
-  net: "vpn0"
-  publicName: null
-  netToNetIp: null
-  networkIp: null
----
-type: "io.trygvis.rules.wireguard.WgHost"
-data:
-  name: "ws-2"
-  net: "vpn0"
-  publicName: null
-  netToNetIp: null
-  networkIp: null
----
-type: "io.trygvis.rules.wireguard.WgIpAllocation"
-data:
-  host: "acme-1"
-  role: "link"
-  ip:
-    value: "192.168.10.4"
----
-type: "io.trygvis.rules.wireguard.WgIpAllocation"
-data:
-  host: "acme-2"
-  role: "link"
-  ip:
-    value: "192.168.10.3"
----
-type: "io.trygvis.rules.wireguard.WgIpAllocation"
-data:
-  host: "acme-3"
-  role: "link"
-  ip:
-    value: "192.168.10.2"
----
-type: "io.trygvis.rules.wireguard.WgIpAllocation"
-data:
-  host: "ws-1"
-  role: "link"
-  ip:
-    value: "192.168.10.1"
----
-type: "io.trygvis.rules.wireguard.WgIpAllocation"
-data:
-  host: "ws-2"
-  role: "link"
-  ip:
-    value: "192.168.10.0"
----
-type: "io.trygvis.rules.wireguard.WgIpPool"
-data:
-  net: "vpn0"
-  role: "link"
-  cidr:
-    value: "192.168.10.0/29"
----
-type: "io.trygvis.rules.wireguard.WgIpPool"
-data:
-  net: "vpn0"
-  role: "networks"
-  cidr:
-    value: "10.55.0.0/16"
----
-type: "io.trygvis.rules.wireguard.WgNet"
-data:
-  name: "vpn0"
-  domain: "vpn.acme.com"
-  linkCidr: "192.168.10.0/29"
-  networkCidr: "10.55.0.0/16"
-  networkBits: 24
----
-type: "io.trygvis.rules.wireguard.WgNetworkAllocation"
-data:
-  host: "acme-1"
-  role: "network"
-  cidr:
-    value: "10.55.251.0/24"
----
-type: "io.trygvis.rules.wireguard.WgNetworkAllocation"
-data:
-  host: "acme-2"
-  role: "network"
-  cidr:
-    value: "10.55.252.0/24"
----
-type: "io.trygvis.rules.wireguard.WgNetworkAllocation"
-data:
-  host: "acme-3"
-  role: "network"
-  cidr:
-    value: "10.55.253.0/24"
----
-type: "io.trygvis.rules.wireguard.WgNetworkAllocation"
-data:
-  host: "ws-1"
-  role: "network"
-  cidr:
-    value: "10.55.254.0/24"
----
-type: "io.trygvis.rules.wireguard.WgNetworkAllocation"
-data:
-  host: "ws-2"
-  role: "network"
-  cidr:
-    value: "10.55.255.0/24"
+- type: "io.trygvis.rules.machine.Machine"
+  data:
+    &acme-1 name: "acme-1"
+    fqdn: "acme-1.machine.acme.com"
+- type: "io.trygvis.rules.machine.Machine"
+  data:
+    &acme-2 name: "acme-2"
+    fqdn: "acme-2.machine.acme.com"
+- type: "io.trygvis.rules.machine.Machine"
+  data:
+    &acme-3 name: "acme-3"
+    fqdn: "acme-3.machine.acme.com"
+- type: "io.trygvis.rules.machine.Machine"
+  data:
+    &ws-1 name: "ws-1"
+    fqdn: null
+- type: "io.trygvis.rules.machine.Machine"
+  data:
+    &ws-2 name: "ws-2"
+    fqdn: null
+- type: "io.trygvis.rules.dns.DnsEntry"
+  data:
+    fqdn: "acme-1.vpn.acme.com"
+    type: "A"
+- type: "io.trygvis.rules.dns.DnsEntry"
+  data:
+    fqdn: "acme-2.vpn.acme.com"
+    type: "A"
+- type: "io.trygvis.rules.dns.DnsEntry"
+  data:
+    fqdn: "acme-3.vpn.acme.com"
+    type: "A"
+- type: "io.trygvis.rules.dns.DnsEntry"
+  data:
+    fqdn: "ws-1.vpn.acme.com"
+    type: "A"
+- type: "io.trygvis.rules.dns.DnsEntry"
+  data:
+    fqdn: "ws-2.vpn.acme.com"
+    type: "A"
+- type: "io.trygvis.rules.wireguard.WgNet"
+  data:
+    &vpn0 name: "vpn0"
+    domain: "vpn.acme.com"
+    linkCidr: "192.168.10.0/29"
+    networkCidr: "10.55.0.0/16"
+    networkBits: 24
+- type: "io.trygvis.rules.wireguard.WgIpPool"
+  data:
+    &1 net: *vpn0
+    role: "link"
+    cidr:
+      value: "192.168.10.0/29"
+- type: "io.trygvis.rules.wireguard.WgIpPool"
+  data:
+    &2 net: *vpn0
+    role: "networks"
+    cidr:
+      value: "10.55.0.0/16"
+- type: "io.trygvis.rules.wireguard.WgHost"
+  data:
+    &3 machine: *ws-1
+    net: *vpn0
+    publicName: null
+    ip: "192.168.10.6"
+    networkCidr: "10.55.252.0/24"
+- type: "io.trygvis.rules.wireguard.WgHost"
+  data:
+    &4 machine: *ws-2
+    net: *vpn0
+    publicName: null
+    ip: "192.168.10.7"
+    networkCidr: "10.55.251.0/24"
+- type: "io.trygvis.rules.wireguard.WgHost"
+  data:
+    &5 machine: *acme-1
+    net: *vpn0
+    publicName: "acme-1.machine.acme.com"
+    ip: "192.168.10.3"
+    networkCidr: "10.55.255.0/24"
+- type: "io.trygvis.rules.wireguard.WgHost"
+  data:
+    &6 machine: *acme-2
+    net: *vpn0
+    publicName: "acme-2.machine.acme.com"
+    ip: "192.168.10.4"
+    networkCidr: "10.55.254.0/24"
+- type: "io.trygvis.rules.wireguard.WgHost"
+  data:
+    &7 machine: *acme-3
+    net: *vpn0
+    publicName: "acme-3.machine.acme.com"
+    ip: "192.168.10.5"
+    networkCidr: "10.55.253.0/24"
+- type: "io.trygvis.rules.wireguard.WgConnection"
+  data:
+    &8 host: *3
+    to: *7
+- type: "io.trygvis.rules.wireguard.WgConnection"
+  data:
+    &9 host: *3
+    to: *5
+- type: "io.trygvis.rules.wireguard.WgConnection"
+  data:
+    &10 host: *3
+    to: *6
+- type: "io.trygvis.rules.wireguard.WgConnection"
+  data:
+    &11 host: *4
+    to: *7
+- type: "io.trygvis.rules.wireguard.WgConnection"
+  data:
+    &12 host: *4
+    to: *5
+- type: "io.trygvis.rules.wireguard.WgConnection"
+  data:
+    &13 host: *4
+    to: *6
+- type: "io.trygvis.rules.wireguard.WgConnection"
+  data:
+    &14 host: *7
+    to: *5
+- type: "io.trygvis.rules.wireguard.WgConnection"
+  data:
+    &15 host: *7
+    to: *6
+- type: "io.trygvis.rules.wireguard.WgConnection"
+  data:
+    &16 host: *5
+    to: *7
+- type: "io.trygvis.rules.wireguard.WgConnection"
+  data:
+    &17 host: *5
+    to: *6
+- type: "io.trygvis.rules.wireguard.WgConnection"
+  data:
+    &18 host: *6
+    to: *7
+- type: "io.trygvis.rules.wireguard.WgConnection"
+  data:
+    &19 host: *6
+    to: *5