{
  "name": "hetzner-bootstrap",
  "version": "1.1.0",
  "defaults": {
    "SOVEREIGN_USER": "sovereign",
    "WG_PORT": "51820",
    "WG_CIDR": "10.200.0.1/24",
    "INSTALL_CLOUDFLARED": "true",
    "INSTALL_WIREGUARD": "true",
    "DRY_RUN": "1",
    "REQUIRE_CONFIRM": "1",
    "CONFIRM_PHRASE": "I UNDERSTAND THIS CAN AFFECT REMOTE ACCESS",
    "SSH_PORT": "22",
    "ALLOW_SSH_FALLBACK_22": "true"
  },
  "phases": {
    "preflight": [
      "00_preflight.sh"
    ],
    "bootstrap": {
      "plan": [
        "10_plan.sh"
      ],
      "apply": [
        "11_apply.sh"
      ],
      "rollback": [
        "rollback/emergency_restore_ssh_ufw.sh"
      ]
    },
    "wireguard": {
      "plan": [
        "20_wireguard_plan.sh"
      ],
      "apply": [
        "21_wireguard_apply.sh"
      ],
      "rollback": [
        "rollback/undo_wireguard.sh"
      ]
    },
    "verify": [
      "90_verify.sh"
    ],
    "report": [
      "99_report.sh"
    ]
  },
  "eu_compliance": {
    "data_residency": "EU",
    "jurisdiction": "Germany/Finland (Hetzner DC)",
    "gdpr_applicable": true
  }
}