# Windows Cloud Image Configuration
image_path: "/path/to/windows-server-2022.qcow2"
vm_name: "windows-server-2022-template"
vm_id: 0  # 0 = auto-find from 10000+
storage: "local-lvm"
memory: 4096
cores: 2
sockets: 1
bridge: "vmbr0"
vlan_tag: 0  # 0 = no VLAN
proxmox_host: "192.168.1.100"
proxmox_user: "root@pam"
guest_agent: true
firewall: true

# Firewall Rules (optional)
firewall_rules:
  - type: out
    action: drop
    dest: "10.0.0.0/8"
    comment: "Block service network to internal network"
  - type: in
    action: accept
    protocol: tcp
    dport: "3389"
    comment: "Allow RDP"
  - type: in
    action: accept
    protocol: tcp
    dport: "5985-5986"
    comment: "Allow WinRM"