jenkins:
  systemMessage: "Managed by Ansible + JCasC. Do not edit via UI."
  numExecutors: 2
  mode: NORMAL

  # ✅ Перенесено в jenkins.*
  crumbIssuer:
    standard:
      excludeClientIPFromCrumb: false

  # ✅ Перенесено в jenkins.*
  securityRealm:
    local:
      allowsSignup: false
      users:
        - id: "${JENKINS_ADMIN_ID}"
          password: "${JENKINS_ADMIN_PASSWORD}"

  # ✅ Современный matrix-auth
  authorizationStrategy:
    globalMatrix:
      grantedPermissions:
        - "Overall/Administer:${JENKINS_ADMIN_ID}"
        - "Overall/Read:authenticated"

unclassified:
  # ✅ Разрешённый ключ
  location:
    url: "{{ jenkins_url }}"
  # ✅ У плагина timestamper имя узла — 'timestamper'
  timestamper:
    systemTimeFormat: "yyyy-MM-dd HH:mm:ss"
    elapsedTimeFormat: "'+'HH:mm:ss"

tool:
  git:
    installations:
      - name: "Default"
        home: "/usr/bin/git"

jobs:
  - script: |
      pipelineJob('hello-pipeline') {
        definition {
          cps {
            script('''\
              pipeline {
                agent any
                stages {
                  stage('Hello') {
                    steps {
                      echo "It works on ${env.NODE_NAME}"
                    }
                  }
                }
              }
            '''.stripIndent())
            sandbox(true)
          }
        }
      }