diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 5743630..0da157d 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -18,9 +18,17 @@ repos:
       - id: check-added-large-files
       - id: check-merge-conflict
       - id: end-of-file-fixer
+        exclude: "^ansible_playbooks/vars/nomad_vars.sample.yml$"
       - id: trailing-whitespace
   - repo: https://github.com/Yelp/detect-secrets
     rev: v1.4.0
     hooks:
       - id: detect-secrets
         args: ['--baseline', '.secrets-baseline']
+  - repo: local
+    hooks:
+      - id: variable-sample
+        name: generate variable sample file
+        language: system
+        entry: bash -c 'venv/bin/python nomad_vars.py print > ./ansible_playbooks/vars/nomad_vars.sample.yml'
+        types: [file]
diff --git a/ansible_playbooks/vars/nomad_vars.sample.yml b/ansible_playbooks/vars/nomad_vars.sample.yml
index e2aebd7..134f479 100644
--- a/ansible_playbooks/vars/nomad_vars.sample.yml
+++ b/ansible_playbooks/vars/nomad_vars.sample.yml
@@ -9,25 +9,27 @@ nomad/jobs:
   smtp_server: VALUE
   smtp_tls: VALUE
   smtp_user: VALUE
-nomad/jobs/adminer:
+nomad/jobs/adminer/adminer/stunnel:
   mysql_stunnel_psk: VALUE
+  postgres_stunnel_psk: VALUE
 nomad/jobs/authelia:
   db_name: VALUE
   db_pass: VALUE
   db_user: VALUE
   email_sender: VALUE
   jwt_secret: VALUE
-  ldap_stunnel_psk: VALUE
   lldap_admin_password: VALUE
   lldap_admin_user: VALUE
-  mysql_stunnel_psk: VALUE
   oidc_clients: VALUE
   oidc_hmac_secret: VALUE
   oidc_issuer_certificate_chain: VALUE
   oidc_issuer_private_key: VALUE
-  redis_stunnel_psk: VALUE
   session_secret: VALUE
   storage_encryption_key: VALUE
+nomad/jobs/authelia/authelia/stunnel:
+  ldap_stunnel_psk: VALUE
+  mysql_stunnel_psk: VALUE
+  redis_stunnel_psk: VALUE
 nomad/jobs/backup:
   backup_passphrase: VALUE
   mysql_stunnel_psk: VALUE
@@ -52,6 +54,13 @@ nomad/jobs/backup-oneoff-pi4:
   nas_ftp_host: VALUE
   nas_ftp_pass: VALUE
   nas_ftp_user: VALUE
+nomad/jobs/bazarr/bazarr:
+  db_name: VALUE
+  db_pass: VALUE
+  db_user: VALUE
+nomad/jobs/bazarr/bazarr/postgres-bootstrap:
+  superuser: VALUE
+  superuser_pass: VALUE
 nomad/jobs/blocky:
   db_name: VALUE
   db_pass: VALUE
@@ -67,11 +76,15 @@ nomad/jobs/ddclient:
   zone: VALUE
 nomad/jobs/diun:
   slack_hook_url: VALUE
-nomad/jobs/gitea:
+nomad/jobs/git:
   db_name: VALUE
   db_pass: VALUE
   db_user: VALUE
+  mysql_stunnel_psk: VALUE
   secret_key: VALUE
+  smtp_sender: VALUE
+nomad/jobs/git/git/stunnel:
+  mysql_stunnel_psk: VALUE
 nomad/jobs/grafana:
   admin_pw: VALUE
   alert_email_addresses: VALUE
@@ -94,24 +107,21 @@ nomad/jobs/immich:
   db_name: VALUE
   db_pass: VALUE
   db_user: VALUE
-nomad/jobs/ipdvr/bazarr:
-  db_pass: VALUE
-  db_user: VALUE
-nomad/jobs/ipdvr/bazarr/bootstrap:
-  superuser: VALUE
-  superuser_pass: VALUE
-nomad/jobs/ipdvr/lidarr:
-  db_pass: VALUE
-  db_user: VALUE
-nomad/jobs/ipdvr/lidarr/bootstrap:
-  superuser: VALUE
-  superuser_pass: VALUE
 nomad/jobs/ipdvr/radarr:
   db_pass: VALUE
   db_user: VALUE
 nomad/jobs/ipdvr/radarr/bootstrap:
   superuser: VALUE
   superuser_pass: VALUE
+nomad/jobs/lidarr:
+  db_name: VALUE
+  db_pass: VALUE
+  db_user: VALUE
+nomad/jobs/lidarr/lidarr/postgres-bootstrap:
+  superuser: VALUE
+  superuser_pass: VALUE
+nomad/jobs/lidarr/lidarr/stunnel:
+  postgres_stunnel_psk: VALUE
 nomad/jobs/lldap:
   admin_email: VALUE
   admin_password: VALUE
@@ -140,9 +150,13 @@ nomad/jobs/photoprism:
   db_pass: VALUE
   db_user: VALUE
   mysql_stunnel_psk: VALUE
+nomad/jobs/photoprism/photoprism/stunnel:
+  mysql_stunnel_psk: VALUE
 nomad/jobs/postgres-server:
   superuser: VALUE
   superuser_pass: VALUE
+nomad/jobs/postgres-server/postgres-server/stunnel:
+  allowed_psks: VALUE
 nomad/jobs/redis-authelia:
   allowed_psks: VALUE
 nomad/jobs/redis-blocky:
@@ -153,6 +167,12 @@ nomad/jobs/traefik:
   acme_email: VALUE
   domain_lego_dns: VALUE
   usersfile: VALUE
+nomad/jobs/tubesync:
+  db_name: VALUE
+  db_pass: VALUE
+  db_user: VALUE
+nomad/jobs/tubesync/tubesync/stunnel:
+  mysql_stunnel_psk: VALUE
 nomad/oidc:
   secret: VALUE
 secrets/mysql:
@@ -166,3 +186,4 @@ secrets/smtp:
   server: VALUE
   tls: VALUE
   user: VALUE
+