---
# increase memory size
mem_size: 512

intnet_netmask: "{{ network_interfaces[0].netmask }}"
intnet_prefix: >-
  {% set ip = network_interfaces[0].ipaddr.split('.') -%}
  {% if intnet_netmask == '255.255.252.0' -%}
  {{ [ ip[0], ip[1], ip[2] | int - 1 ] | join('.') -}}
  {% else -%}
  {{ [ ip[0], ip[1], ip[2] ] | join('.') -}}
  {% endif -%}

network_vip_interfaces:
  - device: vio0
    vhid: 1
    ipaddr: "{{ intnet_prefix }}.1"
    netmask: "{{ intnet_netmask }}"
    pass: "{{ vip1_pass }}"
    priority: 120
  - device: vio0
    vhid: 10
    ipaddr: "{{ intnet_prefix }}.10"
    netmask: "{{ intnet_netmask }}"
    pass: "{{ vip10_pass }}"
    priority: 120
  - device: vio0
    vhid: 11
    ipaddr: "{{ intnet_prefix }}.11"
    netmask: "{{ intnet_netmask }}"
    pass: "{{ vip11_pass }}"
    priority: "{{ vip11_priority }}"
  - device: vio0
    vhid: 12
    ipaddr: "{{ intnet_prefix }}.12"
    netmask: "{{ intnet_netmask }}"
    pass: "{{ vip12_pass }}"
    priority: "{{ vip12_priority }}"
network_ether_interfaces:
  - device: vio1
    proto: none

unbound_zones:
  - 20.172.in-addr.arpa
  - home.foo.sh

# use custom firewall config
firewall_src: pf.conf.gw_dna.j2

# unbound config
unbound_config: unbound.conf.dna.j2

# ifstated config
ifstated_config: ifstated-dna.conf.j2

# ssh host alaises
ssh_hostnames:
  - "gw.{{ inventory_hostname.split('.')[1] }}.foo.sh"