72 lines
2 KiB
YAML
72 lines
2 KiB
YAML
---
|
|
# increase memory size
|
|
mem_size: 512
|
|
|
|
intnet: "{{ network_interfaces[0].ipaddr + '/' + network_interfaces[0].netmask }}"
|
|
intdomain: "{{ inventory_hostname.split('.')[1:] | join('.') }}"
|
|
|
|
network_vip_interfaces:
|
|
- device: vio0
|
|
vhid: 1
|
|
ipaddr: "{{ intnet | ansible.utils.ipaddr(1) | ansible.utils.ipaddr('address') }}"
|
|
netmask: "{{ intnet | ansible.utils.ipaddr('netmask') }}"
|
|
pass: "{{ vip1_pass }}"
|
|
priority: 120
|
|
- device: vio0
|
|
vhid: 10
|
|
ipaddr: "{{ intnet | ansible.utils.ipaddr(10) | ansible.utils.ipaddr('address') }}"
|
|
netmask: "{{ intnet | ansible.utils.ipaddr('netmask') }}"
|
|
pass: "{{ vip10_pass }}"
|
|
priority: 120
|
|
- device: vio0
|
|
vhid: 11
|
|
ipaddr: "{{ intnet | ansible.utils.ipaddr(11) | ansible.utils.ipaddr('address') }}"
|
|
netmask: "{{ intnet | ansible.utils.ipaddr('netmask') }}"
|
|
pass: "{{ vip11_pass }}"
|
|
priority: "{{ vip11_priority }}"
|
|
- device: vio0
|
|
vhid: 12
|
|
ipaddr: "{{ intnet | ansible.utils.ipaddr(12) | ansible.utils.ipaddr('address') }}"
|
|
netmask: "{{ intnet | ansible.utils.ipaddr('netmask') }}"
|
|
pass: "{{ vip12_pass }}"
|
|
priority: "{{ vip12_priority }}"
|
|
network_ether_interfaces:
|
|
- device: vio1
|
|
proto: none
|
|
|
|
unbound_zones:
|
|
- 144-28.96.16.37.in-addr.arpa
|
|
- foo.sh
|
|
- >-
|
|
{% set reverse = intnet | ansible.utils.ipaddr('network') | ansible.utils.ipaddr('revdns') -%}
|
|
{% if intnet | ansible.utils.ipaddr('prefix') < 24 -%}
|
|
{{ reverse[:-1] | split('.', 2) | last -}}
|
|
{% else -%}
|
|
{{ reverse[:-1] | split('.', 1) | last -}}
|
|
{% endif -%}
|
|
- "{{ intdomain }}"
|
|
|
|
# use custom firewall config
|
|
firewall_src: pf.conf.gw_dna.j2
|
|
|
|
# unbound config
|
|
unbound_config: unbound.conf.dna.j2
|
|
|
|
# get extra hosts from ldap
|
|
dhcpd_ldap_filter: >-
|
|
(&(objectClass=ieee802Device)(objectClass=ipHost)(cn=*.{{ intdomain }}))
|
|
|
|
# ifstated config
|
|
ifstated_config: ifstated-dna.conf.j2
|
|
|
|
# ntp settings
|
|
ntpd_servers:
|
|
- time1.mikes.fi
|
|
- time2.mikes.fi
|
|
- time3.mikes.fi
|
|
ntpd_listen:
|
|
- "{{ network_interfaces[0].ipaddr }}"
|
|
|
|
# ssh host alaises
|
|
ssh_hostnames:
|
|
- "gw.{{ intdomain }}"
|