ansible/group_vars/dnagw.yml

58 lines
1.4 KiB
YAML

---
# increase memory size
mem_size: 512
intnet_netmask: "{{ network_interfaces[0].netmask }}"
intnet_prefix: >-
{% set ip = network_interfaces[0].ipaddr.split('.') -%}
{% if intnet_netmask == '255.255.252.0' -%}
{{ [ ip[0], ip[1], ip[2] | int - 1 ] | join('.') -}}
{% else -%}
{{ [ ip[0], ip[1], ip[2] ] | join('.') -}}
{% endif -%}
network_vip_interfaces:
- device: vio0
vhid: 1
ipaddr: "{{ intnet_prefix }}.1"
netmask: "{{ intnet_netmask }}"
pass: "{{ vip1_pass }}"
priority: 120
- device: vio0
vhid: 10
ipaddr: "{{ intnet_prefix }}.10"
netmask: "{{ intnet_netmask }}"
pass: "{{ vip10_pass }}"
priority: 120
- device: vio0
vhid: 11
ipaddr: "{{ intnet_prefix }}.11"
netmask: "{{ intnet_netmask }}"
pass: "{{ vip11_pass }}"
priority: "{{ vip11_priority }}"
- device: vio0
vhid: 12
ipaddr: "{{ intnet_prefix }}.12"
netmask: "{{ intnet_netmask }}"
pass: "{{ vip12_pass }}"
priority: "{{ vip12_priority }}"
network_ether_interfaces:
- device: vio1
proto: none
unbound_zones:
- 20.172.in-addr.arpa
- home.foo.sh
# use custom firewall config
firewall_src: pf.conf.gw_dna.j2
# unbound config
unbound_config: unbound.conf.dna.j2
# ifstated config
ifstated_config: ifstated-dna.conf.j2
# ssh host alaises
ssh_hostnames:
- "gw.{{ inventory_hostname.split('.')[1] }}.foo.sh"