Ver Fonte

sgc is the new dhcp/unbound server

Blaine Story há 1 semana atrás
pai
commit
1a60df31a5
2 ficheiros alterados com 225 adições e 18 exclusões
  1. 0 18
      plays/nodes/betagate.yml
  2. 225 0
      plays/nodes/sgc.yml

+ 0 - 18
plays/nodes/betagate.yml

@@ -1,18 +0,0 @@
----
-- hosts: betagate
-  gather_facts: true
-  become: true
-  vars_files:
-    - "{{ playbook_dir }}/../vars/vault.yaml"
-
-  vars:
-    router_ingress_interface: enp2s0
-    router_egress_interface: tun0
-
-    status_services:
-      - openvpn@proton
-
-  roles:
-    - role: router
-    - role: openvpn
-    - role: statusservices

+ 225 - 0
plays/nodes/sgc.yml

@@ -0,0 +1,225 @@
+---
+- hosts: 10.0.0.1
+  gather_facts: true
+  become: true
+  vars_files:
+    - "{{ playbook_dir }}/../vars/vault.yaml"
+
+  vars:
+    router_ingress_interface: enp2s0 # LAN
+    router_egress_interface: enp3s0  # ISP
+
+    dns_primary: 1.1.1.1
+    dns_secondary: 1.0.0.1
+
+    dhcp_cidr: 10.0.0.0/16
+    dhcp_domain: "home.arpa"
+    dhcp_range_start: 10.0.10.1
+    dhcp_range_end: 10.0.12.250
+    dhcp_gw_default: 10.0.0.1
+    dhcp_gw_secured: 10.0.0.2
+    dhcp_interface: "{{ router_ingress_interface }}"
+
+    status_services:
+      - isc-dhcp-server
+      - tailscaled
+      - unbound
+
+    reservations:
+      - type: default
+        name: sgc
+        mac: 00:e0:4c:68:01:84 # internal
+        ip: 10.0.0.1
+
+      - type: default
+        name: alphagate
+        mac: 00:e0:4c:68:01:ad # internal
+        ip: 10.0.0.2
+
+      - type: default
+        name: netgearap
+        mac: 94:a6:7e:58:3a:9f
+        ip: 10.0.0.3
+
+      - type: secured
+        name: nas
+        mac: 04:7c:16:6e:db:ab
+        ip: 10.0.0.4
+
+      - type: secured
+        name: kodilv
+        mac: b0:41:6f:0d:f2:dd
+        ip: 10.0.0.5
+    
+      - type: secured
+        name: kodimb
+        mac: e4:5f:01:4f:7c:74
+        ip: 10.0.0.6
+    
+      - type: secured
+        name: kodijb
+        mac: e8:ff:1e:d6:28:28
+        ip: 10.0.0.7
+    
+      - type: default
+        name: tvheadend
+        mac: 10:bf:48:4e:08:85
+        ip: 10.0.0.8
+    
+      - type: secured
+        name: arm
+        mac: 10:bf:48:d4:d5:fc
+        ip: 10.0.0.9
+
+      - type: devnull
+        name: ipcameras
+        mac: 9c:8e:cd:2e:51:9c
+        ip: 10.0.0.11
+    
+      - type: default
+        name: retropie
+        mac: b8:27:eb:42:71:dc
+        ip: 10.0.0.12
+    
+      - type: secured
+        name: nebula
+        mac: f4:4d:30:65:4d:1f
+        ip: 10.0.0.14
+    
+      - type: default
+        name: kitchen
+        mac: f2:42:5f:7a:d1:7b
+        ip: 10.0.0.15
+    
+      - type: default
+        name: x10
+        mac: b8:27:eb:7c:f3:ff
+        ip: 10.0.0.16
+    
+      - type: default
+        name: brother-print-server
+        mac: 80:1f:02:4a:cd:cf
+        ip: 10.0.0.17
+    
+      - type: default
+        name: dellxps
+        mac: f0:1f:af:36:0c:48
+        ip: 10.0.0.19
+    
+      - type: devnull
+        name: zoom
+        mac: 00:12:41:ba:5c:00
+        ip: 10.0.0.20
+    
+      - type: default
+        name: ricky-laptop-eth
+        mac: 40:c2:ba:5a:53:2d
+        ip: 10.0.0.21
+
+      - type: default
+        name: ricky-laptop-wifi
+        mac: 58:cd:c9:9b:49:ed
+        ip: 10.0.0.22
+    
+      # will set cameras to 10.0.0.30
+    
+      - type: default
+        name: nixos-laptop
+        mac: 28:d2:44:d8:7f:95
+        ip: 10.0.0.40
+    
+      # Ricky's new laptop wifi manually set to 10.0.0.41
+    
+      # Ricky's old laptop manually set to 10.0.0.42
+    
+      # Ricky's new laptop ethernet manually set to 10.0.0.43
+    
+      - type: cloudflare
+        name: blaine-work-laptop
+        mac: 08:3a:88:55:95:1e
+        ip: 10.0.0.45
+
+      - type: cloudflare
+        name: blaine-workstation
+        mac: 04:7b:cb:f9:b4:b7
+        ip: 10.0.0.47
+    
+      - type: default
+        name: s7
+        mac: 8c:f5:a3:6a:55:f6
+        ip: 10.0.0.51
+    
+      - type: default
+        name: lemp12-ethernet
+        mac: f8:e4:3b:e5:3d:e5
+        ip: 10.0.0.52
+    
+      - type: default
+        name: lemp12-wifi
+        mac: 4e:5e:72:88:76:aa
+        ip: 10.0.0.53
+    
+      - type: default
+        name: blaine-iphone
+        mac: f0:a3:5a:95:b4:cd
+        ip: 10.0.0.54
+    
+      - type: default
+        name: xen-titanium
+        mac: f0:57:a6:87:50:23
+        ip: 10.0.0.55
+
+      - type: cloudflare
+        name: heidi-phone
+        mac: 32:bc:3a:c3:02:dc
+        ip: 10.0.0.56
+
+        # canon photo printer
+      - type: devnull
+        name: canon-printer
+        mac: 18:0c:ac:43:e1:a0
+        ip: 10.0.0.60
+    
+        # extra kodi box?
+      - type: default
+        name: unknown
+        mac: f8:e4:3b:bb:0c:c8
+        ip: 10.0.0.65
+    
+      - type: cloudflare
+        name: julie-macbook-air
+        mac: 10:b5:88:5d:70:c9
+        ip: 10.0.0.89
+    
+      - type: cloudflare
+        name: julie-macbook
+        mac: b8:8d:12:36:f1:16
+        ip: 10.0.0.90
+    
+      # Ken is using 10.0.0.91
+
+      - type: devnull
+        name: dr-ceiling-fan
+        mac: ec:64:c9:c3:d6:8d
+        ip: 10.0.0.95
+
+      - type: devnull
+        name: garden-camera
+        mac: f0:00:05:28:9d:2b
+        ip: 10.0.0.101
+    
+      - type: devnull
+        name: cameradvr
+        mac: 00:12:41:12:e5:22
+        ip: 10.0.0.158
+    
+      - type: default
+        name: netgear-switch1
+        mac: cc:40:d0:4c:3a:b6
+        ip: 10.0.0.254
+
+
+  roles:
+    - role: router
+    - role: name-resolution
+    - role: statusservices