|
|
@@ -0,0 +1,253 @@
|
|
|
+---
|
|
|
+- hosts: 10.0.0.2
|
|
|
+ gather_facts: true
|
|
|
+ become: true
|
|
|
+ vars_files:
|
|
|
+ - "{{ inventory_dir }}/vars/vault.yaml"
|
|
|
+
|
|
|
+ vars:
|
|
|
+ router_ingress_interface: enp3s0
|
|
|
+ router_egress_interface: tun0
|
|
|
+
|
|
|
+ dns_primary: 1.1.1.1
|
|
|
+ dns_secondary: 1.0.0.1
|
|
|
+
|
|
|
+ dhcp_cidr: 10.0.0.0/24
|
|
|
+ dhcp_domain: "home.arpa"
|
|
|
+ dhcp_range_start: 10.0.0.125
|
|
|
+ dhcp_range_end: 10.0.0.200
|
|
|
+ dhcp_gw_default: 10.0.0.1
|
|
|
+ dhcp_gw_secured: 10.0.0.2
|
|
|
+ dhcp_gw_betagate: 10.0.0.10
|
|
|
+ dhcp_interface: "{{ router_ingress_interface }}"
|
|
|
+
|
|
|
+ status_services:
|
|
|
+ - openvpn@proton
|
|
|
+ - isc-dhcp-server
|
|
|
+ - unbound
|
|
|
+
|
|
|
+ reservations:
|
|
|
+ - type: default
|
|
|
+ name: alphagate
|
|
|
+ mac: 00:e0:4c:68:01:ad # internal
|
|
|
+ ip: 10.0.0.2
|
|
|
+
|
|
|
+ - type: default
|
|
|
+ name: netgearap
|
|
|
+ mac: 94:a6:7e:58:3a:9f
|
|
|
+ #mac: 10:da:43:8c:a3:13
|
|
|
+ ip: 10.0.0.3
|
|
|
+
|
|
|
+ - type: secured
|
|
|
+ name: nas
|
|
|
+ mac: 04:7c:16:6e:db:ab
|
|
|
+ ip: 10.0.0.4
|
|
|
+
|
|
|
+ - type: secured
|
|
|
+ name: kodilv
|
|
|
+ mac: 6c:0b:84:e1:9b:61
|
|
|
+ ip: 10.0.0.5
|
|
|
+
|
|
|
+ - type: secured
|
|
|
+ name: kodimb
|
|
|
+ mac: e4:5f:01:4f:7c:74
|
|
|
+ ip: 10.0.0.6
|
|
|
+
|
|
|
+ - type: secured
|
|
|
+ name: kodijb
|
|
|
+ mac: 00:23:24:ad:2f:72
|
|
|
+ ip: 10.0.0.7
|
|
|
+
|
|
|
+ - type: default
|
|
|
+ name: tvheadend
|
|
|
+ mac: 10:bf:48:4e:08:85
|
|
|
+ ip: 10.0.0.8
|
|
|
+
|
|
|
+ - type: secured
|
|
|
+ name: arm
|
|
|
+ mac: 10:bf:48:d4:d5:fc
|
|
|
+ ip: 10.0.0.9
|
|
|
+
|
|
|
+ - type: cloudflare
|
|
|
+ name: betagate
|
|
|
+ mac: 00:e0:4c:68:01:84
|
|
|
+ ip: 10.0.0.10
|
|
|
+
|
|
|
+ - type: devnull
|
|
|
+ name: ipcameras
|
|
|
+ mac: 9c:8e:cd:2e:51:9c
|
|
|
+ ip: 10.0.0.11
|
|
|
+
|
|
|
+ - type: default
|
|
|
+ name: retropie
|
|
|
+ mac: b8:27:eb:42:71:dc
|
|
|
+ ip: 10.0.0.12
|
|
|
+
|
|
|
+ - type: secured
|
|
|
+ name: nebula
|
|
|
+ mac: f4:4d:30:65:4d:1f
|
|
|
+ ip: 10.0.0.14
|
|
|
+
|
|
|
+ - type: default
|
|
|
+ name: kitchen
|
|
|
+ mac: 60:f2:62:61:2d:71
|
|
|
+ ip: 10.0.0.15
|
|
|
+
|
|
|
+ - type: default
|
|
|
+ name: x10
|
|
|
+ mac: b8:27:eb:7c:f3:ff
|
|
|
+ ip: 10.0.0.16
|
|
|
+
|
|
|
+ - type: default
|
|
|
+ name: brother-print-server
|
|
|
+ mac: 80:1f:02:4a:cd:cf
|
|
|
+ ip: 10.0.0.17
|
|
|
+
|
|
|
+ - type: default
|
|
|
+ name: dellxps
|
|
|
+ mac: f0:1f:af:36:0c:48
|
|
|
+ ip: 10.0.0.19
|
|
|
+
|
|
|
+ - type: devnull
|
|
|
+ name: zoom
|
|
|
+ mac: 00:12:41:ba:5c:00
|
|
|
+ ip: 10.0.0.20
|
|
|
+
|
|
|
+ - type: default
|
|
|
+ name: ricky-laptop-eth
|
|
|
+ mac: 50:a1:32:2a:fb:4c
|
|
|
+ ip: 10.0.0.21
|
|
|
+
|
|
|
+ - type: default
|
|
|
+ name: ricky-laptop-wifi
|
|
|
+ mac: 10:6f:d9:b0:1a:71
|
|
|
+ ip: 10.0.0.22
|
|
|
+
|
|
|
+ # will set cameras to 10.0.0.30
|
|
|
+
|
|
|
+ - type: default
|
|
|
+ name: nixos-laptop
|
|
|
+ mac: 28:d2:44:d8:7f:95
|
|
|
+ ip: 10.0.0.40
|
|
|
+
|
|
|
+ # Ricky's new laptop wifi manually set to 10.0.0.41
|
|
|
+
|
|
|
+ # Ricky's old laptop manually set to 10.0.0.42
|
|
|
+
|
|
|
+ # Ricky's new laptop ethernet manually set to 10.0.0.43
|
|
|
+
|
|
|
+ - type: betagate
|
|
|
+ name: blaine-work-laptop
|
|
|
+ mac: 08:3a:88:57:ab:fa
|
|
|
+ ip: 10.0.0.45
|
|
|
+
|
|
|
+ - type: default
|
|
|
+ name: s7
|
|
|
+ mac: 8c:f5:a3:6a:55:f6
|
|
|
+ ip: 10.0.0.51
|
|
|
+
|
|
|
+ - type: default
|
|
|
+ name: lemp12-ethernet
|
|
|
+ mac: f8:e4:3b:e5:3d:e5
|
|
|
+ ip: 10.0.0.52
|
|
|
+
|
|
|
+ - type: default
|
|
|
+ name: lemp12-wifi
|
|
|
+ mac: c4:d0:e3:53:ed:00
|
|
|
+ ip: 10.0.0.53
|
|
|
+
|
|
|
+ - type: default
|
|
|
+ name: blaine-iphone
|
|
|
+ mac: f0:a3:5a:95:b4:cd
|
|
|
+ ip: 10.0.0.54
|
|
|
+
|
|
|
+ - type: default
|
|
|
+ name: xen-titanium
|
|
|
+ mac: f0:57:a6:87:50:23
|
|
|
+ ip: 10.0.0.55
|
|
|
+
|
|
|
+ - type: secured
|
|
|
+ name: t440s-eth
|
|
|
+ mac: 68:f7:28:21:36:60
|
|
|
+ ip: 10.0.0.56
|
|
|
+
|
|
|
+ - type: secured
|
|
|
+ name: t440s-wifi
|
|
|
+ mac: a4:c4:94:df:2f:c3
|
|
|
+ ip: 10.0.0.57
|
|
|
+
|
|
|
+ # rancher server
|
|
|
+ - type: default
|
|
|
+ name: rancher
|
|
|
+ mac: 6c:0b:84:e0:d2:a0
|
|
|
+ ip: 10.0.0.60
|
|
|
+
|
|
|
+ # rancher master
|
|
|
+ - type: default
|
|
|
+ name: rke-m01
|
|
|
+ mac: 6c:0b:84:e1:9b:61
|
|
|
+ ip: 10.0.0.61
|
|
|
+
|
|
|
+ # rancher worker1
|
|
|
+ - type: default
|
|
|
+ name: rke-w01
|
|
|
+ mac: 00:23:24:b4:d3:3b
|
|
|
+ ip: 10.0.0.62
|
|
|
+
|
|
|
+ # rancher worker2
|
|
|
+ - type: default
|
|
|
+ name: rke-w02
|
|
|
+ mac: 00:23:24:c7:25:bf
|
|
|
+ ip: 10.0.0.63
|
|
|
+
|
|
|
+ # rancher worker3
|
|
|
+ - type: default
|
|
|
+ name: rke-w03
|
|
|
+ mac: 00:23:24:c7:1d:fb
|
|
|
+ ip: 10.0.0.64
|
|
|
+
|
|
|
+
|
|
|
+ # extra kodi box?
|
|
|
+ - type: default
|
|
|
+ name: unknown
|
|
|
+ mac: f8:e4:3b:bb:0c:c8
|
|
|
+ ip: 10.0.0.65
|
|
|
+
|
|
|
+ # MetalLB VIP
|
|
|
+ - type: default
|
|
|
+ name: rke
|
|
|
+ mac: ff:ff:ff:ff:ff:ff # not a real box
|
|
|
+ ip: 10.0.0.70
|
|
|
+
|
|
|
+ - type: cloudflare
|
|
|
+ name: julie-macbook-air
|
|
|
+ mac: 10:b5:88:5d:70:c9
|
|
|
+ ip: 10.0.0.89
|
|
|
+
|
|
|
+ - type: cloudflare
|
|
|
+ name: julie-macbook
|
|
|
+ mac: b8:8d:12:36:f1:16
|
|
|
+ ip: 10.0.0.90
|
|
|
+
|
|
|
+ # Ken is using 10.0.0.91
|
|
|
+
|
|
|
+ - type: devnull
|
|
|
+ name: cameradvr
|
|
|
+ mac: 00:12:41:12:e5:22
|
|
|
+ ip: 10.0.0.158
|
|
|
+
|
|
|
+ - type: devnull
|
|
|
+ name: backyard-camera
|
|
|
+ mac: 00:2a:2a:5c:06:9a
|
|
|
+ ip: 10.0.0.173
|
|
|
+
|
|
|
+ - type: default
|
|
|
+ name: netgear-switch1
|
|
|
+ mac: cc:40:d0:4c:3a:b6
|
|
|
+ ip: 10.0.0.254
|
|
|
+
|
|
|
+ roles:
|
|
|
+ - role: router
|
|
|
+ - role: openvpn
|
|
|
+ - role: name-resolution
|
|
|
+ - role: statusservices
|
Blaine Story