infra/plays/nodes/sgc.yml

---
- hosts: 10.0.0.1
  gather_facts: true
  become: true
  vars_files:
    - "{{ playbook_dir }}/../vars/vault.yaml"

  vars:
    router_ingress_interface: enp2s0 # LAN
    router_egress_interface: enp3s0  # ISP

    dns_primary: 1.1.1.1
    dns_secondary: 1.0.0.1

    dhcp_cidr: 10.0.0.0/16
    dhcp_domain: "home.arpa"
    dhcp_range_start: 10.0.10.1
    dhcp_range_end: 10.0.12.250
    dhcp_gw_default: 10.0.0.1
    dhcp_gw_secured: 10.0.0.2
    dhcp_interface: "{{ router_ingress_interface }}"

    status_services:
      - isc-dhcp-server
      - tailscaled
      - unbound

    reservations:
      - type: default
        name: sgc
        mac: 00:e0:4c:68:01:84 # internal
        ip: 10.0.0.1

      - type: default
        name: alphagate
        mac: 00:e0:4c:68:01:ad # internal
        ip: 10.0.0.2

      - type: default
        name: netgearap
        mac: 94:a6:7e:58:3a:9f
        ip: 10.0.0.3

      - type: secured
        name: nas
        mac: 04:7c:16:6e:db:ab
        ip: 10.0.0.4

      - type: secured
        name: kodilv
        mac: b0:41:6f:0d:f2:dd
        ip: 10.0.0.5
    
      - type: secured
        name: kodimb
        mac: e4:5f:01:4f:7c:74
        ip: 10.0.0.6
    
      - type: secured
        name: kodijb
        mac: e8:ff:1e:d6:28:28
        ip: 10.0.0.7
    
      - type: default
        name: tvheadend
        mac: 10:bf:48:4e:08:85
        ip: 10.0.0.8
    
      - type: secured
        name: arm
        mac: 10:bf:48:d4:d5:fc
        ip: 10.0.0.9

      - type: devnull
        name: ipcameras
        mac: 9c:8e:cd:2e:51:9c
        ip: 10.0.0.11
    
      - type: default
        name: retropie
        mac: b8:27:eb:42:71:dc
        ip: 10.0.0.12
    
      - type: secured
        name: nebula
        mac: f4:4d:30:65:4d:1f
        ip: 10.0.0.14
    
      - type: default
        name: kitchen
        mac: f2:42:5f:7a:d1:7b
        ip: 10.0.0.15
    
      - type: default
        name: x10
        mac: b8:27:eb:7c:f3:ff
        ip: 10.0.0.16
    
      - type: default
        name: brother-print-server
        mac: 80:1f:02:4a:cd:cf
        ip: 10.0.0.17
    
      - type: default
        name: dellxps
        mac: f0:1f:af:36:0c:48
        ip: 10.0.0.19
    
      - type: devnull
        name: zoom
        mac: 00:12:41:ba:5c:00
        ip: 10.0.0.20
    
      - type: default
        name: ricky-laptop-eth
        mac: 40:c2:ba:5a:53:2d
        ip: 10.0.0.21

      - type: default
        name: ricky-laptop-wifi
        mac: 58:cd:c9:9b:49:ed
        ip: 10.0.0.22
    
      # will set cameras to 10.0.0.30
    
      - type: default
        name: nixos-laptop
        mac: 28:d2:44:d8:7f:95
        ip: 10.0.0.40
    
      # Ricky's new laptop wifi manually set to 10.0.0.41
    
      # Ricky's old laptop manually set to 10.0.0.42
    
      # Ricky's new laptop ethernet manually set to 10.0.0.43
    
      - type: cloudflare
        name: blaine-work-laptop
        mac: 08:3a:88:55:95:1e
        ip: 10.0.0.45

      - type: cloudflare
        name: blaine-workstation
        mac: 04:7b:cb:f9:b4:b7
        ip: 10.0.0.47
    
      - type: default
        name: s7
        mac: 8c:f5:a3:6a:55:f6
        ip: 10.0.0.51
    
      - type: default
        name: lemp12-ethernet
        mac: f8:e4:3b:e5:3d:e5
        ip: 10.0.0.52
    
      - type: default
        name: lemp12-wifi
        mac: 4e:5e:72:88:76:aa
        ip: 10.0.0.53
    
      - type: default
        name: blaine-iphone
        mac: f0:a3:5a:95:b4:cd
        ip: 10.0.0.54
    
      - type: default
        name: xen-titanium
        mac: f0:57:a6:87:50:23
        ip: 10.0.0.55

      - type: cloudflare
        name: heidi-phone
        mac: 32:bc:3a:c3:02:dc
        ip: 10.0.0.56

        # canon photo printer
      - type: devnull
        name: canon-printer
        mac: 18:0c:ac:43:e1:a0
        ip: 10.0.0.60
    
        # extra kodi box?
      - type: default
        name: unknown
        mac: f8:e4:3b:bb:0c:c8
        ip: 10.0.0.65
    
      - type: cloudflare
        name: julie-macbook-air
        mac: 10:b5:88:5d:70:c9
        ip: 10.0.0.89
    
      - type: cloudflare
        name: julie-macbook
        mac: b8:8d:12:36:f1:16
        ip: 10.0.0.90
    
      # Ken is using 10.0.0.91

      - type: devnull
        name: dr-ceiling-fan
        mac: ec:64:c9:c3:d6:8d
        ip: 10.0.0.95

      - type: devnull
        name: garden-camera
        mac: f0:00:05:28:9d:2b
        ip: 10.0.0.101
    
      - type: devnull
        name: cameradvr
        mac: 00:12:41:12:e5:22
        ip: 10.0.0.158
    
      - type: default
        name: netgear-switch1
        mac: cc:40:d0:4c:3a:b6
        ip: 10.0.0.254


  roles:
    - role: router
    - role: name-resolution
    - role: statusservices