# NOTE: This is an example hosts.yml, you will need to edit to fit your needs hosts: donkey: # donkey floatapp1 ansible_host: 37.218.241.207 groups: [backend] ips: - 37.218.241.207 # The 'ip_vpn0' is for the internal network overlay only. Assign an unique # value for each host ip_vpn0: 172.16.1.1 koala: # koala reverse proxy ansible_host: 37.218.241.31 groups: [frontend] ips: - 37.218.241.31 # The 'ip_vpn0' is for the internal network overlay only. Assign an unique # value for each host ip_vpn0: 172.16.1.2 mullet: ansible_host: 37.218.241.208 groups: [openvpn] ips: - 37.218.241.208 - 37.218.241.141 # The 'ip_vpn0' is for the internal network overlay only. Assign an unique # value for each host # ip_vpn0: 172.16.1.3 # Set the egress source address for ipv4. This address should be distinct # from the 'ip' value above to prevent traffic leaks. egress_ip: 37.218.241.141 location: Miami ansible_vpn0: 172.16.1.3 ip_vpn0: 172.16.1.3 cod: ansible_host: 37.218.245.94 groups: [openvpn] ips: - 37.218.245.94 - 37.218.245.4 ip_vpn0: 172.16.1.4 egress_ip: 37.218.245.4 location: Amsterdam ip_vpn0: 172.16.1.4 # gateway2: # ansible_host: gateway2.float.bitmask.net # groups: [openvpn] # ip_vpn0: 172.16.1.4 # ips: # - 204.13.164.252 # # If the gateway has ipv6, assign it an address here. This address will be # # used as the incoming ipv6 address for the gateway. # - 2620:13:4000:4000:8080::252 # # Set the egress source address for ipv4. This address should be distinct # # from the 'ip' value above to prevent traffic leaks. # egress_ip: 204.13.164.84 # # For each gateway that has ipv6, you should allocate two ipv6 netblocks for # # each gateway, one for TCP and one for UDP connections. These ipv6 # # netblocks should be in a different network than the ip6 address that you # # configured above. These are used by Openvpn to allocate client IPs, and # # they will be used for egress source addresses. # openvpn_tcp_network6: "2620:13:4000:eeee:eeee:eeee:eeee:0000/116" # openvpn_udp_network6: "2620:13:4000:ffff:ffff:ffff:ffff:0000/116" # location: Seattle group_vars: all: ansible_user: root ansible_become: false testing: false disable_restricted_sysctl: true