network/setup.yml

- hosts: '*'
  roles:
    - facts

# Set up fabric.
- hosts: spine-*
  roles:
    - spine

- hosts: leaf-*
  roles:
    - leaf

- hosts: exit-*
  roles:
    - exit

# Set up access switches.
- hosts: access-*, sw-*
  gather_facts: false
  roles:
    - access

# Set up firewall.
- hosts: fw-*
  roles:
    - firewall

- hosts: zid
  roles:
    - certbot_dns
    - firewall_master
Query prefixes once for all hosts And group them into vrf_prefixes for VLAN networks and bgp_prefixes for servers plugged directly into fabric. This should reduce the number of queries to NetBox when configuring firewalls and exit switches. Not sure but I think set_fact helps to avoid queries (as opposed to setting group_vars). 2024-04-28 08:59:32 +00:00			`- hosts: '*'`
			`roles:`
			`- facts`

			`# Set up fabric.`
Initial commit, squashed 2023-12-18 10:22:14 +00:00			`- hosts: spine-*`
			`roles:`
			`- spine`

			`- hosts: leaf-*`
			`roles:`
			`- leaf`

			`- hosts: exit-*`
			`roles:`
			`- exit`

Query prefixes once for all hosts And group them into vrf_prefixes for VLAN networks and bgp_prefixes for servers plugged directly into fabric. This should reduce the number of queries to NetBox when configuring firewalls and exit switches. Not sure but I think set_fact helps to avoid queries (as opposed to setting group_vars). 2024-04-28 08:59:32 +00:00			`# Set up access switches.`
Add DC access switches 2023-12-08 16:02:55 +00:00			`- hosts: access-, sw-`
Initial commit, squashed 2023-12-18 10:22:14 +00:00			`gather_facts: false`
			`roles:`
			`- access`

Query prefixes once for all hosts And group them into vrf_prefixes for VLAN networks and bgp_prefixes for servers plugged directly into fabric. This should reduce the number of queries to NetBox when configuring firewalls and exit switches. Not sure but I think set_fact helps to avoid queries (as opposed to setting group_vars). 2024-04-28 08:59:32 +00:00			`# Set up firewall.`
Initial commit, squashed 2023-12-18 10:22:14 +00:00			`- hosts: fw-*`
			`roles:`
			`- firewall`

			`- hosts: zid`
			`roles:`
			`- certbot_dns`
			`- firewall_master`