Mostly so that the backup firewall is reachable from inside. Without this, such traffic would be routed towards the active firewall and dropped there.
Ten minutes to set up and ten hours to convince Ansible to not be quite so retarded. The list2dict filter seems to be the (or another) missing piece. Now let’s rewrite everything else using it. Or not.
Let’s keep it simple. Also editing templates in NetBox is a pain.
