#!/usr/bin/env ansible-playbook
---
# Deploy iproute2 and sysctl config files
- hosts: crans_routeurs
  roles:
    - iproute2
    - sysctl-forwarding

# Deploy firewall
- hosts: crans_routeurs
  vars:
    re2o:
      server: re2o.adm.crans.org
      service_user: "{{ vault_re2o_service_user }}"
      service_password: "{{ vault_re2o_service_password }}"
  roles:
    - firewall

# Deploy BGP server configuration on IPv4 routers
- hosts: crans_routeurs
  vars:
    zebra:
      password: "{{ vault_zebra_password }}"
    bgp:
      as: 204515
      router_id_v4: 158.255.113.73
      network_v4: 185.230.76.0/22
      neighbor_v4: 158.255.113.72
      router_id_v6: 138.231.136.200
      network_v6: 2a0c:700::/32
      neighbor_v6: 2001:1b48:2:103::bb:1
      remote_as: 8218
  roles:
    - quagga