ansible rework

ansible/inventory/group_vars/all/network.yaml

@@ -0,0 +1,24 @@
+---
+# Network configuration for all hosts
+# Centralized network definitions to avoid hardcoding IPs across the codebase
+
+# VPC Network (Hetzner private network)
+vpc_network: "10.10.0.0/20"
+vpc_network_cidr: "10.10.0.0/20"
+
+# WireGuard VPN Network
+wireguard_network: "10.20.0.0/24"
+wireguard_network_cidr: "10.20.0.0/24"
+
+# Host IP Addresses
+# These are used for service communication and should match inventory
+asxpio_ops_vpc_ip: "10.10.0.10"
+asxpio_ops_wireguard_ip: "10.20.0.10"
+
+asxpio_services_vpc_ip: "10.10.0.20"
+asxpio_services_wireguard_ip: "10.20.0.20"
+
+# Trusted Networks for SSH Access
+ssh_trusted_networks:
+  - "{{ wireguard_network }}"
+  - "{{ vpc_network }}"