iac/ansible/inventory/group_vars/all/network.yaml
2025-11-04 11:06:35 +02:00

24 lines
673 B
YAML

---
# Network configuration for all hosts
# Centralized network definitions to avoid hardcoding IPs across the codebase
# VPC Network (Hetzner private network)
vpc_network: "10.10.0.0/20"
vpc_network_cidr: "10.10.0.0/20"
# WireGuard VPN Network
wireguard_network: "10.20.0.0/24"
wireguard_network_cidr: "10.20.0.0/24"
# Host IP Addresses
# These are used for service communication and should match inventory
asxpio_ops_vpc_ip: "10.10.0.10"
asxpio_ops_wireguard_ip: "10.20.0.10"
asxpio_services_vpc_ip: "10.10.0.20"
asxpio_services_wireguard_ip: "10.20.0.20"
# Trusted Networks for SSH Access
ssh_trusted_networks:
- "{{ wireguard_network }}"
- "{{ vpc_network }}"