diff --git a/config.yaml b/config.yaml index 11e6cbf..0775900 100644 --- a/config.yaml +++ b/config.yaml @@ -6,8 +6,25 @@ vlans: - id: 1 name: Default + dhcp: false - id: 5 name: Native + dhcp: false + - id: 6 + name: CiscoEquip + dhcp: true + - id: 10 + name: Infra + dhcp: true + - id: 25 + name: Trusted Clients + dhcp: true + - id: 35 + name: IoT + dhcp: true + - id: 40 + name: DMZ + dhcp: true tasks: - name: Get Me @@ -38,15 +55,36 @@ ansible.builtin.debug: msg: "{{ vlans }}" - # - name: Create VLANs on MX - # cisco.meraki.networks_appliance_vlans: - # state: present - # applianceIp: "192.168.{{ item.id }}.1" - # # cidr: "192.168.{{ item.id }}.0/24" - # id: '{{ item.id }}' - # vlanId: {{ item.id }} - # name: {{ item.name }} - # networkId: "{{ nid }}" - # subnet: "192.168.{{ item.id }}.0/24" - # dnsNameservers: "9.9.9.9" - # loop: vlans + - name: Create VLANs on MX + cisco.meraki.networks_appliance_vlans: + state: present + applianceIp: "192.168.{{ item.id }}.1" + # cidr: "192.168.{{ item.id }}.0/24" + id: '{{ item.id }}' + vlanId: {{ item.id }} + name: {{ item.name }} + networkId: "{{ nid }}" + subnet: "192.168.{{ item.id }}.0/24" + loop: vlans + + - name: Enable DHCP on Relevant VLANs + cisco.meraki.networks_appliance_vlans: + state: present + id: '{{ item.id }}' + vlanId: {{ item.id }} + dhcpHandling: "Run a DHCP server" + dhcpLeaseTime: "1 day" + dnsNameservers: | + 9.9.9.9 + 149.112.112.112 + loop: vlans + when: item.dhcp + + - name: Disable DHCP on Relevant VLANs + cisco.meraki.networks_appliance_vlans: + state: present + id: '{{ item.id }}' + vlanId: {{ item.id }} + dhcpHandling: "Do not respond to DHCP requests" + loop: vlans + when: not item.dhcp diff --git a/renovate.json b/renovate.json new file mode 100644 index 0000000..ce7e6b9 --- /dev/null +++ b/renovate.json @@ -0,0 +1,35 @@ +{ + "assignAutomerge": false, + "assigneesFromCodeOwners": false, + "dependencyDashboardAutoclose": true, + "extends": ["config:recommended"], + "ignorePaths": ["**/.archive/**"], + "labels": ["type/dependencies"], + "platformCommit": "enabled", + "rebaseWhen": "behind-base-branch", + "rollbackPrs": true, + "semanticCommits": "enabled", + "semanticCommitScope": "deps", + "semanticCommitType": "feat", + "osvVulnerabilityAlerts": true, + "dependencyDashboardOSVVulnerabilitySummary": "all", + "vulnerabilityAlerts": { + "commitMessagePrefix": "[SECURITY] ", + "enabled": true, + "labels": ["security"], + "prCreation": "immediate" + }, + "lockFileMaintenance": { + "enabled": true + }, + "packageRules": [ + { + "matchDepTypes": ["devDependencies"], + "automerge": true + }, + { + "matchUpdateTypes": ["patch"], + "automerge": true + } + ] +}