From 371815ce8c45e250800a571a0b7d1c76da65c74c Mon Sep 17 00:00:00 2001
From: Lumpiasty <arek.dzski@gmail.com>
Date: Mon, 22 Jun 2026 14:50:20 +0200
Subject: [PATCH] hide IoT WiFi and enable mac filter

---
 ansible/roles/openwrt/tasks/wireless.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/ansible/roles/openwrt/tasks/wireless.yml b/ansible/roles/openwrt/tasks/wireless.yml
index 568af9a..2e57f8c 100644
--- a/ansible/roles/openwrt/tasks/wireless.yml
+++ b/ansible/roles/openwrt/tasks/wireless.yml
@@ -25,6 +25,12 @@
       network: iot
       mode: ap
       ssid: szafa
+      hidden: '1' # Stop broadcasting SSID
+      macfilter: allow # Apply MAC filter allowing only specific addresses
+      maclist:
+        - 80:64:7c:99:21:20 # Thermomether
+        - C0:F8:53:89:E5:EF # Smart plug
+        - C0:F8:53:89:E3:42 # smart plug
       encryption: psk2
       key: "{{ openwrt_iot_wifi_password }}"
       disabled: '0'