---
- name: Configure IPv4 addresses
  community.routeros.api_modify:
    path: ip address
    data:
      - address: 172.20.0.1/24
        interface: containers
        network: 172.20.0.0
      - address: 192.168.239.1/30
        interface: nat64
        network: 192.168.239.0
      - address: 192.168.4.1/24
        interface: lo
        network: 192.168.4.0
      - address: 192.168.100.20/24
        interface: sfp-sfpplus1
        network: 192.168.100.0
      - address: 192.168.255.10/24
        interface: bridge1
        network: 192.168.255.0
      - address: 192.168.0.1/24
        interface: vlan2
        network: 192.168.0.0
      - address: 192.168.1.1/24
        interface: vlan4
        network: 192.168.1.0
      - address: 192.168.3.1/24
        interface: vlan3
        network: 192.168.3.0
      - address: 192.168.5.1/24
        interface: vlan5
        network: 192.168.5.0
      - address: 192.168.6.1/24
        interface: vlan6
        network: 192.168.6.0
    handle_absent_entries: remove
    handle_entries_content: remove_as_much_as_possible

- name: Configure IPv6 addresses
  community.routeros.api_modify:
    path: ipv6 address
    data:
      - address: fc64::1/126
        advertise: false
        comment: nat64 loopback
        interface: nat64
      - address: 2001:470:70:dd::2/64
        advertise: false
        interface: sit1
      # Static instead of from-pool: pool allocation is dynamic (first free /64,
      # e.g. ...:0::/64) which made the RDNSS address advertised in ND config
      # point at a nonexistent router address. HE prefix is static, so static
      # per-VLAN addressing is deterministic and matches docs/network.md.
      - address: 2001:470:61a3:9:ffff:ffff:ffff:ffff/64
        interface: vlan2
      - address: 2001:470:61a3:500:ffff:ffff:ffff:ffff/64
        interface: containers
      - address: 2001:470:61a3:100::1/64
        advertise: false
        interface: vlan4
      - address: 2001:470:61a3:a:ffff:ffff:ffff:ffff/64
        interface: vlan5
      - address: 2001:470:61a3:600::1/64
        advertise: false
        interface: vlan6
    handle_absent_entries: remove
    handle_entries_content: remove_as_much_as_possible