Lumpiasty
38f0aa699f
MikroTik: add vlan5 interface, bridge VLAN entry (ether3 tagged), IP 192.168.5.1/24, IPv6 from-pool, DHCP pool/server/network, firewall rules allowing IoT internet-only (IPv4 and IPv6), DNS input from vlan5. OpenWrt: add switch VLAN 5 (WAN+CPU tagged), br-iot bridge on eth0.5, iot interface, iot firewall zone (forward ACCEPT, input REJECT). Also remove ensure_order from all non-firewall api_modify tasks as RouterOS does not support move on those paths.
10 lines
195 B
YAML
10 lines
195 B
YAML
---
|
|
# Secret references only; actual values are loaded from OpenBao/Vault at runtime.
|
|
|
|
openbao_kv_mount: secret
|
|
|
|
openbao_fields:
|
|
iot_wifi:
|
|
path: openwrt_iot_wifi
|
|
password_key: password
|