---
# netprep molecule/default/verify.yml
#
# SPDX-FileCopyrightText: © 2020 Open Networking Foundation <support@opennetworking.org>
# SPDX-License-Identifier: Apache-2.0

- name: Converge
  hosts: all
  become: true
  pre_tasks:
    - name: Create an additional Docker network
      docker_network:
        name: limited_network
        driver_options:
          com.docker.network.bridge.name: docker1
        ipam_options:
          subnet: '172.27.0.0/16'
          gateway: 172.27.0.1
  tasks:
    - name: "Include netprep"
      include_role:
        name: "netprep"
  vars:
    netprep_router: true
    netprep_netplan:
      ethernets:
        eth0:
          dhcp4: true
    netprep_nftables:
      internal_if: docker0
      external_if: docker1
      services:
        - name: nginx8080
          port: 8080
          protocol: tcp
      allow_subnets:
        - 172.17.0.0/16