Added pfsense upgrade roles

playbooks/pfsense_manage.yml

@@ -0,0 +1,24 @@
+---
+# pfSense Upgrade Playbook
+# Upgrades pfSense systems within their current version branch.
+# Detects available stable releases and reports or applies upgrades.
+#
+# Usage:
+#   ansible-playbook upgrade.yml -i inventory/hosts.yml
+#   ansible-playbook upgrade.yml -i inventory/hosts.yml --tags check   # dry-run only
+#   ansible-playbook upgrade.yml -i inventory/hosts.yml -e "perform_upgrade=true"
+#   ansible-playbook upgrade.yml -i inventory/hosts.yml -e "perform_upgrade=true allow_major_upgrade=true"
+
+- name: pfSense Upgrade
+  hosts: pfsense
+  gather_facts: false
+  serial: 1                          # Upgrade one host at a time to preserve redundancy
+
+  vars:
+    perform_upgrade: false           # Safety gate — must be explicitly set to true
+    allow_major_upgrade: false       # Set true to allow crossing major version branches
+    reboot_timeout: 300              # Seconds to wait for host after reboot
+    upgrade_check_timeout: 120       # Seconds before pfSense-upgrade check times out
+
+  roles:
+    - pfsense_upgrade