---
# inventory/hosts.yml
# Define your pfSense hosts here.
# Group them by site, role, or redundancy pair as needed.

all:
  children:
    pfsense:
      children:

        # --- Primary/standalone firewalls ---
        pfsense_primary:
          hosts:
            fw-site-a:
              ansible_host: 192.168.1.1
              ansible_user: admin
            fw-site-b:
              ansible_host: 10.10.0.1
              ansible_user: admin

        # --- HA pairs (upgrade sequentially — serial: 1 ensures this) ---
        pfsense_ha_pair_1:
          hosts:
            fw-ha-primary:
              ansible_host: 172.16.0.1
              ansible_user: admin
            fw-ha-secondary:
              ansible_host: 172.16.0.2
              ansible_user: admin