ansible/roles/networking/templates/debian_interfaces.j2

{{ ansible_managed | comment }}

# The loopback network interface
auto lo
iface lo inet loopback

{% for item in lookup('dict', interfaces, wantlist=True) %}
{% if item.value.type not in ['wireguard', 'void', ] %}
auto {{ item.key }}
{% if item.value.type == 'dhcp' %}
iface {{ item.key }} inet dhcp
{% elif item.value.type == 'static' %}
iface {{ item.key }} inet static
{% elif item.value.type == 'manual' %}
iface {{ item.key }} inet manual
{% endif %}
{% if 'routes' in item.value %}{# route up #}
{% for route in item.value.routes %}
    post-up ip route add {{ route.subnet }}/{{ route.netmask }} via {{ route.gateway }}
{% endfor %}
{% endif %}{# end route up #}
{% if 'ipv4' in item.value %}
    address {{ item.value.ipv4 }}/{{ item.value.netmaskv4 }}
{% endif %}
{% if 'gateway' in item.value %}
    gateway {{ item.value.gateway }}
{% endif %}
{% if 'bridge' in item.value and item.value.bridge %}
{% if 'interfaces' in item.value and item.value.interfaces %}
    bridge-ports {{ item.value.interfaces | join(' ') }}
{% else %}
    bridge-ports none
{% endif %}
    bridge-stp off
    bridge-fd 0
{% endif %}
{% if 'routes' in item.value %}{# route dw #}
{% for route in item.value.routes %}
    post-down ip route del {{ route.subnet }}/{{ route.netmask }} via {{ route.gateway }}
{% endfor %}
{% endif %}{# end route dw #}

{% elif item.value.type == 'void' %}{# end (not in [wireguard, void, ]) #}
iface {{ item.key }} inet manual

{% endif %}
{% endfor %}