ansible/group_vars/vpn/bird.yml

---
bird__tables:
  - wg

bird__kernel:
  kernel:
    learn: true
    import: accept
    export: accept
  vrf:
    learn: true
    import:
      sources:
        - "{{ iproute2__custom_protos.wireguard }}"
    export: accept
    table: wg
    kernel: "{{ iproute2__custom_tables.wireguard }}"

bird__ospf:
  limits:
    import: 4000
    export: 4000
  table: wg
  import: accept
  export:
    sources:
      - "{{ iproute2__custom_protos.wireguard }}"
  areas:
    1:
      broadcast:
        - vpn0

bird__bgp:
  infra1:
    local:
      address: "{{ bird__bgp_addr.vpn }}"
      as: "{{ bird__as.aurore }}"
    neighbor:
      address:
        - 2a09:6840:213::1:1
        - 10.213.1.1
      as: "{{ bird__as.aurore }}"
    table: wg
    import: accept
    export: reject
    next_hop_self: true
  infra2:
    local:
      address: "{{ bird__bgp_addr.vpn }}"
      as: "{{ bird__as.aurore }}"
    neighbor:
      address:
        - 2a09:6840:213::1:2
        - 10.213.1.2
      as: "{{ bird__as.aurore }}"
    table: wg
    import: accept
    export: reject
    next_hop_self: true
...