ansible/roles/keepalived/templates/keepalived.conf.j2

{{ ansible_managed | comment }}

global_defs {
    dynamic_interfaces
    script_user root
    enable_script_security
    vrrp_version 3
{% if keepalived__max_auto_priority is defined %}
    max_auto_priority {{ keepalived__max_auto_priority | int }}
{% endif %}
{% if keepalived__enable_snmp %}
    enable_snmp_vrrp
    enable_snmp_rfc
{% endif %}
{% if keepalived__enable_dbus %}
    enable_dbus
{% endif %}
}

{%
set ipv4_enabled =
    keepalived__ipv4_enabled
    | default(keepalived__virtual_addresses.values()
              | flatten | ansible.utils.ipv4)
%}
{%
set ipv6_enabled =
    keepalived__ipv6_enabled
    | default(keepalived__virtual_addresses.values()
              | flatten | ansible.utils.ipv6)
%}

{% if ipv4_enabled and ipv6_enabled %}
vrrp_sync_group group {
    group {
{% if ipv4_enabled %}
        instance_v4
{% endif %}
{% if ipv6_enabled %}
        instance_v6
{% endif %}
    }
    notify_master "/etc/keepalived/notify.sh master"
    notify_backup "/etc/keepalived/notify.sh backup"
    notify_fault "/etc/keepalived/notify.sh fault"
}
{% endif %}

{% if ipv4_enabled %}
vrrp_instance instance_v4 {
    virtual_router_id {{ keepalived__virtual_router_id | int }}
    interface {{ keepalived__interface }}
    state BACKUP
    priority {{ keepalived__main | ternary(250, 150) }}
    nopreempt
    advert_int 1
    accept
    virtual_ipaddress {
{% for dev, addresses in keepalived__virtual_addresses.items() %}
{% for address in addresses %}
{% if address | ansible.utils.ipv4 %}
        {{ address }} dev {{ dev }}
{% endif %}
{% endfor %}
{% endfor %}
    }
    virtual_routes {
{% for dev, addresses in keepalived__virtual_routes.items() %}
{% for address in addresses %}
{% if address | ansible.utils.ipv4 %}
        {{ address }} dev {{ dev }}
{% endif %}
{% endfor %}
{% endfor %}
{% for address in keepalived__virtual_blackholes | ansible.utils.ipv4 %}
        blackhole {{ address }}
{% endfor %}
    }
{% if not (ipv4_enabled and ipv6_enabled) %}
    notify_master "/etc/keepalived/notify.sh master"
    notify_backup "/etc/keepalived/notify.sh backup"
    notify_fault "/etc/keepalived/notify.sh fault"
{% endif %}
}
{% endif %}

{% if ipv6_enabled %}
vrrp_instance instance_v6 {
    virtual_router_id {{ keepalived__virtual_router_id | int }}
    interface {{ keepalived__interface }}
    state BACKUP
    priority {{ keepalived__main | ternary(250, 150) }}
    nopreempt
    advert_int 1
    accept
    virtual_ipaddress {
{% for dev, addresses in keepalived__virtual_addresses.items() %}
{% for address in addresses | ipaddr_sort(["link-local"]) %}
{% if address | ansible.utils.ipv6 %}
        {{ address }} dev {{ dev }}
{% endif %}
{% endfor %}
{% endfor %}
    }
    virtual_routes {
{% for dev, addresses in keepalived__virtual_routes.items() %}
{% for address in addresses %}
{% if address | ansible.utils.ipv6 %}
        {{ address }} dev {{ dev }}
{% endif %}
{% endfor %}
{% endfor %}
{% for addresses in keepalived__virtual_blackholes | ansible.utils.ipv6 %}
        blackhole {{ address }}
{% endfor %}
    }
{% if not (ipv4_enabled and ipv6_enabled) %}
    notify_master "/etc/keepalived/notify.sh master"
    notify_backup "/etc/keepalived/notify.sh backup"
    notify_fault "/etc/keepalived/notify.sh fault"
{% endif %}
}
{% endif %}