network-iac

Infrastructure-as-Code für HP 1820 Switches im Heimnetz. Konfiguration in YAML, Passwörter SOPS-verschlüsselt, Deployment via Woodpecker CI.

Struktur

network-iac/
├── vlans.yml # Globale VLAN-Definitionen (Single Source of Truth)
├── switches/ # Ein File pro Switch
│ ├── sw-vt1-01.yml
│ ├── sw-vt2-01.yml
│ └── sw-vt3-01.yml
├── secrets/ # AGE-verschlüsselte Passwörter (commitbar)
│ ├── sw-vt1-01.sops.yml
│ ├── sw-vt2-01.sops.yml
│ └── sw-vt3-01.sops.yml
├── lib/hp1820/ # HP 1820 Driver
├── deploy.py # Deploy-CLI
├── .sops.yaml # SOPS-Konfiguration (AGE Public Key)
├── .woodpecker.yml # CI/CD Pipeline
└── init.md # Ersteinrichtung & Key-Rotation

Benutzung

# Dry-Run — zeigt was sich ändern würde
SOPS_AGE_KEY_FILE=secrets/age.key python deploy.py --dry-run
# Einzelnen Switch deployen
SOPS_AGE_KEY_FILE=secrets/age.key python deploy.py --switch sw-vt1-01.yml
# Alle Switches deployen
SOPS_AGE_KEY_FILE=secrets/age.key python deploy.py

CI/CD

Woodpecker-Secret sops_age_key muss hinterlegt sein (Inhalt von secrets/age.key).

Ersteinrichtung & Key-Rotation

→ init.md

Verwendete Bibliotheken