Showing 2 changed files with 339 additions and 373 deletions
+212 -0
inventory/hosts-local.yaml
@@ -0,0 +1,212 @@
1
+# Local Organization SSH Inventory
2
+#
3
+# This file extends or replaces the nextgen inventory for local development,
4
+# testing, and lab environments.
5
+#
6
+# Template structure follows nextgen/hosts.yaml for consistency.
7
+
8
+version: 1
9
+
10
+facts:
11
+  environment: local
12
+  organization: xdev
13
+  jump_default_port: 22
14
+  jump_default_user: bogdan
15
+  notes:
16
+    - Local lab and development infrastructure
17
+    - Uses SSH key-based auth on all machines
18
+    - is-jumper is the local entry point
19
+
20
+ssh_options:
21
+  local_defaults:
22
+    description: Local SSH compatibility options
23
+    options:
24
+      KexAlgorithms: default
25
+      Ciphers: default
26
+      HostKeyAlgorithms: default
27
+      ForwardAgent: yes
28
+      ForwardX11: no
29
+      PasswordAuthentication: no
30
+      HostbasedAuthentication: no
31
+      CheckHostIP: yes
32
+      StrictHostKeyChecking: accept-new
33
+      Tunnel: no
34
+      HashKnownHosts: yes
35
+
36
+defaults:
37
+  jump:
38
+    user: bogdan
39
+    port: 22
40
+  final_host:
41
+    user: bogdan
42
+    port: 22
43
+    connect_timeout: 5
44
+    connection_attempts: 1
45
+
46
+entrypoints:
47
+  is_jumper:
48
+    aliases: [is-jumper, 192.168.2.100]
49
+    hostname: 192.168.2.100
50
+    user: root
51
+    identity_file: ~/.ssh/keys/is-jumper_ed25519
52
+    identities_only: true
53
+
54
+jumps:
55
+  j1:
56
+    aliases: [j1, j1-local]
57
+    hostname: 10.253.51.50
58
+    port: 25904
59
+    role: primary
60
+  j2:
61
+    aliases: [j2, j2-local]
62
+    hostname: 10.253.51.52
63
+    port: 25904
64
+    role: failover
65
+
66
+groups:
67
+  local_lab:
68
+    description: Local lab and testing machines
69
+    hosts:
70
+      lab_vm1:
71
+        aliases: [lab-vm1, lab1, 192.168.2.110]
72
+        hostname: 192.168.2.110
73
+        user: bogdan
74
+      lab_vm2:
75
+        aliases: [lab-vm2, lab2, 192.168.2.111]
76
+        hostname: 192.168.2.111
77
+        user: bogdan
78
+      lab_vm3:
79
+        aliases: [lab-vm3, lab3, 192.168.2.112]
80
+        hostname: 192.168.2.112
81
+        user: bogdan
82
+      lab_router:
83
+        aliases: [lab-router, router, 192.168.2.1]
84
+        hostname: 192.168.2.1
85
+        user: admin
86
+      lab_switch:
87
+        aliases: [lab-switch, switch, 192.168.2.2]
88
+        hostname: 192.168.2.2
89
+        user: admin
90
+
91
+  local_servers:
92
+    description: Local production/staging servers
93
+    hosts:
94
+      local_nexgen:
95
+        aliases: [local-nextgen, nextgen-local, 192.168.2.103]
96
+        hostname: 192.168.2.103
97
+        user: bogdan
98
+      local_backup:
99
+        aliases: [local-backup, backup, 192.168.2.105]
100
+        hostname: 192.168.2.105
101
+        user: bogdan
102
+      local_mgmt:
103
+        aliases: [local-mgmt, mgmt, management, 192.168.2.104]
104
+        hostname: 192.168.2.104
105
+        user: bogdan
106
+      local_mon:
107
+        aliases: [local-mon, monitoring, zabbix, 192.168.2.106]
108
+        hostname: 192.168.2.106
109
+        user: bogdan
110
+
111
+  development:
112
+    description: Development and build machines
113
+    hosts:
114
+      dev_build:
115
+        aliases: [dev-build, builder, 192.168.2.120]
116
+        hostname: 192.168.2.120
117
+        user: bogdan
118
+      dev_test:
119
+        aliases: [dev-test, tester, 192.168.2.121]
120
+        hostname: 192.168.2.121
121
+        user: bogdan
122
+      dev_docs:
123
+        aliases: [dev-docs, documentation, 192.168.2.122]
124
+        hostname: 192.168.2.122
125
+        user: bogdan
126
+
127
+  reference_infrastructure:
128
+    description: Reference to company infrastructure (for testing routing)
129
+    default_jump: j1
130
+    hosts:
131
+      ref_pbx_bo:
132
+        aliases: [ref-pbx-bo, pbx-bo, 10.253.51.135]
133
+        hostname: 10.253.51.135
134
+        user: bogdan
135
+      ref_porta_db:
136
+        aliases: [ref-porta-db, porta-db, 193.16.148.11]
137
+        hostname: 193.16.148.11
138
+        user: bogdan
139
+      ref_sbc0:
140
+        aliases: [ref-sbc0, sbc0, 10.253.51.130]
141
+        hostname: 10.253.51.130
142
+        user: bogdan
143
+      ref_sbc1:
144
+        aliases: [ref-sbc1, sbc1, 10.253.51.131]
145
+        hostname: 10.253.51.131
146
+        user: bogdan
147
+
148
+  legacy_infrastructure:
149
+    description: Legacy xdev.ro and mondo-byte.ro historical servers (active)
150
+    hosts:
151
+      # xdev.ro hosts
152
+      is_jumper:
153
+        aliases: [is-jumper, is-vpn-gw]
154
+        hostname: 192.168.2.100
155
+        user: root
156
+      is_mazeri:
157
+        aliases: [is-mazeri]
158
+        hostname: 192.168.2.102
159
+        user: root
160
+      is_toltec:
161
+        aliases: [is-toltec]
162
+        hostname: 192.168.2.103
163
+        user: root
164
+      is_baobab:
165
+        aliases: [is-baobab]
166
+        hostname: 192.168.2.91
167
+        user: root
168
+      is_ebony:
169
+        aliases: [is-ebony]
170
+        hostname: 192.168.2.92
171
+        user: root
172
+      is_tapia:
173
+        aliases: [is-tapia]
174
+        hostname: 192.168.2.93
175
+        user: root
176
+      is_anjohibe:
177
+        aliases: [is-anjohibe]
178
+        hostname: 192.168.2.95
179
+        user: root
180
+      is_andrafiabe:
181
+        aliases: [is-andrafiabe]
182
+        hostname: 192.168.2.96
183
+        user: root
184
+      is_mat:
185
+        aliases: [is-mat]
186
+        hostname: 192.168.2.133
187
+        user: root
188
+      is_nasturel:
189
+        aliases: [is-nasturel]
190
+        hostname: 192.168.2.144
191
+        user: sshd
192
+      # mondo-byte.ro hosts
193
+      mt_rabit:
194
+        aliases: [mt-rabit]
195
+        hostname: 89.32.216.4
196
+        user: root
197
+      mt_xpider:
198
+        aliases: [mt-xpider]
199
+        hostname: 89.32.216.5
200
+        user: root
201
+
202
+access_policies:
203
+  rules:
204
+    - description: All local hosts use direct SSH (no jump)
205
+      scope: group:local_lab,local_servers,development,legacy_infrastructure
206
+      access: direct
207
+
208
+    - description: Reference hosts route through J1 jump
209
+      scope: group:reference_infrastructure
210
+      access: via_jump
211
+      jump_host: j1
212
+      auth_method: key
+127 -373
inventory/hosts.yaml
@@ -1,12 +1,13 @@
1 1
 version: 1
2
+
2 3
 facts:
3 4
   jump_default_port: 24
4 5
   jump_default_user: bogdan.timofte
5 6
   common_distribution_user: bogdan
6 7
   notes:
7
-  - Most distributions do not like dots in local usernames, so most final-host installs
8
-    use bogdan.
9
-  - In bogdan/root import conflicts, bogdan wins.
8
+    - Most distributions do not like dots in local usernames, so most final-host installs use bogdan.
9
+    - In bogdan/root import conflicts, bogdan wins.
10
+
10 11
 ssh_options:
11 12
   legacy_compatibility:
12 13
     description: Company-managed jump global ssh_config compatibility options
@@ -15,75 +16,30 @@ ssh_options:
15 16
       Ciphers: +aes128-cbc,3des-cbc,aes192-cbc,aes256-cbc
16 17
       HostKeyAlgorithms: +ssh-rsa
17 18
       PubkeyAcceptedAlgorithms: +ssh-rsa
18
-      ForwardAgent: true
19
-      ForwardX11: false
20
-      PasswordAuthentication: true
21
-      HostbasedAuthentication: false
22
-      CheckHostIP: true
19
+      ForwardAgent: yes
20
+      ForwardX11: no
21
+      PasswordAuthentication: yes
22
+      HostbasedAuthentication: no
23
+      CheckHostIP: yes
23 24
       StrictHostKeyChecking: ask
24
-      Tunnel: false
25
+      Tunnel: no
25 26
       SendEnv: LANG LC_* GIT_* ANSIBLE_*
26
-      HashKnownHosts: true
27
+      HashKnownHosts: yes
28
+
27 29
 company_managed:
28 30
   jump_hosts:
29
-    inherit_globals_on_targets:
30
-    - j1
31
-    - j2
31
+    inherit_globals_on_targets: [j1, j2]
32 32
     match_defaults:
33
-    - patterns:
34
-      - '*.dr0?'
35
-      - '*.ar0?'
36
-      - '*.cr01'
37
-      - '*.br01'
38
-      - '*.as??'
39
-      - '*.cs0?'
40
-      - '*.tv01'
41
-      - '*.ds0?'
42
-      - bucuresti.ines.dcm01
43
-      - bucuresti.nxdata.voip
44
-      - bucuresti.dolce.tv01
45
-      - '*dasan*'
46
-      user: bogdan.timofte
47
-      port: 22
48
-    - patterns:
49
-      - '*.olt'
50
-      user: bogdan.timofte@next-gen.ro
51
-      port: 22
52
-    - patterns:
53
-      - '*.dhcp'
54
-      - '*.shaper*'
55
-      - '*.sentinel'
56
-      - '*.scan'
57
-      - redmine
58
-      - speedtest
59
-      - webdevel
60
-      - scripting
61
-      - zabbix
62
-      - itpve-*
63
-      - cacti
64
-      - mx
65
-      - bucuresti.radius-pppoe
66
-      - flood-detector
67
-      - tacacs2
68
-      - tacacs1
69
-      - ns2
70
-      - ns1
71
-      - backup1
72
-      - gitlab
73
-      - nlg
74
-      - nexus
75
-      - dhcp-cmts
76
-      - '*.radius-db'
77
-      - jump1
78
-      - aggregator-buc
79
-      - mappix
80
-      - docker.*
81
-      - cpanel
82
-      - jump2
83
-      - nocpve-*
84
-      - ocvpn
85
-      user: bogdan.timofte
86
-      port: 24
33
+      - patterns: ["*.dr0?", "*.ar0?", "*.cr01", "*.br01", "*.as??", "*.cs0?", "*.tv01", "*.ds0?", "bucuresti.ines.dcm01", "bucuresti.nxdata.voip", "bucuresti.dolce.tv01", "*dasan*"]
34
+        user: bogdan.timofte
35
+        port: 22
36
+      - patterns: ["*.olt"]
37
+        user: bogdan.timofte@next-gen.ro
38
+        port: 22
39
+      - patterns: ["*.dhcp", "*.shaper*", "*.sentinel", "*.scan", "redmine", "speedtest", "webdevel", "scripting", "zabbix", "itpve-*", "cacti", "mx", "bucuresti.radius-pppoe", "flood-detector", "tacacs2", "tacacs1", "ns2", "ns1", "backup1", "gitlab", "nlg", "nexus", "dhcp-cmts", "*.radius-db", "jump1", "aggregator-buc", "mappix", "docker.*", "cpanel", "jump2", "nocpve-*", "ocvpn"]
40
+        user: bogdan.timofte
41
+        port: 24
42
+
87 43
 defaults:
88 44
   jump:
89 45
     user: bogdan.timofte
@@ -93,163 +49,106 @@ defaults:
93 49
     port: 22
94 50
     connect_timeout: 10
95 51
     connection_attempts: 1
52
+
96 53
 entrypoints:
97 54
   is_jumper:
98
-    aliases:
99
-    - is-jumper
55
+    aliases: [is-jumper]
100 56
     hostname: 192.168.2.100
101 57
     user: root
102 58
     identity_file: ~/.ssh/keys/is-jumper_ed25519
103 59
     identities_only: true
60
+
104 61
 jumps:
105 62
   j1:
106
-    aliases:
107
-    - j1
63
+    aliases: [j1]
108 64
     hostname: 10.253.51.50
109 65
     port: 25904
110 66
     role: primary_vpn
111 67
   j2:
112
-    aliases:
113
-    - j2
68
+    aliases: [j2]
114 69
     hostname: 10.253.51.52
115 70
     port: 25904
116 71
     role: failover_vpn
117 72
   j1_public:
118
-    aliases:
119
-    - j1
73
+    aliases: [j1]
120 74
     hostname: j1.next-gen.ro
121 75
     port: 25904
122 76
     role: emergency_public
123 77
   j2_public:
124
-    aliases:
125
-    - j2
78
+    aliases: [j2]
126 79
     hostname: j2.next-gen.ro
127 80
     port: 25904
128 81
     role: emergency_public
82
+
129 83
 groups:
130 84
   voip_applications:
131 85
     description: PBX systems
132 86
     default_jump: j1
133 87
     hosts:
134 88
       vo52:
135
-        aliases:
136
-        - vo52
137
-        - vo522
138
-        - vo52-new
139
-        - 10.253.51.140
89
+        aliases: [vo52, vo522, vo52-new, 10.253.51.140]
140 90
         hostname: 10.253.51.140
141 91
         user: root
142 92
       vo52_old:
143
-        aliases:
144
-        - vo52-old
93
+        aliases: [vo52-old]
145 94
         hostname: 193.16.148.152
146 95
         user: root
147 96
       vo53:
148
-        aliases:
149
-        - vo53
150
-        - 193.16.148.153
97
+        aliases: [vo53, 193.16.148.153]
151 98
         hostname: 193.16.148.153
152 99
         port: 60011
153 100
       elastix:
154
-        aliases:
155
-        - elastix
156
-        - 10.253.50.62
157
-        - 188.173.1.15
101
+        aliases: [elastix, 10.253.50.62, 188.173.1.15]
158 102
         hostname: 10.253.50.62
159 103
         user: root
160 104
       ss7:
161
-        aliases:
162
-        - ss7
105
+        aliases: [ss7]
163 106
         hostname: 10.253.51.138
164 107
         user: root
165 108
       voip_pbx_dispecerat:
166
-        aliases:
167
-        - voip-pbx-dispeceri
168
-        - pbx-dispeceri
169
-        - 10.253.51.134
109
+        aliases: [voip-pbx-dispeceri, pbx-dispeceri, 10.253.51.134]
170 110
         hostname: 10.253.51.134
171 111
         user: bogdan
172 112
       voip_pbx_bo:
173
-        aliases:
174
-        - voip-pbx-bo
175
-        - pbx-bo
176
-        - 10.253.51.135
113
+        aliases: [voip-pbx-bo, pbx-bo, 10.253.51.135]
177 114
         hostname: 10.253.51.135
178 115
         user: bogdan
116
+
179 117
   voip_network:
180 118
     description: VoIP network infrastructure
181 119
     default_jump: j1
182 120
     hosts:
183 121
       sbc0:
184
-        aliases:
185
-        - sbc0
186
-        - 10.253.51.130
187
-        - 10.20.30.10
188
-        - 193.16.148.197
122
+        aliases: [sbc0, 10.253.51.130, 10.20.30.10, 193.16.148.197]
189 123
         hostname: 10.253.51.130
190 124
       sbc1:
191
-        aliases:
192
-        - sbc1
193
-        - 10.253.51.131
194
-        - 10.20.30.10
195
-        - 193.16.148.194
196
-        - 193.16.148.195
197
-        - 193.16.148.196
198
-        - 193.16.148.198
199
-        - 193.16.148.199
125
+        aliases: [sbc1, 10.253.51.131, 10.20.30.10, 193.16.148.194, 193.16.148.195, 193.16.148.196, 193.16.148.198, 193.16.148.199]
200 126
         hostname: 10.253.51.131
201 127
       sbc2:
202
-        aliases:
203
-        - sbc2
204
-        - 10.253.51.132
205
-        - 10.20.30.11
128
+        aliases: [sbc2, 10.253.51.132, 10.20.30.11]
206 129
         hostname: 10.253.51.132
207 130
       voip_prov:
208
-        aliases:
209
-        - voip-prov
210
-        - 10.253.51.139
131
+        aliases: [voip-prov, 10.253.51.139]
211 132
         hostname: 10.253.51.139
212 133
       portabilitate:
213
-        aliases:
214
-        - portabilitate
215
-        - bdc
216
-        - 10.253.51.133
217
-        - 89.165.199.20
218
-        - 89.165.232.232
134
+        aliases: [portabilitate, bdc, 10.253.51.133, 89.165.199.20, 89.165.232.232]
219 135
         hostname: 10.253.51.133
136
+
220 137
   porta:
221 138
     description: PortaOne MR30 legacy
222 139
     default_jump: j1
223 140
     hosts:
224 141
       porta_sip:
225
-        aliases:
226
-        - porta-sip
227
-        - p12-sip
228
-        - p12
229
-        - p12.voip.ro
230
-        - 193.16.148.4
142
+        aliases: [porta-sip, p12-sip, p12, p12.voip.ro, 193.16.148.4]
231 143
         hostname: 193.16.148.4
232 144
       porta_web:
233
-        aliases:
234
-        - porta-web
235
-        - porta-api
236
-        - porta-slave
237
-        - porta7
238
-        - telefonie.next-gen.ro
239
-        - 193.16.148.7
145
+        aliases: [porta-web, porta-api, porta-slave, porta7, telefonie.next-gen.ro, 193.16.148.7]
240 146
         hostname: 193.16.148.7
241 147
       porta_db:
242
-        aliases:
243
-        - porta-db
244
-        - porta-master
245
-        - porta1
246
-        - 193.16.148.11
148
+        aliases: [porta-db, porta-master, porta1, 193.16.148.11]
247 149
         hostname: 193.16.148.11
248 150
       porta_config:
249
-        aliases:
250
-        - porta-config
251
-        - porta-configurator
252
-        - 193.16.148.13
151
+        aliases: [porta-config, porta-configurator, 193.16.148.13]
253 152
         hostname: 193.16.148.13
254 153
   pppoe:
255 154
     description: RADIUS and PPPOE systems
@@ -258,60 +157,42 @@ groups:
258 157
       user: bogdan.timofte
259 158
       port: 24
260 159
     patterns:
261
-      '*.radius-db':
160
+      "*.radius-db":
262 161
         connect_timeout: 10
263 162
         connection_attempts: 1
264
-      '*.radius-pppoe':
163
+      "*.radius-pppoe":
265 164
         connect_timeout: 10
266 165
         connection_attempts: 1
267 166
     hosts:
268 167
       radauti_radius_db:
269
-        aliases:
270
-        - radauti.radius-db
271
-        - 94.53.112.30
272
-        - 10.132.96.121
168
+        aliases: [radauti.radius-db, 94.53.112.30, 10.132.96.121]
273 169
         hostname: radauti.radius-db
274 170
       pascani_radius_db:
275
-        aliases:
276
-        - pascani.radius-db
277
-        - 46.214.144.7
278
-        - 10.132.0.121
171
+        aliases: [pascani.radius-db, 46.214.144.7, 10.132.0.121]
279 172
         hostname: pascani.radius-db
280 173
       falticeni_radius_db:
281
-        aliases:
282
-        - falticeni.radius-db
283
-        - 46.214.136.7
284
-        - 10.132.64.121
174
+        aliases: [falticeni.radius-db, 46.214.136.7, 10.132.64.121]
285 175
         hostname: falticeni.radius-db
286 176
       tg_frumos_radius_db:
287
-        aliases:
288
-        - tg_frumos.radius-db
289
-        - 94.53.170.7
290
-        - 10.132.32.121
177
+        aliases: [tg_frumos.radius-db, 94.53.170.7, 10.132.32.121]
291 178
         hostname: tg_frumos.radius-db
292 179
       buhusi_radius_db:
293
-        aliases:
294
-        - buhusi.radius-db
295
-        - 46.214.240.7
296
-        - 10.132.128.121
180
+        aliases: [buhusi.radius-db, 46.214.240.7, 10.132.128.121]
297 181
         hostname: buhusi.radius-db
298 182
       bucuresti_radius_pppoe:
299
-        aliases:
300
-        - bucuresti.radius-pppoe
301
-        - 188.173.1.29
183
+        aliases: [bucuresti.radius-pppoe, 188.173.1.29]
302 184
         hostname: bucuresti.radius-pppoe
185
+
303 186
   legacy_public:
304 187
     description: Legacy public VoIP jump
305 188
     default_jump: j1
306 189
     hosts:
307 190
       voce_pub:
308
-        aliases:
309
-        - voce-pub
310
-        - voce-pub2
311
-        - 188.173.0.230
191
+        aliases: [voce-pub, voce-pub2, 188.173.0.230]
312 192
         hostname: 188.173.0.230
313 193
         user: bogdan
314 194
         port: 22
195
+
315 196
   imported_jump_hosts:
316 197
     description: Hosts imported from J1/J2 user SSH configs
317 198
     default_jump: j1
@@ -320,19 +201,17 @@ groups:
320 201
       port: 24
321 202
     hosts:
322 203
       host_10_132_128_121:
323
-        aliases:
324
-        - 10.132.128.121
204
+        aliases: [10.132.128.121]
325 205
         hostname: 10.132.128.121
326 206
       host_188_173_0_163:
327
-        aliases:
328
-        - 188.173.0.163
207
+        aliases: [188.173.0.163]
329 208
         hostname: 188.173.0.163
330 209
         user: bogdan
331 210
       host_188_173_0_141:
332
-        aliases:
333
-        - 188.173.0.141
211
+        aliases: [188.173.0.141]
334 212
         hostname: 188.173.0.141
335 213
         user: bogdan
214
+
336 215
   noc:
337 216
     description: NOC hosts grouped by function
338 217
     default_jump: j1
@@ -344,87 +223,51 @@ groups:
344 223
       default_jump: j1
345 224
       hosts:
346 225
         nocpve_nxdata1:
347
-          aliases:
348
-          - nocpve-nxdata1
349
-          - 188.173.1.112
350
-          - 10.253.51.24
226
+          aliases: [nocpve-nxdata1, 188.173.1.112, 10.253.51.24]
351 227
           hostname: 10.253.51.24
352 228
           user: root
353 229
         nocpve_nxdata2:
354
-          aliases:
355
-          - nocpve-nxdata2
356
-          - 188.173.1.116
357
-          - 10.253.51.25
230
+          aliases: [nocpve-nxdata2, 188.173.1.116, 10.253.51.25]
358 231
           hostname: 10.253.51.25
359 232
           user: root
360 233
         nocpve_ines1:
361
-          aliases:
362
-          - nocpve-ines1
363
-          - 188.173.1.117
364
-          - 10.253.51.27
234
+          aliases: [nocpve-ines1, 188.173.1.117, 10.253.51.27]
365 235
           hostname: 10.253.51.27
366 236
           user: root
367 237
         nocpve_ines2:
368
-          aliases:
369
-          - nocpve-ines2
370
-          - 188.173.1.118
371
-          - 10.253.51.28
238
+          aliases: [nocpve-ines2, 188.173.1.118, 10.253.51.28]
372 239
           hostname: 10.253.51.28
373 240
           user: root
374 241
         itpve_ines1:
375
-          aliases:
376
-          - itpve-ines1
377
-          - 188.173.0.211
378
-          - 10.253.51.211
242
+          aliases: [itpve-ines1, 188.173.0.211, 10.253.51.211]
379 243
           hostname: 10.253.51.211
380 244
           user: root
381 245
         itpve_ines2:
382
-          aliases:
383
-          - itpve-ines2
384
-          - 188.173.0.212
385
-          - 10.253.51.212
246
+          aliases: [itpve-ines2, 188.173.0.212, 10.253.51.212]
386 247
           hostname: 10.253.51.212
387 248
           user: root
388 249
         itpve_ines3:
389
-          aliases:
390
-          - itpve-ines3
391
-          - 188.173.0.213
392
-          - 10.253.51.213
250
+          aliases: [itpve-ines3, 188.173.0.213, 10.253.51.213]
393 251
           hostname: 10.253.51.213
394 252
           user: root
395 253
         itpve_ines4:
396
-          aliases:
397
-          - itpve-ines4
398
-          - 188.173.0.222
399
-          - 10.253.51.222
254
+          aliases: [itpve-ines4, 188.173.0.222, 10.253.51.222]
400 255
           hostname: 10.253.51.222
401 256
           user: root
402 257
         itpve_bns1:
403
-          aliases:
404
-          - itpve-bns1
405
-          - 188.173.0.201
406
-          - 10.253.51.201
258
+          aliases: [itpve-bns1, 188.173.0.201, 10.253.51.201]
407 259
           hostname: 10.253.51.201
408 260
           user: root
409 261
         itpve_bns2:
410
-          aliases:
411
-          - itpve-bns2
412
-          - 188.173.0.202
413
-          - 10.253.51.202
262
+          aliases: [itpve-bns2, 188.173.0.202, 10.253.51.202]
414 263
           hostname: 10.253.51.202
415 264
           user: root
416 265
         itpve_bns3:
417
-          aliases:
418
-          - itpve-bns3
419
-          - 188.173.0.203
420
-          - 10.253.51.203
266
+          aliases: [itpve-bns3, 188.173.0.203, 10.253.51.203]
421 267
           hostname: 10.253.51.203
422 268
           user: root
423 269
         itpve_bns4:
424
-          aliases:
425
-          - itpve-bns4
426
-          - 188.173.0.220
427
-          - 10.253.51.204
270
+          aliases: [itpve-bns4, 188.173.0.220, 10.253.51.204]
428 271
           hostname: 10.253.51.204
429 272
           user: root
430 273
     backup:
@@ -432,11 +275,10 @@ groups:
432 275
       default_jump: j1
433 276
       hosts:
434 277
         backup_bns_01:
435
-          aliases:
436
-          - backup-bns-01
437
-          - 188.173.1.83
278
+          aliases: [backup-bns-01, 188.173.1.83]
438 279
           hostname: 188.173.1.83
439 280
           user: root
281
+
440 282
   huawei_olts:
441 283
     description: Huawei OLT access equipment with interactive password auth
442 284
     default_jump: j1
@@ -446,14 +288,12 @@ groups:
446 288
       auth: password_interactive
447 289
     hosts:
448 290
       pascani_olt:
449
-        aliases:
450
-        - pascani.olt
291
+        aliases: [pascani.olt]
451 292
         hostname: pascani.olt
452 293
       radauti_olt:
453
-        aliases:
454
-        - radauti.olt
455
-        - 10.132.96.50
294
+        aliases: [radauti.olt, 10.132.96.50]
456 295
         hostname: radauti.olt
296
+
457 297
   cisco_routers:
458 298
     description: Cisco and similar managed devices with interactive password auth
459 299
     default_jump: j1
@@ -463,115 +303,72 @@ groups:
463 303
       auth: password_interactive
464 304
     hosts:
465 305
       pascani_headend_cr01:
466
-        aliases:
467
-        - pascani.headend.cr01
468
-        - 10.132.0.97
306
+        aliases: [pascani.headend.cr01, 10.132.0.97]
469 307
         hostname: pascani.headend.cr01
470 308
       buhusi_headend_as01:
471
-        aliases:
472
-        - buhusi.headend.as01
473
-        - 10.132.128.11
309
+        aliases: [buhusi.headend.as01, 10.132.128.11]
474 310
         hostname: buhusi.headend.as01
475 311
       buhusi_headend_as02:
476
-        aliases:
477
-        - buhusi.headend.as02
478
-        - 10.132.128.12
312
+        aliases: [buhusi.headend.as02, 10.132.128.12]
479 313
         hostname: buhusi.headend.as02
480 314
       buhusi_headend_as03:
481
-        aliases:
482
-        - buhusi.headend.as03
483
-        - 10.132.128.13
315
+        aliases: [buhusi.headend.as03, 10.132.128.13]
484 316
         hostname: buhusi.headend.as03
485 317
       buhusi_headend_as04:
486
-        aliases:
487
-        - buhusi.headend.as04
488
-        - 10.132.128.14
318
+        aliases: [buhusi.headend.as04, 10.132.128.14]
489 319
         hostname: buhusi.headend.as04
490 320
       buhusi_headend_as05:
491
-        aliases:
492
-        - buhusi.headend.as05
493
-        - 10.132.128.15
321
+        aliases: [buhusi.headend.as05, 10.132.128.15]
494 322
         hostname: buhusi.headend.as05
495 323
       buhusi_headend_dr01:
496
-        aliases:
497
-        - buhusi.headend.dr01
498
-        - 10.132.128.1
324
+        aliases: [buhusi.headend.dr01, 10.132.128.1]
499 325
         hostname: buhusi.headend.dr01
500 326
       buhusi_headend_ds02:
501
-        aliases:
502
-        - buhusi.headend.ds02
503
-        - 10.132.128.5
327
+        aliases: [buhusi.headend.ds02, 10.132.128.5]
504 328
         hostname: buhusi.headend.ds02
505 329
       falticeni_headend_dr01:
506
-        aliases:
507
-        - falticeni.headend.dr01
508
-        - 10.132.64.1
330
+        aliases: [falticeni.headend.dr01, 10.132.64.1]
509 331
         hostname: falticeni.headend.dr01
510 332
       falticeni_headend_ds02:
511
-        aliases:
512
-        - falticeni.headend.ds02
513
-        - 10.132.64.5
333
+        aliases: [falticeni.headend.ds02, 10.132.64.5]
514 334
         hostname: falticeni.headend.ds02
515 335
       falticeni_headend_ds04:
516
-        aliases:
517
-        - falticeni.headend.ds04
518
-        - 10.132.64.7
336
+        aliases: [falticeni.headend.ds04, 10.132.64.7]
519 337
         hostname: falticeni.headend.ds04
520 338
       pascani_headend_as01:
521
-        aliases:
522
-        - pascani.headend.as01
523
-        - 10.132.0.5
339
+        aliases: [pascani.headend.as01, 10.132.0.5]
524 340
         hostname: pascani.headend.as01
525 341
       pascani_headend_dr01:
526
-        aliases:
527
-        - pascani.headend.dr01
528
-        - 10.132.0.1
342
+        aliases: [pascani.headend.dr01, 10.132.0.1]
529 343
         hostname: pascani.headend.dr01
530 344
       pascani_headend_dr02:
531
-        aliases:
532
-        - pascani.headend.dr02
533
-        - 10.132.0.100
345
+        aliases: [pascani.headend.dr02, 10.132.0.100]
534 346
         hostname: pascani.headend.dr02
535 347
       pascani_headend_dr03:
536
-        aliases:
537
-        - pascani.headend.dr03
538
-        - 10.132.0.99
348
+        aliases: [pascani.headend.dr03, 10.132.0.99]
539 349
         hostname: pascani.headend.dr03
540 350
       pascani_headend_ds01:
541
-        aliases:
542
-        - pascani.headend.ds01
543
-        - 10.132.0.3
351
+        aliases: [pascani.headend.ds01, 10.132.0.3]
544 352
         hostname: pascani.headend.ds01
545 353
       pascani_headend_tv01:
546
-        aliases:
547
-        - pascani.headend.tv01
548
-        - 10.132.0.101
354
+        aliases: [pascani.headend.tv01, 10.132.0.101]
549 355
         hostname: pascani.headend.tv01
550 356
       radauti_headend_as01:
551
-        aliases:
552
-        - radauti.headend.as01
553
-        - 10.132.96.11
357
+        aliases: [radauti.headend.as01, 10.132.96.11]
554 358
         hostname: radauti.headend.as01
555 359
       radauti_headend_dr01:
556
-        aliases:
557
-        - radauti.headend.dr01
558
-        - 172.30.255.101
360
+        aliases: [radauti.headend.dr01, 172.30.255.101]
559 361
         hostname: radauti.headend.dr01
560 362
       tg_frumos_headend_as01:
561
-        aliases:
562
-        - tg_frumos.headend.as01
563
-        - 10.132.32.11
363
+        aliases: [tg_frumos.headend.as01, 10.132.32.11]
564 364
         hostname: tg_frumos.headend.as01
565 365
       tg_frumos_headend_dr01:
566
-        aliases:
567
-        - tg_frumos.headend.dr01
568
-        - 10.132.32.1
366
+        aliases: [tg_frumos.headend.dr01, 10.132.32.1]
569 367
         hostname: tg_frumos.headend.dr01
570 368
       tg_frumos_headend_ds01:
571
-        aliases:
572
-        - tg_frumos.headend.ds01
573
-        - 10.132.32.3
369
+        aliases: [tg_frumos.headend.ds01, 10.132.32.3]
574 370
         hostname: tg_frumos.headend.ds01
371
+
575 372
   network_switches:
576 373
     description: DCN switches with interactive password auth
577 374
     default_jump: j1
@@ -581,45 +378,30 @@ groups:
581 378
       auth: password_interactive
582 379
     hosts:
583 380
       buhusi_psw_010:
584
-        aliases:
585
-        - buhusi-psw-010
586
-        - 10.132.128.20
381
+        aliases: [buhusi-psw-010, 10.132.128.20]
587 382
         hostname: buhusi-psw-010
588 383
       buhusi_psw_011:
589
-        aliases:
590
-        - buhusi-psw-011
591
-        - 10.132.128.21
384
+        aliases: [buhusi-psw-011, 10.132.128.21]
592 385
         hostname: buhusi-psw-011
593 386
       buhusi_psw_012:
594
-        aliases:
595
-        - buhusi-psw-012
596
-        - 10.132.128.22
387
+        aliases: [buhusi-psw-012, 10.132.128.22]
597 388
         hostname: buhusi-psw-012
598 389
       buhusi_psw_013:
599
-        aliases:
600
-        - buhusi-psw-013
601
-        - 10.132.128.23
390
+        aliases: [buhusi-psw-013, 10.132.128.23]
602 391
         hostname: buhusi-psw-013
603 392
       buhusi_psw_014:
604
-        aliases:
605
-        - buhusi-psw-014
606
-        - 10.132.128.24
393
+        aliases: [buhusi-psw-014, 10.132.128.24]
607 394
         hostname: buhusi-psw-014
608 395
       buhusi_silistea_psw_001:
609
-        aliases:
610
-        - buhusi.silistea.psw-001
611
-        - 10.132.128.50
396
+        aliases: [buhusi.silistea.psw-001, 10.132.128.50]
612 397
         hostname: buhusi.silistea.psw-001
613 398
       falticeni_psw_110:
614
-        aliases:
615
-        - falticeni-psw-110
616
-        - 10.132.64.20
399
+        aliases: [falticeni-psw-110, 10.132.64.20]
617 400
         hostname: falticeni-psw-110
618 401
       radauti_headend_ag001:
619
-        aliases:
620
-        - radauti.headend.ag001
621
-        - 10.132.96.12
402
+        aliases: [radauti.headend.ag001, 10.132.96.12]
622 403
         hostname: radauti.headend.ag001
404
+
623 405
   mikrotik_routers:
624 406
     description: MikroTik CRS/CCR equipment with interactive password auth
625 407
     default_jump: j1
@@ -629,72 +411,44 @@ groups:
629 411
       auth: password_interactive
630 412
     hosts:
631 413
       buhusi_mikrotik_dr01:
632
-        aliases:
633
-        - buhusi.mikrotik.dr01
634
-        - 10.132.128.110
414
+        aliases: [buhusi.mikrotik.dr01, 10.132.128.110]
635 415
         hostname: buhusi.mikrotik.dr01
636 416
       buhusi_mikrotik_ds01:
637
-        aliases:
638
-        - buhusi.mikrotik.ds01
639
-        - 10.132.128.100
417
+        aliases: [buhusi.mikrotik.ds01, 10.132.128.100]
640 418
         hostname: buhusi.mikrotik.ds01
641 419
       buhusi_mikrotik_pppoe01:
642
-        aliases:
643
-        - buhusi.mikrotik.pppoe01
644
-        - 10.132.128.111
420
+        aliases: [buhusi.mikrotik.pppoe01, 10.132.128.111]
645 421
         hostname: buhusi.mikrotik.pppoe01
646 422
       buhusi_mikrotik_pppoe02:
647
-        aliases:
648
-        - buhusi.mikrotik.pppoe02
649
-        - 10.132.128.112
423
+        aliases: [buhusi.mikrotik.pppoe02, 10.132.128.112]
650 424
         hostname: buhusi.mikrotik.pppoe02
651 425
       falticeni_mikrotik_dr01:
652
-        aliases:
653
-        - falticeni.mikrotik.dr01
654
-        - 10.132.64.110
426
+        aliases: [falticeni.mikrotik.dr01, 10.132.64.110]
655 427
         hostname: falticeni.mikrotik.dr01
656 428
       falticeni_mikrotik_ds01:
657
-        aliases:
658
-        - falticeni.mikrotik.ds01
659
-        - 10.132.64.100
429
+        aliases: [falticeni.mikrotik.ds01, 10.132.64.100]
660 430
         hostname: falticeni.mikrotik.ds01
661 431
       falticeni_mikrotik_pppoe1:
662
-        aliases:
663
-        - falticeni.mikrotik.pppoe1
664
-        - 10.132.64.111
432
+        aliases: [falticeni.mikrotik.pppoe1, 10.132.64.111]
665 433
         hostname: falticeni.mikrotik.pppoe1
666 434
       falticeni_mikrotik_pppoe2:
667
-        aliases:
668
-        - falticeni.mikrotik.pppoe2
669
-        - 10.132.64.112
435
+        aliases: [falticeni.mikrotik.pppoe2, 10.132.64.112]
670 436
         hostname: falticeni.mikrotik.pppoe2
671 437
       pascani_mikrotik_pppoe1:
672
-        aliases:
673
-        - pascani.mikrotik.pppoe1
674
-        - 10.132.0.111
438
+        aliases: [pascani.mikrotik.pppoe1, 10.132.0.111]
675 439
         hostname: pascani.mikrotik.pppoe1
676 440
       pascani_mikrotik_pppoe2:
677
-        aliases:
678
-        - pascani.mikrotik.pppoe2
679
-        - 10.132.0.112
441
+        aliases: [pascani.mikrotik.pppoe2, 10.132.0.112]
680 442
         hostname: pascani.mikrotik.pppoe2
681 443
       radauti_mikrotik_pppoe1:
682
-        aliases:
683
-        - radauti.mikrotik.pppoe1
684
-        - 10.132.96.111
444
+        aliases: [radauti.mikrotik.pppoe1, 10.132.96.111]
685 445
         hostname: radauti.mikrotik.pppoe1
686 446
       radauti_mikrotik_pppoe2:
687
-        aliases:
688
-        - radauti.mikrotik.pppoe2
689
-        - 10.132.96.112
447
+        aliases: [radauti.mikrotik.pppoe2, 10.132.96.112]
690 448
         hostname: radauti.mikrotik.pppoe2
691 449
       tg_frumos_mikrotik_dr01:
692
-        aliases:
693
-        - tg_frumos.mikrotik.dr01
694
-        - 94.53.170.1
450
+        aliases: [tg_frumos.mikrotik.dr01, 94.53.170.1]
695 451
         hostname: tg_frumos.mikrotik.dr01
696 452
       tg_frumos_mikrotik_pppoe1:
697
-        aliases:
698
-        - tg_frumos.mikrotik.pppoe1
699
-        - 10.132.32.111
453
+        aliases: [tg_frumos.mikrotik.pppoe1, 10.132.32.111]
700 454
         hostname: tg_frumos.mikrotik.pppoe1